last executing test programs: 58.244516278s ago: executing program 2 (id=5123): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@var, @func, @union={0x7, 0x5, 0x0, 0x5, 0x1, 0x100, [{0xf, 0x2, 0x7f}, {0x7, 0x0, 0x6}, {0x1, 0x3, 0x7}, {0xe, 0x1, 0x1}, {0x1, 0x5, 0xa0}]}]}}, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000c0000000c00ebff0100000000000000000000040000000000000000004000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r2, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) 54.923403367s ago: executing program 2 (id=5133): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x802050, &(0x7f0000000380)=ANY=[]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) 52.970384346s ago: executing program 2 (id=5137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004002562721400000100000080eebf5199cf30549e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x93}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x40, '\x00', r6, 0x1b, r4, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r4, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x1, 0xc, 0xc}, {0x5, 0x5, 0x9, 0x7}], 0x10, 0x8, @void, @value}, 0x94) 50.301493716s ago: executing program 2 (id=5140): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$tcp_mem(r1, &(0x7f0000000500)={0xfffffffffffffffa}, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) r6 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0xfffffe00, 0x9}}], 0x38) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 47.28688381s ago: executing program 4 (id=5149): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x110}}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7f}]}]}, 0x30}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xbb62, 0x103900) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x40000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 43.020822882s ago: executing program 4 (id=5153): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x351140, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x8) epoll_create(0x803) r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) init_module(&(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7fffeffc) openat$cgroup_ro(r3, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000240)=0x855b, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB]) ftruncate(0xffffffffffffffff, 0x200000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0x0, 0x0) write$binfmt_script(r6, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) 42.790258147s ago: executing program 4 (id=5158): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x802050, &(0x7f0000000380)=ANY=[]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) 41.868409651s ago: executing program 4 (id=5159): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2a200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x65, 0x4, r1, 0x0, &(0x7f00007e9000/0x1000)=nil, 0x1000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 41.825243113s ago: executing program 1 (id=5160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180073e79314c136dd4d00000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080", @ANYRES32, @ANYBLOB="00000000000000000000000000000000f6ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) bind$inet(r4, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) 40.545278281s ago: executing program 4 (id=5161): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20) 40.532092004s ago: executing program 1 (id=5162): openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0xfffffffffffffc5b) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000240)={0x20}, 0xfffffffffffffedb) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) r2 = dup(0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000b00)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) 40.01411933s ago: executing program 4 (id=5164): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) 6.294042384s ago: executing program 3 (id=5165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004002562721400000100000080eebf5199cf30549e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x93}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x40, '\x00', r6, 0x1b, r4, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r4, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x1, 0xc, 0xc}, {0x5, 0x5, 0x9, 0x7}], 0x10, 0x8, @void, @value}, 0x94) 5.05952817s ago: executing program 3 (id=5171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.894056232s ago: executing program 3 (id=5172): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20) 4.82598013s ago: executing program 0 (id=5173): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x103982, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x0) 4.686331145s ago: executing program 3 (id=5174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x47e000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000400)=[0x5], &(0x7f0000000200), &(0x7f0000000040)}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) 4.303190643s ago: executing program 0 (id=5175): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x802050, &(0x7f0000000380)=ANY=[]) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, &(0x7f0000000340)) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) 3.405940476s ago: executing program 3 (id=5176): syz_open_dev$dri(0x0, 0x3ff, 0x4f6482) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = getpid() process_vm_readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000d80)=""/101, 0x65}, {&(0x7f0000000800)=""/27, 0x1b}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/155, 0x9b}], 0x5, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/195, 0xc3}, {&(0x7f00000006c0)=""/7, 0x7}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/70, 0x46}, {&(0x7f0000000c00)=""/232, 0xe8}], 0x5, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000280)=r4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x200000000000015a, &(0x7f00000003c0)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='host1x_channel_submit_complete\x00', r5, 0x0, 0x80000000025}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000028000c80080002400000000008000140000000001400030076657468315f09005f6873720000000014000000020a090100000000000000000000000014000000110001"], 0xb0}}, 0x0) prctl$PR_MCE_KILL(0x41, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000da5ef908030410600001100101010902120001000000000904"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80), 0x0, 0x5) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f00000005c0)=""/247) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800000012000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000fd00000000000000000500000005000000"], 0xf8}}, 0x800) 3.370434787s ago: executing program 0 (id=5177): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.280944646s ago: executing program 0 (id=5178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004002562721400000100000080eebf5199cf30549e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x93}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x40, '\x00', r6, 0x1b, r4, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r4, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x1, 0xc, 0xc}, {0x5, 0x5, 0x9, 0x7}], 0x10, 0x8, @void, @value}, 0x94) 1.091683549s ago: executing program 0 (id=5179): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r2, @ANYBLOB="ae"], 0x20}}, 0x0) r4 = creat(0x0, 0xd931d3864d39dcca) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x2, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x14) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x20000000}, 0x0, 0x7, 0x1}, {{@in6=@local, 0x4d2, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}}, 0xe8) sendmmsg$inet6(r10, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000060000000000000000004000dfda01f4", @ANYRES32=r2, @ANYBLOB="032a020000000000"], 0x20}, 0x1, 0x500}, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 1.083657316s ago: executing program 1 (id=5166): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000610000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.082560548s ago: executing program 2 (id=5163): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x110}}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7f}]}]}, 0x30}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xbb62, 0x103900) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x40000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 872.624395ms ago: executing program 1 (id=5180): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2a200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x65, 0x4, r1, 0x0, &(0x7f00007e9000/0x1000)=nil, 0x1000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 530.207887ms ago: executing program 1 (id=5181): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20) 186.245643ms ago: executing program 1 (id=5182): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@remote, @remote, @default, @default, @bcast, @bcast, @rose]}, &(0x7f0000000140)=0x48, 0x80800) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x103982, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)) read(r0, 0x0, 0x0) 89.444733ms ago: executing program 3 (id=5183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x47e000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000400)=[0x5], &(0x7f0000000200), &(0x7f0000000040)}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) 5.739257ms ago: executing program 0 (id=5184): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, &(0x7f0000000340)) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) 0s ago: executing program 2 (id=5185): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): ] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2524.466162][T26064] hsr_slave_0: entered promiscuous mode [ 2524.489086][T26064] hsr_slave_1: entered promiscuous mode [ 2524.502698][T26064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2524.520017][T26064] Cannot create hsr debugfs directory [ 2524.636122][T25979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2525.468177][T26270] tipc: Enabling of bearer rejected, already enabled [ 2525.607035][T25899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2525.636942][T25899] 8021q: adding VLAN 0 to HW filter on device team0 [ 2525.758460][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2525.765668][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2525.792725][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2525.799883][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2526.984190][T26288] coredump: 172(syz.3.4733): written to core: VMAs: 36, size 97476608; core: 71771234 bytes, pos 97484800 [ 2528.111275][T25979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2528.449549][T25979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2528.556567][T26304] tipc: Enabling of bearer rejected, already enabled [ 2529.148566][T25979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.297489][T25899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2529.365568][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.374340][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.384749][T25979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.582717][T25899] veth0_vlan: entered promiscuous mode [ 2530.254527][T26066] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2530.267669][T26066] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2530.300208][T25899] veth1_vlan: entered promiscuous mode [ 2530.366225][T26066] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2530.382026][T26066] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2530.699308][T25899] veth0_macvtap: entered promiscuous mode [ 2530.717799][T25899] veth1_macvtap: entered promiscuous mode [ 2530.830390][T26066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2530.851681][T26066] 8021q: adding VLAN 0 to HW filter on device team0 [ 2530.869542][T25979] bridge_slave_1: left allmulticast mode [ 2530.877086][T25979] bridge_slave_1: left promiscuous mode [ 2530.887426][T25979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2530.920474][T25979] bridge_slave_0: left allmulticast mode [ 2530.926205][T25979] bridge_slave_0: left promiscuous mode [ 2530.939866][T25979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2530.960541][T25979] bridge_slave_1: left allmulticast mode [ 2530.967390][T25979] bridge_slave_1: left promiscuous mode [ 2530.979462][T25979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2530.988382][T25979] bridge_slave_0: left allmulticast mode [ 2530.994646][T25979] bridge_slave_0: left promiscuous mode [ 2531.000799][T25979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2531.014145][T25979] bridge_slave_1: left allmulticast mode [ 2531.020823][T25979] bridge_slave_1: left promiscuous mode [ 2531.026588][T25979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2531.758964][T25979] bridge_slave_0: left allmulticast mode [ 2531.764770][T25979] bridge_slave_0: left promiscuous mode [ 2531.776925][T25979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2532.998681][T25979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2533.010771][T25979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2533.022142][T25979] bond0 (unregistering): Released all slaves [ 2533.234454][T25979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2533.245917][T25979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2533.260888][T25979] bond0 (unregistering): Released all slaves [ 2533.489072][T25979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2533.501203][T25979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2533.512120][T25979] bond0 (unregistering): Released all slaves [ 2533.560326][T26334] tipc: Enabling of bearer rejected, already enabled [ 2533.819588][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2533.846445][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2533.860121][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2533.893007][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2533.911197][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2533.931874][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2533.951274][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2533.971007][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2533.996949][T25899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2534.009580][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.020215][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.030892][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.043815][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.053998][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.064629][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.076118][T25899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.086913][T25899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.122046][T25899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2534.209966][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2534.217258][T13041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2534.271927][T25979] tipc: Disabling bearer [ 2534.281040][T25979] tipc: Left network mode [ 2534.529396][T25979] tipc: Disabling bearer [ 2534.534887][T25979] tipc: Left network mode [ 2534.550131][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2534.557419][ T5438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2534.870485][T13664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2534.881934][T13664] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2534.895137][T13664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2534.907965][T13664] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2534.920180][T13664] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2534.927571][T13664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2535.222751][T26066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2535.678761][T26341] chnl_net:caif_netlink_parms(): no params data found [ 2535.802630][T26052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2535.837678][T26052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2535.992970][T26052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2536.003015][T26052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2536.105141][T26341] bridge0: port 1(bridge_slave_0) entered blocking state [ 2536.136321][T26341] bridge0: port 1(bridge_slave_0) entered disabled state [ 2536.148202][T26341] bridge_slave_0: entered allmulticast mode [ 2536.157938][T26341] bridge_slave_0: entered promiscuous mode [ 2536.182788][T25979] hsr_slave_0: left promiscuous mode [ 2536.193854][T25979] hsr_slave_1: left promiscuous mode [ 2536.203515][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2536.212056][T25979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2536.230650][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2536.238142][T25979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2536.259743][T25979] hsr_slave_0: left promiscuous mode [ 2536.265838][T25979] hsr_slave_1: left promiscuous mode [ 2536.282445][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2536.299262][T25979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2536.311209][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2536.328298][T25979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2536.342817][T25979] hsr_slave_0: left promiscuous mode [ 2536.358426][T25979] hsr_slave_1: left promiscuous mode [ 2536.371305][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2536.393127][T25979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2536.403504][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2536.411454][T25979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2536.505381][T25979] veth1_macvtap: left promiscuous mode [ 2536.512187][T25979] veth0_macvtap: left promiscuous mode [ 2536.517892][T25979] veth1_vlan: left promiscuous mode [ 2536.524413][T25979] veth0_vlan: left promiscuous mode [ 2536.531766][T25979] veth1_macvtap: left promiscuous mode [ 2536.537373][T25979] veth0_macvtap: left promiscuous mode [ 2536.548887][T25979] veth1_vlan: left promiscuous mode [ 2536.554798][T25979] veth0_vlan: left promiscuous mode [ 2536.611952][T25979] veth1_macvtap: left promiscuous mode [ 2536.617555][T25979] veth0_macvtap: left promiscuous mode [ 2536.624428][T25979] veth1_vlan: left promiscuous mode [ 2536.629905][T25979] veth0_vlan: left promiscuous mode [ 2537.015647][T13664] Bluetooth: hci1: command tx timeout [ 2538.766885][T26356] coredump: 204(syz.3.4740): written to core: VMAs: 36, size 97476608; core: 71771234 bytes, pos 97484800 [ 2538.949716][T25979] team0 (unregistering): Port device team_slave_1 removed [ 2539.067040][T25979] team0 (unregistering): Port device team_slave_0 removed [ 2539.108883][T13664] Bluetooth: hci1: command tx timeout [ 2540.733637][T25979] team0 (unregistering): Port device team_slave_1 removed [ 2540.801423][T25979] team0 (unregistering): Port device team_slave_0 removed [ 2541.213716][T13664] Bluetooth: hci1: command tx timeout [ 2542.080239][T25979] team0 (unregistering): Port device team_slave_1 removed [ 2542.145897][T25979] team0 (unregistering): Port device team_slave_0 removed [ 2542.886364][T26341] bridge0: port 2(bridge_slave_1) entered blocking state [ 2542.893598][T26341] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.904999][T26341] bridge_slave_1: entered allmulticast mode [ 2542.912226][T26341] bridge_slave_1: entered promiscuous mode [ 2542.920451][T26066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2542.940997][T26366] tipc: Enabling of bearer rejected, already enabled [ 2542.996644][T26064] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2543.017994][T26064] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2543.049173][T26064] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2543.148813][T26064] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2543.259134][T26341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2543.308009][T13664] Bluetooth: hci1: command tx timeout [ 2543.314432][T26341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2543.424291][T26341] team0: Port device team_slave_0 added [ 2544.014822][T26368] udevd[26368]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2544.044604][T26341] team0: Port device team_slave_1 added [ 2544.203445][T26341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2544.210458][T26341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2544.240759][T26341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2544.253586][T26341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2544.260919][T26341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2544.321625][T26341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2544.492137][T26341] hsr_slave_0: entered promiscuous mode [ 2544.519469][T26341] hsr_slave_1: entered promiscuous mode [ 2544.606362][T26066] veth0_vlan: entered promiscuous mode [ 2544.720845][T26052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2544.740869][T26066] veth1_vlan: entered promiscuous mode [ 2544.778358][T26064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2544.842696][T26052] 8021q: adding VLAN 0 to HW filter on device team0 [ 2544.949463][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2544.956731][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2544.972115][T26064] 8021q: adding VLAN 0 to HW filter on device team0 [ 2545.301830][T26391] tipc: Enabling of bearer rejected, already enabled [ 2545.663730][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2545.670892][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2545.703846][T26066] veth0_macvtap: entered promiscuous mode [ 2545.721369][T26066] veth1_macvtap: entered promiscuous mode [ 2545.832179][T26052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2545.842905][T26052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2545.872276][T21543] bridge0: port 1(bridge_slave_0) entered blocking state [ 2545.879507][T21543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2545.958103][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2545.969103][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2545.979339][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2545.990064][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2546.001893][T26066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2546.051955][T21543] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.059190][T21543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2546.075053][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2546.085950][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2546.095940][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2546.114142][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2546.142722][T26066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2546.190706][T26066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2546.216349][T26066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2546.227309][T26066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2546.255141][T26066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2546.621036][T26052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2546.896226][T21543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2546.937892][T21543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2546.991365][T22788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2547.023444][T22788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2547.045964][T26052] veth0_vlan: entered promiscuous mode [ 2547.101986][T26052] veth1_vlan: entered promiscuous mode [ 2547.115054][T25979] bridge_slave_1: left allmulticast mode [ 2547.140603][T25979] bridge_slave_1: left promiscuous mode [ 2547.161151][T25979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.243850][T25979] bridge_slave_0: left allmulticast mode [ 2547.265104][T25979] bridge_slave_0: left promiscuous mode [ 2547.270901][T25979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.402110][T25979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2550.425747][T25979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2550.446521][T25979] bond0 (unregistering): Released all slaves [ 2550.480560][T26421] tipc: Started in network mode [ 2550.485497][T26421] tipc: Node identity ac1414aa, cluster identity 4711 [ 2550.492629][T26421] tipc: New replicast peer: 100.1.1.1 [ 2550.498199][T26421] tipc: Enabled bearer , priority 10 [ 2550.715570][T26341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2550.744806][T26341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2550.775135][T26052] veth0_macvtap: entered promiscuous mode [ 2550.816498][T25979] hsr_slave_0: left promiscuous mode [ 2550.826651][T25979] hsr_slave_1: left promiscuous mode [ 2550.955903][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2551.067630][T25979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2551.130123][T25979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2551.148678][T25979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2551.372460][T25979] veth1_macvtap: left promiscuous mode [ 2551.435757][T25979] veth0_macvtap: left promiscuous mode [ 2551.455196][T25979] veth1_vlan: left promiscuous mode [ 2551.464021][T25979] veth0_vlan: left promiscuous mode [ 2551.496029][T25105] tipc: Node number set to 2886997162 [ 2552.648252][T26401] coredump: 236(syz.3.4747): written to core: VMAs: 36, size 97476608; core: 71771234 bytes, pos 97484800 [ 2553.740988][T25979] team0 (unregistering): Port device team_slave_1 removed [ 2553.863173][T25979] team0 (unregistering): Port device team_slave_0 removed [ 2555.727837][T26341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2555.778779][T26052] veth1_macvtap: entered promiscuous mode [ 2555.788042][T26449] tipc: Enabling of bearer rejected, already enabled [ 2555.806353][T26052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2555.816948][T26052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2555.826870][T26052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2555.837533][T26052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2555.849006][T26052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2555.858934][T26052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2555.869530][T26052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2555.879461][T26052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2555.890009][T26052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2555.901186][T26052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2555.912482][T26052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.921277][T26052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.930078][T26052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.938883][T26052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.011414][T26341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2556.043953][T26064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2556.890808][T26452] coredump: 22(syz.4.4755): written to core: VMAs: 36, size 97476608; core: 71767138 bytes, pos 97484800 [ 2556.943921][T13041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.009234][T13041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.132317][T13041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.150022][T13041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.185453][T26064] veth0_vlan: entered promiscuous mode [ 2557.226585][T26341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2557.311005][ T5222] Bluetooth: hci4: command 0x0406 tx timeout [ 2557.430867][T26474] syzkaller0: entered promiscuous mode [ 2557.491763][T26474] syzkaller0: entered allmulticast mode [ 2557.546547][T26470] Bluetooth: hci3: invalid length 0, exp 2 for type 27 [ 2557.658584][T26475] tipc: Enabling of bearer rejected, already enabled [ 2557.693313][T26064] veth1_vlan: entered promiscuous mode [ 2557.806693][T26341] 8021q: adding VLAN 0 to HW filter on device team0 [ 2557.913942][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2557.921241][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2559.051873][T26064] veth0_macvtap: entered promiscuous mode [ 2559.107489][T26064] veth1_macvtap: entered promiscuous mode [ 2559.117188][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2559.124340][ T5438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2559.202323][T26341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2559.417692][T26064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2559.468623][T26064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.508620][T26064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2559.538082][T26064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.568961][T26064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2559.592306][T26064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.622951][T26064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2559.712224][T26064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2559.750703][T26064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.810295][T26064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2559.851701][T26064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.890935][T26064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2559.930765][T26064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.972464][T26064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2560.022933][T26064] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.090310][T26064] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.140263][T26064] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.031492][T26064] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.783641][T26524] coredump: 13(syz.0.4763): written to core: VMAs: 36, size 97476608; core: 71771234 bytes, pos 97484800 [ 2562.435799][T26341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2562.670347][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2562.737268][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2563.492040][T26341] veth0_vlan: entered promiscuous mode [ 2563.576452][T25979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2563.585069][T25979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2564.013231][T26341] veth1_vlan: entered promiscuous mode [ 2564.044686][T26546] coredump: 46(syz.4.4768): written to core: VMAs: 3, size 12439552; core: 187091 bytes, pos 12443648 [ 2565.375428][T26549] syzkaller0: entered promiscuous mode [ 2565.748445][T26549] syzkaller0: entered allmulticast mode [ 2565.780694][T26341] veth0_macvtap: entered promiscuous mode [ 2565.944335][T26557] Bluetooth: hci3: unsupported parameter 28 [ 2565.974147][T26557] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 2566.006541][T26341] veth1_macvtap: entered promiscuous mode [ 2566.024627][T26563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4771'. [ 2566.062693][T26563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4771'. [ 2566.104742][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.342461][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.353734][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.368017][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.378194][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.599338][T26570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2567.367040][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.377061][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2567.387556][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.400013][T26341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2567.409969][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2568.233338][T13664] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 2568.290665][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.310260][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2568.354676][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.367529][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2568.383795][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.406566][T26341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2568.421442][T26341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.623849][T26341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2568.749935][T26341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2568.786113][T26341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2568.816546][T26341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2568.856410][T26341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2569.686691][T26584] coredump: 291(syz.3.4775): written to core: VMAs: 36, size 97476608; core: 71771234 bytes, pos 97484800 [ 2571.011271][T21543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2571.035152][T21543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2571.074385][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4779'. [ 2571.110480][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4779'. [ 2571.132262][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2571.144320][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2572.191657][T26610] udevd[26610]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2575.291879][T26632] Bluetooth: hci3: invalid length 0, exp 2 for type 27 [ 2576.554397][T26652] tipc: Started in network mode [ 2576.559354][T26652] tipc: Node identity ac1414aa, cluster identity 4711 [ 2576.566532][T26652] tipc: New replicast peer: 100.1.1.1 [ 2576.572101][T26652] tipc: Enabled bearer , priority 10 [ 2577.821710][T26588] udevd[26588]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2578.101304][T13506] tipc: Node number set to 2886997162 [ 2580.391149][T26701] xt_hashlimit: overflow, try lower: 3/0 [ 2583.835194][T26721] hub 9-0:1.0: USB hub found [ 2583.842452][T26721] hub 9-0:1.0: 8 ports detected [ 2583.874730][T26723] tipc: Enabling of bearer rejected, already enabled [ 2584.408370][ T5222] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 2584.415721][ T5222] Bluetooth: Wrong link type (-22) [ 2584.421347][ T5222] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 2584.685501][ T5222] Bluetooth: Wrong link type (-22) [ 2584.690815][ T5222] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 2584.698192][ T5222] Bluetooth: Wrong link type (-22) [ 2584.703460][ T5222] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 2584.710010][ T5222] Bluetooth: Wrong link type (-22) [ 2584.715861][ T5222] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 2584.722402][ T5222] Bluetooth: Wrong link type (-22) [ 2584.728239][ T5222] Bluetooth: hci2: link tx timeout [ 2584.734037][ T5222] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2586.241782][T26747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4813'. [ 2587.400009][ T5222] Bluetooth: hci2: command 0x0406 tx timeout [ 2587.554222][T26755] xt_hashlimit: overflow, try lower: 3/0 [ 2588.618176][T26756] 9pnet_fd: Insufficient options for proto=fd [ 2589.778965][T13506] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2589.786935][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 2590.007990][T26772] tipc: Enabling of bearer rejected, already enabled [ 2591.120427][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.139961][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.835567][T13506] usb 3-1: device descriptor read/64, error -32 [ 2591.974235][T13664] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 2591.999490][T13664] CPU: 0 UID: 0 PID: 13664 Comm: kworker/u9:0 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2592.010139][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2592.020204][T13664] Workqueue: hci0 hci_rx_work [ 2592.024939][T13664] Call Trace: [ 2592.028226][T13664] [ 2592.031161][T13664] dump_stack_lvl+0x241/0x360 [ 2592.035884][T13664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2592.041093][T13664] ? __pfx__printk+0x10/0x10 [ 2592.045693][T13664] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 2592.050993][T13664] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 2592.056651][T13664] sysfs_create_dir_ns+0x2ce/0x3a0 [ 2592.061770][T13664] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2592.067416][T13664] kobject_add_internal+0x435/0x8d0 [ 2592.072652][T13664] kobject_add+0x152/0x220 [ 2592.077117][T13664] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2592.082351][T13664] ? device_add+0x3e7/0xbf0 [ 2592.086901][T13664] ? __pfx_kobject_add+0x10/0x10 [ 2592.091869][T13664] ? _raw_spin_unlock+0x28/0x50 [ 2592.096749][T13664] ? get_device_parent+0x165/0x410 [ 2592.101880][T13664] device_add+0x4e5/0xbf0 [ 2592.106229][T13664] hci_conn_add_sysfs+0xe8/0x200 [ 2592.111209][T13664] le_conn_complete_evt+0xc9f/0x12e0 [ 2592.116560][T13664] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2592.122328][T13664] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2592.128010][T13664] ? __copy_skb_header+0x437/0x5b0 [ 2592.133186][T13664] ? skb_pull_data+0x112/0x230 [ 2592.138020][T13664] hci_le_enh_conn_complete_evt+0x185/0x420 [ 2592.143978][T13664] hci_event_packet+0xa55/0x1540 [ 2592.148968][T13664] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2592.154345][T13664] ? __pfx_hci_event_packet+0x10/0x10 [ 2592.159775][T13664] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2592.165005][T13664] ? hci_send_to_monitor+0xd8/0x7f0 [ 2592.170235][T13664] ? kcov_remote_start+0x97/0x7d0 [ 2592.175311][T13664] hci_rx_work+0x3e8/0xca0 [ 2592.179865][T13664] ? process_scheduled_works+0x976/0x1850 [ 2592.185600][T13664] process_scheduled_works+0xa63/0x1850 [ 2592.191183][T13664] ? __pfx_process_scheduled_works+0x10/0x10 [ 2592.197186][T13664] ? assign_work+0x364/0x3d0 [ 2592.201788][T13664] worker_thread+0x870/0xd30 [ 2592.206488][T13664] ? __kthread_parkme+0x169/0x1d0 [ 2592.211533][T13664] ? __pfx_worker_thread+0x10/0x10 [ 2592.216664][T13664] kthread+0x2f0/0x390 [ 2592.220774][T13664] ? __pfx_worker_thread+0x10/0x10 [ 2592.226284][T13664] ? __pfx_kthread+0x10/0x10 [ 2592.230921][T13664] ret_from_fork+0x4b/0x80 [ 2592.235388][T13664] ? __pfx_kthread+0x10/0x10 [ 2592.240021][T13664] ret_from_fork_asm+0x1a/0x30 [ 2592.244807][T13664] [ 2592.249083][T13664] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2592.263885][T13664] Bluetooth: hci0: failed to register connection device [ 2592.461532][T26801] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 2592.788753][T26806] iso9660: Unknown parameter '' [ 2592.808176][T26806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4826'. [ 2593.602316][T26807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4827'. [ 2593.741919][T26812] 9pnet_fd: Insufficient options for proto=fd [ 2594.008332][T26818] tipc: Enabling of bearer rejected, already enabled [ 2596.125447][ T29] audit: type=1326 audit(2000002056.395:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26819 comm="syz.1.4831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efebcd7def9 code=0x0 [ 2596.313940][T26839] team0: entered promiscuous mode [ 2596.327063][T26839] team_slave_0: entered promiscuous mode [ 2596.364478][T26839] team_slave_1: entered promiscuous mode [ 2596.397906][T26837] team0: left promiscuous mode [ 2597.322127][T26837] team_slave_0: left promiscuous mode [ 2597.334343][T26837] team_slave_1: left promiscuous mode [ 2597.677251][T26854] futex_wake_op: syz.4.4840 tries to shift op by -1; fix this program [ 2597.706394][T26854] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4840'. [ 2599.938215][ T5222] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2600.482668][T26861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4841'. [ 2601.407562][T26857] Process accounting resumed [ 2610.652211][T26892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2610.741224][T26892] batadv_slave_0: entered promiscuous mode [ 2610.902696][T26897] sp0: Synchronizing with TNC [ 2611.304823][T13664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2611.316147][T13664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2611.324330][T13664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2611.335103][T13664] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2611.386767][T26909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4856'. [ 2611.468756][T13664] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2611.476340][T13664] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2613.420962][T26922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4859'. [ 2613.681483][ T5222] Bluetooth: hci5: command tx timeout [ 2613.763222][T26932] 9pnet_fd: Insufficient options for proto=fd [ 2615.945663][ T5222] Bluetooth: hci5: command tx timeout [ 2618.430845][ T5222] Bluetooth: hci5: command tx timeout [ 2620.151191][T26910] chnl_net:caif_netlink_parms(): no params data found [ 2620.525870][ T5222] Bluetooth: hci5: command tx timeout [ 2626.284827][T26976] tipc: Started in network mode [ 2626.292971][T26976] tipc: Node identity ac1414aa, cluster identity 4711 [ 2626.300377][T26976] tipc: New replicast peer: 100.1.1.1 [ 2626.306042][T26976] tipc: Enabled bearer , priority 10 [ 2627.561687][T13506] tipc: Node number set to 2886997162 [ 2627.568370][T26984] 9pnet_fd: Insufficient options for proto=fd [ 2628.940117][T27000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 2628.958424][T27001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2628.999577][T27001] batadv_slave_0: entered promiscuous mode [ 2629.075256][T26910] bridge0: port 1(bridge_slave_0) entered blocking state [ 2629.113994][T26910] bridge0: port 1(bridge_slave_0) entered disabled state [ 2629.141564][T26910] bridge_slave_0: entered allmulticast mode [ 2629.148890][T26910] bridge_slave_0: entered promiscuous mode [ 2629.212776][T26910] bridge0: port 2(bridge_slave_1) entered blocking state [ 2629.224788][T26910] bridge0: port 2(bridge_slave_1) entered disabled state [ 2629.244142][T26910] bridge_slave_1: entered allmulticast mode [ 2629.274208][T26910] bridge_slave_1: entered promiscuous mode [ 2629.523453][T26910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2629.906679][T27021] tipc: Enabling of bearer rejected, already enabled [ 2630.169974][T27023] tipc: Enabling of bearer rejected, already enabled [ 2630.551097][T26910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2636.277726][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2636.445261][T27044] 9pnet_fd: Insufficient options for proto=fd [ 2636.574367][T26910] team0: Port device team_slave_0 added [ 2636.591938][ T9183] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2636.695634][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2636.728456][T26910] team0: Port device team_slave_1 added [ 2636.764270][ T9183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2636.782309][ T9183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2636.792617][ T9183] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2636.805790][ T9183] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2636.814975][ T9183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.826874][ T9183] usb 5-1: config 0 descriptor?? [ 2636.920069][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2636.983374][T26910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2636.996574][T26910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2637.033301][T26910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2638.016953][ T9183] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 2638.031307][ T9183] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2638.046070][ T9183] usb 5-1: USB disconnect, device number 22 [ 2638.064229][T26910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2638.096708][T26910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2638.167459][T26910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2638.300222][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2638.316868][T13664] Bluetooth: hci2: command 0x0406 tx timeout [ 2638.322984][T13664] Bluetooth: hci3: command 0x0406 tx timeout [ 2638.333195][T13664] Bluetooth: hci0: command 0x0406 tx timeout [ 2638.749391][T26910] hsr_slave_0: entered promiscuous mode [ 2638.914348][T26910] hsr_slave_1: entered promiscuous mode [ 2638.950533][T26910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2639.486225][T26910] Cannot create hsr debugfs directory [ 2639.501662][T27068] tipc: Started in network mode [ 2639.507265][T27068] tipc: Node identity ac1414aa, cluster identity 4711 [ 2639.514281][T27068] tipc: New replicast peer: 100.1.1.1 [ 2639.521248][T27068] tipc: Enabled bearer , priority 10 [ 2639.959091][ T5222] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2639.972727][T27076] hub 9-0:1.0: USB hub found [ 2639.977688][T27076] hub 9-0:1.0: 8 ports detected [ 2640.739196][T26529] tipc: Node number set to 2886997162 [ 2641.280188][ T35] bridge_slave_1: left allmulticast mode [ 2641.285896][ T35] bridge_slave_1: left promiscuous mode [ 2641.438500][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2641.808975][ T35] bridge_slave_0: left allmulticast mode [ 2641.851776][ T35] bridge_slave_0: left promiscuous mode [ 2641.870131][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2642.240504][T25496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2642.273232][T25496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2642.291432][T25496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2642.301510][T25496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2642.310484][T25496] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2642.317944][T25496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2642.549478][T27117] 9pnet_fd: Insufficient options for proto=fd [ 2643.194401][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2643.212903][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2643.226017][ T35] bond0 (unregistering): Released all slaves [ 2643.240391][T27092] tipc: Enabling of bearer rejected, already enabled [ 2643.505360][ T35] tipc: Disabling bearer [ 2643.529124][ T35] tipc: Left network mode [ 2644.667980][T27141] hub 9-0:1.0: USB hub found [ 2644.676020][T27141] hub 9-0:1.0: 8 ports detected [ 2645.184526][T25496] Bluetooth: hci1: command tx timeout [ 2645.191381][T25496] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2645.254957][T27145] tipc: Enabling of bearer rejected, already enabled [ 2645.511884][ T35] hsr_slave_0: left promiscuous mode [ 2645.670028][ T35] hsr_slave_1: left promiscuous mode [ 2645.691637][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2645.710247][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2645.772406][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2645.790597][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2646.273612][ T35] veth1_macvtap: left promiscuous mode [ 2646.325344][ T35] veth0_macvtap: left promiscuous mode [ 2646.331041][ T35] veth1_vlan: left promiscuous mode [ 2646.343389][ T35] veth0_vlan: left promiscuous mode [ 2647.477002][T25496] Bluetooth: hci1: command tx timeout [ 2649.316308][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2649.406079][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2649.509428][ T9183] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2649.549797][T25496] Bluetooth: hci1: command tx timeout [ 2649.675104][ T9183] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2649.714604][ T9183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2649.742379][ T9183] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2649.764522][ T9183] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2649.791238][ T9183] usb 5-1: Manufacturer: syz [ 2649.810062][ T9183] usb 5-1: config 0 descriptor?? [ 2649.880006][ T9183] rc_core: IR keymap rc-hauppauge not found [ 2649.895583][ T9183] Registered IR keymap rc-empty [ 2649.924828][ T9183] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2649.967518][ T9183] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 2650.783809][T27170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2650.821789][T27170] batadv_slave_0: entered promiscuous mode [ 2650.848356][T27176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4914'. [ 2650.910494][T27182] IPVS: Error connecting to the multicast addr [ 2651.315146][T25496] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2651.329301][T27189] hub 9-0:1.0: USB hub found [ 2651.334360][T27189] hub 9-0:1.0: 8 ports detected [ 2651.632745][T25496] Bluetooth: hci1: command tx timeout [ 2652.784585][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.791105][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.912399][T26910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2652.939133][T26910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2653.003777][T26910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2653.061597][T26910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2653.164848][T27109] chnl_net:caif_netlink_parms(): no params data found [ 2653.429743][T27109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2653.437781][T27109] bridge0: port 1(bridge_slave_0) entered disabled state [ 2653.455719][T27109] bridge_slave_0: entered allmulticast mode [ 2653.467360][T27109] bridge_slave_0: entered promiscuous mode [ 2653.486413][T27109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2653.507775][T27109] bridge0: port 2(bridge_slave_1) entered disabled state [ 2653.515999][T27109] bridge_slave_1: entered allmulticast mode [ 2653.526240][T27109] bridge_slave_1: entered promiscuous mode [ 2653.648992][T27109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2653.670713][T27109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2653.809799][T27109] team0: Port device team_slave_0 added [ 2653.829262][T26529] usb 5-1: USB disconnect, device number 23 [ 2653.991982][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2654.118040][T27109] team0: Port device team_slave_1 added [ 2655.412753][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2655.810152][T27257] hub 9-0:1.0: USB hub found [ 2655.815092][T27257] hub 9-0:1.0: 8 ports detected [ 2655.845103][T25496] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2656.436370][T27256] coredump: 154(syz.2.4924): written to core: VMAs: 37, size 97550336; core: 71775386 bytes, pos 97558528 [ 2657.692951][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2657.709081][T27270] tipc: Enabling of bearer rejected, already enabled [ 2657.780627][T27109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2657.787645][T27109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2657.849746][T27109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2657.864035][T27109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2657.871982][T27109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2657.908852][T27109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2658.006632][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2658.266386][T27283] xt_policy: neither incoming nor outgoing policy selected [ 2659.016473][T26910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2659.066781][T27109] hsr_slave_0: entered promiscuous mode [ 2659.108345][T27109] hsr_slave_1: entered promiscuous mode [ 2659.281819][T26910] 8021q: adding VLAN 0 to HW filter on device team0 [ 2659.395904][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2659.403139][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2659.434562][ T35] bridge_slave_1: left allmulticast mode [ 2659.440292][ T35] bridge_slave_1: left promiscuous mode [ 2659.447774][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2659.457846][ T35] bridge_slave_0: left allmulticast mode [ 2659.464127][ T35] bridge_slave_0: left promiscuous mode [ 2659.469903][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2660.003962][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2660.017343][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2660.029499][ T35] bond0 (unregistering): Released all slaves [ 2660.132207][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2660.139377][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2660.201945][ T35] tipc: Disabling bearer [ 2660.216419][ T35] tipc: Left network mode [ 2660.432071][ T9183] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2661.316723][ T9183] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 2661.332576][ T9183] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 2661.340984][ T9183] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2661.352594][ T9183] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2661.465821][ T9183] usb 3-1: config 0 has no interface number 0 [ 2661.472341][ T9183] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2661.484425][ T9183] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2661.494458][ T9183] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2661.512973][ T9183] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2661.522378][ T9183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2661.544487][ T9183] usb 3-1: config 0 descriptor?? [ 2661.566399][ T9183] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2661.786900][ T9183] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 2661.823895][ T9183] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2662.307469][T27319] hub 9-0:1.0: USB hub found [ 2662.312589][T27319] hub 9-0:1.0: 8 ports detected [ 2662.327224][ T9183] usb 3-1: MIDIStreaming interface descriptor not found [ 2662.349997][T25496] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2663.546634][T27317] coredump: 184(syz.0.4935): written to core: VMAs: 37, size 97550336; core: 71779482 bytes, pos 97558528 [ 2664.142750][ T9183] usb 3-1: USB disconnect, device number 43 [ 2664.211332][T27340] xt_policy: neither incoming nor outgoing policy selected [ 2665.064971][T27332] tipc: Enabling of bearer rejected, already enabled [ 2665.255363][T27343] 9pnet_fd: Insufficient options for proto=fd [ 2665.461517][ T35] hsr_slave_0: left promiscuous mode [ 2665.476261][ T35] hsr_slave_1: left promiscuous mode [ 2665.488130][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2665.515633][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2665.523347][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2665.551426][ T35] veth1_macvtap: left promiscuous mode [ 2665.557202][ T35] veth0_macvtap: left promiscuous mode [ 2665.563620][ T35] veth1_vlan: left promiscuous mode [ 2665.570110][ T35] veth0_vlan: left promiscuous mode [ 2665.875175][T27356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2667.715065][T27363] coredump: 200(syz.4.4945): written to core: VMAs: 34, size 97345536; core: 71758834 bytes, pos 97353728 [ 2668.314432][T25496] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2668.333526][T27374] hub 9-0:1.0: USB hub found [ 2668.338456][T27374] hub 9-0:1.0: 8 ports detected [ 2671.676065][T27386] xt_policy: neither incoming nor outgoing policy selected [ 2672.461891][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2672.475403][ T5222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2672.484569][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2672.497984][ T5222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2672.506133][ T5222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2672.513762][ T5222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2672.948548][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2673.750641][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2674.614597][ T5222] Bluetooth: hci4: command tx timeout [ 2676.846056][ T5222] Bluetooth: hci4: command tx timeout [ 2677.362352][T27417] coredump: 227(syz.0.4956): written to core: VMAs: 37, size 97550336; core: 71779482 bytes, pos 97558528 [ 2677.819057][T27400] tipc: Enabling of bearer rejected, already enabled [ 2678.263227][T27430] hub 9-0:1.0: USB hub found [ 2678.268774][T27430] hub 9-0:1.0: 8 ports detected [ 2678.345933][ T5222] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2678.871242][ T5222] Bluetooth: hci4: command tx timeout [ 2680.003602][T25496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2680.022323][T25496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2680.059391][T25496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2680.067707][T25496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2680.075548][T25496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2680.083376][T25496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2680.941587][T25496] Bluetooth: hci4: command tx timeout [ 2681.040447][T27109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2681.068206][T27109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2681.082945][T27390] chnl_net:caif_netlink_parms(): no params data found [ 2681.292574][T27109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2681.315122][T27109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2681.330387][T27471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4967'. [ 2681.364388][T27471] x_tables: ip_tables: udp match: only valid for protocol 17 [ 2681.745244][T27390] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.754208][T27390] bridge0: port 1(bridge_slave_0) entered disabled state [ 2681.817460][T27478] hub 9-0:1.0: USB hub found [ 2681.825502][T27478] hub 9-0:1.0: 8 ports detected [ 2681.876004][T25496] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2681.930392][T27390] bridge_slave_0: entered allmulticast mode [ 2681.938434][T27390] bridge_slave_0: entered promiscuous mode [ 2682.112939][T27390] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.121330][T27390] bridge0: port 2(bridge_slave_1) entered disabled state [ 2682.130389][T27390] bridge_slave_1: entered allmulticast mode [ 2682.164044][T27390] bridge_slave_1: entered promiscuous mode [ 2682.451656][T27390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2682.461155][T25496] Bluetooth: hci3: command tx timeout [ 2682.562274][T27390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2682.734127][T27390] team0: Port device team_slave_0 added [ 2682.780273][T27445] chnl_net:caif_netlink_parms(): no params data found [ 2682.930097][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2682.998766][T27390] team0: Port device team_slave_1 added [ 2683.114555][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.226594][T27390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2683.248880][T27390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2683.285990][T27390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2683.398576][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.528393][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.566611][T27390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2683.575199][T27390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2683.603495][T27390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2683.909128][T27390] hsr_slave_0: entered promiscuous mode [ 2683.926465][T27390] hsr_slave_1: entered promiscuous mode [ 2683.940550][T27390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2684.052476][T27390] Cannot create hsr debugfs directory [ 2684.066454][T27445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2684.075613][T27445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2684.089012][T27445] bridge_slave_0: entered allmulticast mode [ 2684.109702][T27445] bridge_slave_0: entered promiscuous mode [ 2684.826967][T27109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2684.835730][T25496] Bluetooth: hci3: command tx timeout [ 2684.928636][T27445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2684.937854][T27445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2684.945931][T27445] bridge_slave_1: entered allmulticast mode [ 2684.954665][T27445] bridge_slave_1: entered promiscuous mode [ 2685.003796][T27109] 8021q: adding VLAN 0 to HW filter on device team0 [ 2685.205209][T27519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2685.297069][T27445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2685.458017][T27445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2685.509226][T26595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2685.516605][T26595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2685.530963][ T35] bridge_slave_1: left allmulticast mode [ 2685.538322][ T35] bridge_slave_1: left promiscuous mode [ 2685.547886][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2685.568785][ T35] bridge_slave_0: left allmulticast mode [ 2685.575268][ T35] bridge_slave_0: left promiscuous mode [ 2685.622969][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2685.671398][ T35] bridge_slave_1: left allmulticast mode [ 2685.684406][ T35] bridge_slave_1: left promiscuous mode [ 2685.699305][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2685.748784][ T35] bridge_slave_0: left allmulticast mode [ 2685.755364][ T35] bridge_slave_0: left promiscuous mode [ 2685.804032][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2685.964757][T27518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2685.972595][T27518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2685.993620][T27518] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2686.021114][T27518] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2686.045363][T27518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2686.051379][T27518] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2686.069372][T27518] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2686.084709][T27518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2686.090959][T27518] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2686.120172][T27518] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2686.142783][T27518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2686.150267][T27518] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2686.181247][T27518] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2686.613233][T27527] hub 9-0:1.0: USB hub found [ 2686.618281][T27527] hub 9-0:1.0: 8 ports detected [ 2686.635917][T25496] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2687.313548][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2687.336318][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2687.348594][ T35] bond0 (unregistering): Released all slaves [ 2687.441210][T25496] Bluetooth: hci2: command 0x0406 tx timeout [ 2687.567795][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2687.580827][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2687.593027][ T35] bond0 (unregistering): Released all slaves [ 2687.627327][T27445] team0: Port device team_slave_0 added [ 2687.648471][T27445] team0: Port device team_slave_1 added [ 2687.663382][T26595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2687.670601][T26595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2687.765719][T27109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2687.776373][T27109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2687.964510][ T35] tipc: Disabling bearer [ 2687.976004][ T35] tipc: Left network mode [ 2687.991497][T25496] Bluetooth: hci0: command 0x0406 tx timeout [ 2688.065624][T25496] Bluetooth: hci1: command 0x0c1a tx timeout [ 2688.202252][T25496] Bluetooth: hci3: command 0x0419 tx timeout [ 2688.215667][T25496] Bluetooth: hci4: command 0x0c1a tx timeout [ 2689.000912][T27445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2689.030828][T27445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2689.129911][T27445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2689.153938][T27445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2689.166906][T27445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2689.194280][T27445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2690.065922][T25496] Bluetooth: hci0: command 0x0406 tx timeout [ 2690.146036][T25496] Bluetooth: hci1: command 0x0c1a tx timeout [ 2690.303741][T25496] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2690.315352][ T5222] Bluetooth: hci4: command 0x0c1a tx timeout [ 2690.315366][T13664] Bluetooth: hci3: command 0x0419 tx timeout [ 2690.334491][T27562] hub 9-0:1.0: USB hub found [ 2690.341671][T27562] hub 9-0:1.0: 8 ports detected [ 2690.608472][T27577] 9pnet_fd: Insufficient options for proto=fd [ 2690.623578][ T35] hsr_slave_0: left promiscuous mode [ 2690.641607][ T35] hsr_slave_1: left promiscuous mode [ 2690.652593][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2690.664908][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2690.677327][ T35] hsr_slave_0: left promiscuous mode [ 2690.683267][ T35] hsr_slave_1: left promiscuous mode [ 2690.689650][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2690.697261][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2690.705114][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2690.715719][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2690.753838][ T35] veth1_macvtap: left promiscuous mode [ 2690.759886][ T35] veth0_macvtap: left promiscuous mode [ 2690.765636][ T35] veth1_vlan: left promiscuous mode [ 2690.771830][ T35] veth0_vlan: left promiscuous mode [ 2691.155180][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2691.224726][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2692.657292][ T5222] Bluetooth: hci0: command 0x0406 tx timeout [ 2692.657695][T13664] Bluetooth: hci3: command 0x0419 tx timeout [ 2692.663376][ T5222] Bluetooth: hci4: command 0x0c1a tx timeout [ 2692.669592][T25496] Bluetooth: hci1: command 0x0c1a tx timeout [ 2693.836434][T27604] 9pnet_fd: Insufficient options for proto=fd [ 2694.441975][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2694.517410][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2694.708949][T25496] Bluetooth: hci3: command 0x0419 tx timeout [ 2697.602207][T27445] hsr_slave_0: entered promiscuous mode [ 2697.608721][T27445] hsr_slave_1: entered promiscuous mode [ 2697.615743][T27445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2697.623650][T27445] Cannot create hsr debugfs directory [ 2697.687908][T27622] tipc: Enabling of bearer rejected, already enabled [ 2697.951028][T27109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2698.030216][T27634] iso9660: Unknown parameter '' [ 2698.849372][T27109] veth0_vlan: entered promiscuous mode [ 2699.295030][T27109] veth1_vlan: entered promiscuous mode [ 2699.504054][T27109] veth0_macvtap: entered promiscuous mode [ 2699.513472][T27109] veth1_macvtap: entered promiscuous mode [ 2699.771990][T27390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2699.808859][T27109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2699.908432][T27390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2699.917586][T27649] 9pnet_fd: Insufficient options for proto=fd [ 2699.927032][T27390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2699.947337][T27109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2699.986111][T27109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.999448][T27109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2700.010484][T27109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2700.022677][T27109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2700.152195][T27390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2700.187356][T27109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.216644][T27109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.229648][T27109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.245605][T27109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.531744][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2700.552290][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2700.655661][T27445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2700.666568][T27445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2700.678452][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2700.688480][T27445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2700.695874][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2700.709980][T27445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2700.744872][T27390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2700.806568][T27390] 8021q: adding VLAN 0 to HW filter on device team0 [ 2700.850353][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2700.857580][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2700.904218][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2700.911463][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2704.117688][T27445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2704.132415][T27445] 8021q: adding VLAN 0 to HW filter on device team0 [ 2707.220588][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2707.227762][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2707.320047][T26595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2707.327269][T26595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2707.534596][T27684] iso9660: Unknown parameter '' [ 2708.241311][T27689] tipc: Enabling of bearer rejected, already enabled [ 2709.266732][T27390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2709.659291][T27390] veth0_vlan: entered promiscuous mode [ 2709.669374][T27710] 9pnet_fd: Insufficient options for proto=fd [ 2709.700394][T27390] veth1_vlan: entered promiscuous mode [ 2709.912502][T27445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2710.740930][T27390] veth0_macvtap: entered promiscuous mode [ 2710.792957][T27390] veth1_macvtap: entered promiscuous mode [ 2710.833985][T27390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2710.844799][T27390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.857708][T27390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2710.868508][T27390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2710.880014][T27390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.890115][T27390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2710.900766][T27390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.910995][T27390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2710.921569][T27390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.933359][T27390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2710.943685][T27390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2710.971872][T27390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2710.993135][T27390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2711.033925][T27390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2712.140247][T26609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2712.156880][T26609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2712.234133][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2712.250431][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2712.282696][T27445] veth0_vlan: entered promiscuous mode [ 2713.527743][T27445] veth1_vlan: entered promiscuous mode [ 2713.564565][T27445] veth0_macvtap: entered promiscuous mode [ 2714.531816][T27445] veth1_macvtap: entered promiscuous mode [ 2714.548252][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2714.558924][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2714.568984][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2715.580014][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2715.591793][T27445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2715.603065][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2715.613634][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2715.623536][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2716.634373][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.644382][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2716.654978][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.664905][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2716.675396][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2717.616163][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2717.622632][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2717.660248][T27445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2717.880104][T27445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2717.973900][T27758] iso9660: Unknown parameter '' [ 2718.520109][T27445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.560631][T27445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.577690][T27445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.638505][T27760] tipc: Enabling of bearer rejected, already enabled [ 2718.981822][T26595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2719.003737][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2719.012056][T26595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2719.037429][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2721.460352][T27796] 9pnet_fd: Insufficient options for proto=fd [ 2723.230128][T27827] binder: BINDER_SET_CONTEXT_MGR already set [ 2723.236261][T27827] binder: 27818:27827 ioctl 4018620d 20000000 returned -16 [ 2723.300451][T27828] binder: 27818:27828 ioctl c0306201 0 returned -14 [ 2725.763664][T27859] xt_hashlimit: overflow, try lower: 3/0 [ 2725.972795][T27862] tipc: Started in network mode [ 2725.977902][T27862] tipc: Node identity ac1414aa, cluster identity 4711 [ 2725.986345][T27862] tipc: New replicast peer: 100.1.1.1 [ 2725.992657][T27862] tipc: Enabled bearer , priority 10 [ 2726.991064][T16040] tipc: Node number set to 2886997162 [ 2727.129163][T27871] 9pnet_fd: Insufficient options for proto=fd [ 2729.323547][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5042'. [ 2730.618000][ T5222] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2731.017111][T27909] hub 9-0:1.0: USB hub found [ 2731.022280][T27909] hub 9-0:1.0: 8 ports detected [ 2733.454565][T27929] tipc: Enabling of bearer rejected, already enabled [ 2734.018816][T27931] syz.0.5052 uses obsolete (PF_INET,SOCK_PACKET) [ 2735.817269][T27955] ubi0: attaching mtd0 [ 2735.829791][T27955] ubi0: scanning is finished [ 2735.834545][T27955] ubi0: empty MTD device detected [ 2736.688699][T27955] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 2739.236326][T27978] tipc: Enabling of bearer rejected, already enabled [ 2739.725934][T27969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2742.689588][ T5222] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2742.904704][T28004] hub 9-0:1.0: USB hub found [ 2742.936494][T28004] hub 9-0:1.0: 8 ports detected [ 2743.150203][T25496] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2743.161534][T25496] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2743.176393][T25496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2743.184369][T25496] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2743.191872][T25496] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2743.199741][T25496] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2743.808695][T28017] dlm: no locking on control device [ 2743.949915][T25105] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2744.109403][T25105] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2744.145019][T25105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2744.218066][T25105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2744.276964][T28006] chnl_net:caif_netlink_parms(): no params data found [ 2744.290679][T25105] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2744.330296][T25105] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2744.367088][T25105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2744.418477][T25105] usb 5-1: config 0 descriptor?? [ 2744.453584][T28010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2744.909549][T25105] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 2744.927847][T25105] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 2744.966675][T25105] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2745.585234][T25496] Bluetooth: hci5: command tx timeout [ 2745.609023][T28006] bridge0: port 1(bridge_slave_0) entered blocking state [ 2745.642514][T28006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2745.700269][T25698] usb 5-1: USB disconnect, device number 24 [ 2745.736030][T28035] netlink: 'syz.3.5075': attribute type 2 has an invalid length. [ 2745.743991][T28035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5075'. [ 2746.382378][T28006] bridge_slave_0: entered allmulticast mode [ 2746.396118][T28006] bridge_slave_0: entered promiscuous mode [ 2746.739095][T28006] bridge0: port 2(bridge_slave_1) entered blocking state [ 2746.841154][T28006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2746.868771][T28006] bridge_slave_1: entered allmulticast mode [ 2746.904990][T28006] bridge_slave_1: entered promiscuous mode [ 2747.050353][T28006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2747.061577][T28006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2747.243111][T28006] team0: Port device team_slave_0 added [ 2747.411616][T28006] team0: Port device team_slave_1 added [ 2747.514730][T28006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2747.530529][T28006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2747.556602][ C0] vkms_vblank_simulate: vblank timer overrun [ 2747.618717][T28006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2747.635131][T28006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2747.642690][T28006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2747.669553][T28006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2747.696259][T25496] Bluetooth: hci5: command tx timeout [ 2747.857810][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2747.936131][T28006] hsr_slave_0: entered promiscuous mode [ 2747.948078][T28006] hsr_slave_1: entered promiscuous mode [ 2747.962171][T28006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2747.971026][T28006] Cannot create hsr debugfs directory [ 2748.101880][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.235470][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.704706][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2749.103892][T25496] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2749.254571][T28066] hub 9-0:1.0: USB hub found [ 2749.323632][T28066] hub 9-0:1.0: 8 ports detected [ 2749.345844][ T12] bridge_slave_1: left allmulticast mode [ 2749.351634][ T12] bridge_slave_1: left promiscuous mode [ 2749.359269][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.389132][ T12] bridge_slave_0: left allmulticast mode [ 2749.401715][ T12] bridge_slave_0: left promiscuous mode [ 2749.419731][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.767114][T25496] Bluetooth: hci5: command tx timeout [ 2750.699240][T28084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2751.765945][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2751.805411][T28097] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5089'. [ 2751.835594][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2751.850575][ T12] bond0 (unregistering): Released all slaves [ 2751.857205][T25496] Bluetooth: hci5: command tx timeout [ 2751.966366][T28099] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5089'. [ 2752.255305][ T12] tipc: Disabling bearer [ 2752.261046][ T12] tipc: Left network mode [ 2752.911780][ T12] hsr_slave_0: left promiscuous mode [ 2752.952189][ T12] hsr_slave_1: left promiscuous mode [ 2752.965956][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2752.988971][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2753.181179][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2753.201453][T28126] xt_hashlimit: overflow, try lower: 3/0 [ 2753.262532][ T12] veth1_macvtap: left promiscuous mode [ 2753.276797][ T12] veth0_macvtap: left promiscuous mode [ 2753.289010][ T12] veth1_vlan: left promiscuous mode [ 2753.304849][ T12] veth0_vlan: left promiscuous mode [ 2754.302180][T25496] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2754.518438][T28146] hub 9-0:1.0: USB hub found [ 2754.580959][T28146] hub 9-0:1.0: 8 ports detected [ 2756.219625][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2756.416189][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2756.527860][T28158] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5103'. [ 2756.601857][T28159] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5103'. [ 2757.385999][T28162] bridge0: port 3(syz_tun) entered blocking state [ 2757.419371][T28162] bridge0: port 3(syz_tun) entered disabled state [ 2757.426979][T28162] syz_tun: entered allmulticast mode [ 2757.442551][T28162] syz_tun: entered promiscuous mode [ 2757.462542][T28162] bridge0: port 3(syz_tun) entered blocking state [ 2757.469202][T28162] bridge0: port 3(syz_tun) entered forwarding state [ 2759.089878][T28006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2759.345094][T28006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2760.090584][T28006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2760.717487][T28006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2761.616529][T28006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2761.635563][T28006] 8021q: adding VLAN 0 to HW filter on device team0 [ 2761.656375][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2761.663544][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2761.739378][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2761.746675][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2761.770180][T25496] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2761.941407][T28203] hub 9-0:1.0: USB hub found [ 2762.134349][T28203] hub 9-0:1.0: 8 ports detected [ 2763.032204][T28209] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5115'. [ 2763.157731][T28212] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5115'. [ 2763.353925][T28006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2763.522700][T28006] veth0_vlan: entered promiscuous mode [ 2763.595803][T28006] veth1_vlan: entered promiscuous mode [ 2763.697093][T28006] veth0_macvtap: entered promiscuous mode [ 2763.719212][T28006] veth1_macvtap: entered promiscuous mode [ 2763.779178][T28006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2763.795795][T28006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2763.807794][T28006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2763.853544][T28006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2763.899750][T28006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2763.929970][T28006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2763.968116][T28006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2764.022687][T28006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.076867][T28006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.106057][T28006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.145111][T28006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.179866][T28006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.220350][T28006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.247434][T28006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.282601][T28006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.318626][T28006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2764.366519][T28006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.425525][T28006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.462619][T28006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.472818][T28006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.591558][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2764.611174][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2764.634485][T26595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2764.642380][T26595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2767.576917][T28236] syz.0.5121 (28236) used greatest stack depth: 16112 bytes left [ 2769.119597][T28250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5126'. [ 2770.042750][T28254] coredump: 119(syz.3.5125): written to core: VMAs: 4, size 12439552; core: 11758390 bytes, pos 12443648 [ 2770.114511][T28257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5126'. [ 2772.475654][T28283] iso9660: Unknown parameter '' [ 2772.895336][T25496] Bluetooth: hci4: command 0x0c1a tx timeout [ 2775.744684][T28306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5142'. [ 2775.836865][T28309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5142'. [ 2775.992507][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.999053][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.503947][T28303] mmap: syz.2.5140 (28303) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2782.792274][T28357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5156'. [ 2782.879411][T28361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5156'. [ 2782.889620][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2782.922911][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2782.934400][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2782.959281][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2783.952168][ T5222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2783.971807][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2785.988443][ T5222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2785.999066][ T5222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2786.010013][ T5222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2786.020529][ T5222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2786.029267][ T5222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2786.039801][ T5222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2792.184268][ T5222] Bluetooth: hci0: command tx timeout [ 2795.915935][T25496] Bluetooth: hci0: command tx timeout [ 2795.921920][T25496] Bluetooth: hci6: command tx timeout [ 2795.987622][T28358] chnl_net:caif_netlink_parms(): no params data found [ 2796.998784][T13664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2797.032434][ T9720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2797.045306][ T9720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2797.058548][ T9720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2797.068611][ T9720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2797.079243][ T9720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2797.087864][ T9720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2797.095813][ T9720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2797.103461][ T9720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2797.111526][ T9720] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2797.119262][ T9720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2797.126923][ T9720] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2797.135205][ T9720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2797.239931][T28358] bridge0: port 1(bridge_slave_0) entered blocking state [ 2797.247250][T28358] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.254539][T28358] bridge_slave_0: entered allmulticast mode [ 2797.261596][ T9720] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2797.270452][ T9720] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2797.290220][ T9720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2797.297989][ T9720] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2797.305438][ T9720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2797.360308][T28358] bridge_slave_0: entered promiscuous mode [ 2797.511868][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2797.561880][T28358] bridge0: port 2(bridge_slave_1) entered blocking state [ 2797.589271][T28358] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.630254][T28358] bridge_slave_1: entered allmulticast mode [ 2797.637578][T28358] bridge_slave_1: entered promiscuous mode [ 2797.763328][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2797.937130][ T9720] Bluetooth: hci0: command tx timeout [ 2797.942616][T25496] Bluetooth: hci6: command tx timeout [ 2798.018849][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2798.064413][T28358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2798.088605][T28358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2798.152696][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2798.242122][T28392] chnl_net:caif_netlink_parms(): no params data found [ 2798.414000][T28358] team0: Port device team_slave_0 added [ 2798.458857][T28358] team0: Port device team_slave_1 added [ 2798.899623][T28358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2798.906698][T28358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2798.941457][T28358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2798.998967][T28358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2799.005948][T28358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2799.129552][T28358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2799.239483][T25496] Bluetooth: hci1: command tx timeout [ 2799.239526][ T9720] Bluetooth: hci3: command tx timeout [ 2799.355733][T28261] bridge0: port 3(syz_tun) entered disabled state [ 2799.380044][ T9720] Bluetooth: hci7: command tx timeout [ 2799.444492][T28261] syz_tun (unregistering): left allmulticast mode [ 2799.459856][T28261] syz_tun (unregistering): left promiscuous mode [ 2799.489950][T28261] bridge0: port 3(syz_tun) entered disabled state [ 2799.658807][T28358] hsr_slave_0: entered promiscuous mode [ 2799.673047][T28358] hsr_slave_1: entered promiscuous mode [ 2799.684310][T28358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2799.692332][T28358] Cannot create hsr debugfs directory [ 2799.702128][T28411] chnl_net:caif_netlink_parms(): no params data found [ 2799.884729][T28392] bridge0: port 1(bridge_slave_0) entered blocking state [ 2799.897919][T28392] bridge0: port 1(bridge_slave_0) entered disabled state [ 2799.906066][T28392] bridge_slave_0: entered allmulticast mode [ 2799.919389][T28392] bridge_slave_0: entered promiscuous mode [ 2799.927516][T28406] chnl_net:caif_netlink_parms(): no params data found [ 2799.994703][T28392] bridge0: port 2(bridge_slave_1) entered blocking state [ 2800.002403][T28392] bridge0: port 2(bridge_slave_1) entered disabled state [ 2800.009656][T28392] bridge_slave_1: entered allmulticast mode [ 2800.017112][T28392] bridge_slave_1: entered promiscuous mode [ 2800.023246][ T9720] Bluetooth: hci6: command tx timeout [ 2800.023257][T25496] Bluetooth: hci0: command tx timeout [ 2800.060578][ T11] bridge_slave_1: left allmulticast mode [ 2800.066474][ T11] bridge_slave_1: left promiscuous mode [ 2800.075689][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2800.086496][ T11] bridge_slave_0: left allmulticast mode [ 2800.092705][ T11] bridge_slave_0: left promiscuous mode [ 2800.098381][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2800.573723][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2800.585596][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2800.597770][ T11] bond0 (unregistering): Released all slaves [ 2800.616741][T28408] chnl_net:caif_netlink_parms(): no params data found [ 2800.645813][T28392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2800.750850][T28392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2800.986246][T28392] team0: Port device team_slave_0 added [ 2801.088036][T28411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2801.097889][T28411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2801.114068][T28411] bridge_slave_0: entered allmulticast mode [ 2801.121252][T28411] bridge_slave_0: entered promiscuous mode [ 2801.145955][T28392] team0: Port device team_slave_1 added [ 2801.202855][T28411] bridge0: port 2(bridge_slave_1) entered blocking state [ 2801.210497][T28411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2801.218888][T28411] bridge_slave_1: entered allmulticast mode [ 2801.226547][T28411] bridge_slave_1: entered promiscuous mode [ 2801.295630][ T11] hsr_slave_0: left promiscuous mode [ 2801.301679][ T11] hsr_slave_1: left promiscuous mode [ 2801.307259][T25496] Bluetooth: hci3: command tx timeout [ 2801.307268][ T9720] Bluetooth: hci1: command tx timeout [ 2801.324247][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2801.331705][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2801.341268][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2801.348884][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2801.373978][ T11] veth1_macvtap: left promiscuous mode [ 2801.379764][ T11] veth0_macvtap: left promiscuous mode [ 2801.385454][ T11] veth1_vlan: left promiscuous mode [ 2801.391559][ T11] veth0_vlan: left promiscuous mode [ 2801.464470][ T9720] Bluetooth: hci7: command tx timeout [ 2802.001607][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2802.061464][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2802.106197][ T9720] Bluetooth: hci6: command tx timeout [ 2802.781014][T28392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2802.788371][T28392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2802.816359][T28392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2802.921791][T28358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.943364][T28392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2802.950611][T28392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2802.977020][T28392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2803.004853][T28411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2803.016656][T28406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2803.024126][T28406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2803.032860][T28406] bridge_slave_0: entered allmulticast mode [ 2803.040185][T28406] bridge_slave_0: entered promiscuous mode [ 2803.095256][T28408] bridge0: port 1(bridge_slave_0) entered blocking state [ 2803.102624][T28408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2803.117845][T28408] bridge_slave_0: entered allmulticast mode [ 2803.124842][T28408] bridge_slave_0: entered promiscuous mode [ 2803.153173][T28358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2803.170829][T28411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2803.180283][T28406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2803.187395][T28406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2803.195200][T28406] bridge_slave_1: entered allmulticast mode [ 2803.203613][T28406] bridge_slave_1: entered promiscuous mode [ 2803.222800][T28408] bridge0: port 2(bridge_slave_1) entered blocking state [ 2803.230660][T28408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2803.239235][T28408] bridge_slave_1: entered allmulticast mode [ 2803.246694][T28408] bridge_slave_1: entered promiscuous mode [ 2803.327738][T28358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2803.347045][T28392] hsr_slave_0: entered promiscuous mode [ 2803.355594][T28392] hsr_slave_1: entered promiscuous mode [ 2803.362312][T28392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2803.370376][T28392] Cannot create hsr debugfs directory [ 2803.390261][ T9720] Bluetooth: hci1: command tx timeout [ 2803.398771][ T9720] Bluetooth: hci3: command tx timeout [ 2803.415137][T28411] team0: Port device team_slave_0 added [ 2803.470089][T28358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2803.496583][T28408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2803.510165][T28411] team0: Port device team_slave_1 added [ 2803.549403][ T9720] Bluetooth: hci7: command tx timeout [ 2803.565338][T28406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2803.576866][T28408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2803.620525][T28411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2803.628613][T28411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.686367][T28411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2803.704298][T28411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2803.711634][T28411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.738734][T28411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2803.761944][T28406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2803.822760][T28408] team0: Port device team_slave_0 added [ 2803.931553][T28408] team0: Port device team_slave_1 added [ 2804.033456][T28406] team0: Port device team_slave_0 added [ 2804.097911][T28411] hsr_slave_0: entered promiscuous mode [ 2804.105608][T28411] hsr_slave_1: entered promiscuous mode [ 2804.113052][T28411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2804.120781][T28411] Cannot create hsr debugfs directory [ 2804.129807][T28406] team0: Port device team_slave_1 added [ 2804.168068][T28408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2804.177979][T28408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2804.206269][T28408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2804.219043][T28408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2804.226497][T28408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2804.252898][T28408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2804.276490][T28406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2804.283604][T28406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2804.309655][T28406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2804.327508][T28406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2804.345277][T28406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2804.372961][T28406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2804.429864][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.541467][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.602071][T28406] hsr_slave_0: entered promiscuous mode [ 2804.608594][T28406] hsr_slave_1: entered promiscuous mode [ 2804.615015][T28406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2804.624029][T28406] Cannot create hsr debugfs directory [ 2804.666531][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.684683][T28408] hsr_slave_0: entered promiscuous mode [ 2804.692033][T28408] hsr_slave_1: entered promiscuous mode [ 2804.698331][T28408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2804.705982][T28408] Cannot create hsr debugfs directory [ 2804.775071][T28358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2804.876689][T28392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.947122][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.985531][T28358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2804.996070][T28358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2805.050124][T28392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.157722][T28358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2805.201151][T28392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.317736][T28392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.473214][ T9720] Bluetooth: hci3: command tx timeout [ 2805.473230][T25496] Bluetooth: hci1: command tx timeout [ 2805.599841][T28411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.633643][ T9720] Bluetooth: hci7: command tx timeout [ 2805.688234][T28411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.736928][T28358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2805.777529][T28411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.819972][T28358] 8021q: adding VLAN 0 to HW filter on device team0 [ 2805.877834][T28411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.915957][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2805.923122][T13041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2805.975039][T13041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2805.982208][T13041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2806.035776][ T11] bridge_slave_1: left allmulticast mode [ 2806.041477][ T11] bridge_slave_1: left promiscuous mode [ 2806.048424][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2806.072418][ T11] bridge_slave_0: left allmulticast mode [ 2806.078403][ T11] bridge_slave_0: left promiscuous mode [ 2806.084123][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2806.102474][ T11] bridge_slave_1: left allmulticast mode [ 2806.109111][ T11] bridge_slave_1: left promiscuous mode [ 2806.116571][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2806.135467][ T11] bridge_slave_0: left allmulticast mode [ 2806.141181][ T11] bridge_slave_0: left promiscuous mode [ 2806.148110][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2806.160397][ T11] bridge_slave_1: left allmulticast mode [ 2806.166435][ T11] bridge_slave_1: left promiscuous mode [ 2806.172170][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2806.182396][ T11] bridge_slave_0: left allmulticast mode [ 2806.189538][ T11] bridge_slave_0: left promiscuous mode [ 2806.196517][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2806.208277][ T11] bridge_slave_1: left allmulticast mode [ 2806.215219][ T11] bridge_slave_1: left promiscuous mode [ 2806.220962][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2806.232176][ T11] bridge_slave_0: left allmulticast mode [ 2806.243913][ T11] bridge_slave_0: left promiscuous mode [ 2806.254949][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2807.669272][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2807.684830][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2807.696167][ T11] bond0 (unregistering): Released all slaves [ 2807.892687][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2807.904733][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2807.915564][ T11] bond0 (unregistering): Released all slaves [ 2808.093523][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2808.105588][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2808.116523][ T11] bond0 (unregistering): Released all slaves [ 2808.296525][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2808.307690][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2808.329873][ T11] bond0 (unregistering): Released all slaves [ 2808.535180][ T11] tipc: Disabling bearer [ 2808.555826][ T11] tipc: Left network mode [ 2808.555872][T28411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2808.703240][ T11] tipc: Disabling bearer [ 2808.708752][ T11] tipc: Left network mode [ 2808.727364][T28411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2808.757291][T28411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2808.820455][T28411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2808.952348][T28358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2809.100158][T28358] veth0_vlan: entered promiscuous mode [ 2809.185519][T28358] veth1_vlan: entered promiscuous mode [ 2809.264538][T28411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2809.415701][T28411] 8021q: adding VLAN 0 to HW filter on device team0 [ 2809.510613][T28406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2809.539514][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2809.546718][T13041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2809.593759][T28406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2809.721740][T28406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2809.747772][T25979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2809.755088][T25979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2809.836239][T28358] veth0_macvtap: entered promiscuous mode [ 2809.860904][T28406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2809.895841][T28358] veth1_macvtap: entered promiscuous mode [ 2810.082719][T28392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2810.180333][T28392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2810.217930][T28392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2810.250289][ T11] hsr_slave_0: left promiscuous mode [ 2810.257401][ T11] hsr_slave_1: left promiscuous mode [ 2810.265710][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2810.273927][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2810.281711][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2810.289713][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2810.303960][ T11] hsr_slave_0: left promiscuous mode [ 2810.309916][ T11] hsr_slave_1: left promiscuous mode [ 2810.317071][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2810.324896][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2810.333484][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2810.340928][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2810.353786][ T11] hsr_slave_0: left promiscuous mode [ 2810.359704][ T11] hsr_slave_1: left promiscuous mode [ 2810.372950][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2810.380763][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2810.388865][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2810.399900][ T11] hsr_slave_0: left promiscuous mode [ 2810.410171][ T11] hsr_slave_1: left promiscuous mode [ 2810.417515][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2810.425140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2810.433784][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2810.441220][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2810.519020][ T11] veth1_macvtap: left promiscuous mode [ 2810.526280][ T11] veth0_macvtap: left promiscuous mode [ 2810.531868][ T11] veth1_vlan: left promiscuous mode [ 2810.537493][ T11] veth0_vlan: left promiscuous mode [ 2810.547514][ T11] veth1_macvtap: left promiscuous mode [ 2810.553035][ T11] veth0_macvtap: left promiscuous mode [ 2810.558889][ T11] veth1_vlan: left promiscuous mode [ 2810.564556][ T11] veth0_vlan: left promiscuous mode [ 2810.570830][ T11] veth1_macvtap: left promiscuous mode [ 2810.576613][ T11] veth0_macvtap: left promiscuous mode [ 2810.582247][ T11] veth0_vlan: left promiscuous mode [ 2810.589826][ T11] veth1_macvtap: left promiscuous mode [ 2810.595513][ T11] veth0_macvtap: left promiscuous mode [ 2810.601084][ T11] veth1_vlan: left promiscuous mode [ 2810.606757][ T11] veth0_vlan: left promiscuous mode [ 2811.524258][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2811.597053][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2812.764000][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2812.827212][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2814.002479][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2814.060465][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2815.202952][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2815.267326][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2815.900414][T28392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2815.945237][T28358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2815.972546][T28358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2816.093223][T28358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.108957][T28358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.118263][T28358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.127235][T28358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.307088][T28406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2816.451917][T26609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.476537][T28406] 8021q: adding VLAN 0 to HW filter on device team0 [ 2816.509579][T26609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.596406][T26609] bridge0: port 1(bridge_slave_0) entered blocking state [ 2816.603561][T26609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2816.640401][T26609] bridge0: port 2(bridge_slave_1) entered blocking state [ 2816.647778][T26609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2816.727216][T13041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.758574][T13041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.792425][T28408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2816.832661][T28392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2816.864564][T28408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2816.876003][T28408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2816.915218][T28408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2817.124393][T28411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2817.274320][T28392] 8021q: adding VLAN 0 to HW filter on device team0 [ 2817.318962][T26609] bridge0: port 1(bridge_slave_0) entered blocking state [ 2817.326196][T26609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2817.407167][T28411] veth0_vlan: entered promiscuous mode [ 2817.426286][T25979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2817.433566][T25979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2817.520494][T28411] veth1_vlan: entered promiscuous mode [ 2817.646883][T28411] veth0_macvtap: entered promiscuous mode [ 2817.681389][T28406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2817.705637][T28411] veth1_macvtap: entered promiscuous mode [ 2817.781950][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2817.793909][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2817.811649][T28411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2817.833967][T28408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2817.890844][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2817.934052][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2817.946353][T28411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2818.314456][T28411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2818.404539][T28411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2818.472491][T28411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2818.526479][T28411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2818.857980][T28542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5169'. [ 2818.863746][T28408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2818.883179][T28392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2818.942799][T28544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5169'. [ 2818.965374][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.972566][T13041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2819.005170][T28392] veth0_vlan: entered promiscuous mode [ 2819.050186][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2819.057411][ T5438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2819.085865][T28406] veth0_vlan: entered promiscuous mode [ 2819.123868][T28392] veth1_vlan: entered promiscuous mode [ 2819.169132][ T5438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.192411][ T5438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.214610][T28406] veth1_vlan: entered promiscuous mode [ 2819.273263][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.293824][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.326899][T28392] veth0_macvtap: entered promiscuous mode [ 2819.403730][T28392] veth1_macvtap: entered promiscuous mode [ 2819.478534][T28392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2819.495351][T28392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.523468][T28392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2819.554471][T28392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.588133][T28392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2820.123063][T28406] veth0_macvtap: entered promiscuous mode [ 2820.383785][T28406] veth1_macvtap: entered promiscuous mode [ 2820.457097][T28406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2820.551136][T28406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2820.561612][T28406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2820.590614][T28406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2820.659396][T28406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2820.711431][T28406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2820.841415][T28406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2820.856558][T28392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2820.910588][T28392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2820.927540][T28392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2820.945437][T28392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2820.968756][T28392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2821.006341][T28406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.041033][T28406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.055420][T28406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.071720][T28406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.090573][T28406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.101639][T28406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.119943][T28406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2821.151309][T28406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.212187][T28406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.252493][T28406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.277252][T28406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.299562][T28392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.308603][T28392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.413110][T28392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.440545][T28392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2822.367887][T28599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5177'. [ 2822.401659][T28408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2822.646935][T28604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5177'. [ 2822.790462][T28547] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2823.055517][T28547] usb 4-1: Using ep0 maxpacket: 8 [ 2823.179004][T28547] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.00 [ 2823.285874][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2823.351176][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2823.375921][T28547] usb 4-1: New USB device strings: Mfr=16, Product=1, SerialNumber=1 [ 2823.395934][T28547] usb 4-1: Product: syz [ 2823.400308][T28547] usb 4-1: Manufacturer: syz [ 2823.405152][T28547] usb 4-1: SerialNumber: syz [ 2823.453939][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2823.461285][T28547] usb 4-1: config 0 descriptor?? [ 2823.482672][T28547] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2823.516659][T28547] usb 4-1: Detected SIO [ 2823.534962][T28547] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2823.653181][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2823.711048][T28605] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5176'. [ 2823.743452][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2823.950798][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.157862][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.329936][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.830553][T28408] veth0_vlan: entered promiscuous mode [ 2824.880409][T28408] veth1_vlan: entered promiscuous mode [ 2825.076596][T28408] veth0_macvtap: entered promiscuous mode [ 2825.195818][T28408] veth1_macvtap: entered promiscuous mode [ 2825.272614][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2825.297461][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.309760][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2825.324415][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.344357][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2825.397293][T28522] usb 4-1: USB disconnect, device number 33 [ 2825.405285][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.414754][T28522] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2825.428949][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2825.446261][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.461736][T28408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2825.474736][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.485321][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.495323][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.499589][T28522] ftdi_sio 4-1:0.0: device disconnected [ 2825.506406][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.522127][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.532668][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.543053][T28408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.553638][T28408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.568848][T28408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2825.662875][T28408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.673077][T28408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.681955][T28408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.690877][T28408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.777163][T28643] [ 2825.779553][T28643] ===================================================== [ 2825.786548][T28643] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 2825.794921][T28643] 6.11.0-syzkaller-07462-g1868f9d0260e #0 Not tainted [ 2825.801694][T28643] ----------------------------------------------------- [ 2825.808633][T28643] syz.1.5182/28643 [HC0[0]:SC0[8]:HE1:SE0] is trying to acquire: [ 2825.816365][T28643] ffff8880551a39e0 (&pch->downl){+.+.}-{2:2}, at: ppp_connect_channel+0x194/0x650 [ 2825.825636][T28643] [ 2825.825636][T28643] and this task is already holding: [ 2825.833004][T28643] ffff888065132e10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 2825.842261][T28643] which would create a new lock dependency: [ 2825.848152][T28643] (&ppp->rlock){+...}-{2:2} -> (&pch->downl){+.+.}-{2:2} [ 2825.855431][T28643] [ 2825.855431][T28643] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 2825.865332][T28643] (&pch->upl){++.-}-{2:2} [ 2825.865367][T28643] [ 2825.865367][T28643] ... which became SOFTIRQ-READ-irq-safe at: [ 2825.877926][T28643] lock_acquire+0x1ed/0x550 [ 2825.882538][T28643] _raw_read_lock_bh+0x3d/0x50 [ 2825.887410][T28643] ppp_input+0x3dc/0xa10 [ 2825.891746][T28643] pppoe_rcv_core+0x117/0x310 [ 2825.896518][T28643] __sk_receive_skb+0x82b/0x8b0 [ 2825.901558][T28643] __netif_receive_skb+0x2e0/0x650 [ 2825.906765][T28643] process_backlog+0x662/0x15b0 [ 2825.911716][T28643] __napi_poll+0xcb/0x490 [ 2825.916153][T28643] net_rx_action+0x89b/0x1240 [ 2825.920927][T28643] handle_softirqs+0x2c5/0x980 [ 2825.925876][T28643] __irq_exit_rcu+0xf4/0x1c0 [ 2825.930650][T28643] irq_exit_rcu+0x9/0x30 [ 2825.934986][T28643] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2825.940713][T28643] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2825.946884][T28643] preempt_count_add+0x6/0x190 [ 2825.951743][T28643] _raw_spin_lock+0x12/0x40 [ 2825.956340][T28643] __close_range+0x3d2/0x940 [ 2825.961035][T28643] __x64_sys_close_range+0x7a/0x90 [ 2825.966243][T28643] do_syscall_64+0xf3/0x230 [ 2825.970860][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2825.976851][T28643] [ 2825.976851][T28643] to a SOFTIRQ-READ-irq-unsafe lock: [ 2825.984519][T28643] (&pch->downl){+.+.}-{2:2} [ 2825.984553][T28643] [ 2825.984553][T28643] ... which became SOFTIRQ-READ-irq-unsafe at: [ 2825.997478][T28643] ... [ 2825.997487][T28643] lock_acquire+0x1ed/0x550 [ 2826.004758][T28643] _raw_spin_lock+0x2e/0x40 [ 2826.009355][T28643] ppp_input+0x18b/0xa10 [ 2826.013698][T28643] pppoe_rcv_core+0x117/0x310 [ 2826.018565][T28643] __release_sock+0x243/0x350 [ 2826.023340][T28643] release_sock+0x61/0x1f0 [ 2826.027949][T28643] pppoe_sendmsg+0xd5/0x750 [ 2826.032550][T28643] __sock_sendmsg+0x221/0x270 [ 2826.037325][T28643] ____sys_sendmsg+0x52a/0x7e0 [ 2826.042271][T28643] __sys_sendmmsg+0x3ac/0x730 [ 2826.047044][T28643] __x64_sys_sendmmsg+0xa0/0xb0 [ 2826.052079][T28643] do_syscall_64+0xf3/0x230 [ 2826.056764][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.062780][T28643] [ 2826.062780][T28643] other info that might help us debug this: [ 2826.062780][T28643] [ 2826.073035][T28643] Chain exists of: [ 2826.073035][T28643] &pch->upl --> &ppp->rlock --> &pch->downl [ 2826.073035][T28643] [ 2826.084878][T28643] Possible interrupt unsafe locking scenario: [ 2826.084878][T28643] [ 2826.093199][T28643] CPU0 CPU1 [ 2826.098671][T28643] ---- ---- [ 2826.104319][T28643] lock(&pch->downl); [ 2826.108415][T28643] local_irq_disable(); [ 2826.115171][T28643] lock(&pch->upl); [ 2826.122035][T28643] lock(&ppp->rlock); [ 2826.128651][T28643] [ 2826.132106][T28643] lock(&pch->upl); [ 2826.136446][T28643] [ 2826.136446][T28643] *** DEADLOCK *** [ 2826.136446][T28643] [ 2826.144675][T28643] 5 locks held by syz.1.5182/28643: [ 2826.149877][T28643] #0: ffffffff8f49e988 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 2826.158611][T28643] #1: ffff888040f30cc0 (&pn->all_ppp_mutex){+.+.}-{3:3}, at: ppp_connect_channel+0x5e/0x650 [ 2826.168905][T28643] #2: ffff8880551a3a48 (&pch->upl){++.-}-{2:2}, at: ppp_connect_channel+0x87/0x650 [ 2826.178422][T28643] #3: ffff888065132e50 (&ppp->wlock){+...}-{2:2}, at: ppp_connect_channel+0x174/0x650 [ 2826.188109][T28643] #4: ffff888065132e10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 2826.197794][T28643] [ 2826.197794][T28643] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 2826.208634][T28643] -> (&pch->upl){++.-}-{2:2} { [ 2826.213602][T28643] HARDIRQ-ON-W at: [ 2826.217852][T28643] lock_acquire+0x1ed/0x550 [ 2826.224380][T28643] _raw_write_lock_bh+0x35/0x50 [ 2826.231243][T28643] ppp_bridge_channels+0x32/0x4c0 [ 2826.238278][T28643] ppp_ioctl+0xe8f/0x1cd0 [ 2826.244702][T28643] __se_sys_ioctl+0xf9/0x170 [ 2826.251301][T28643] do_syscall_64+0xf3/0x230 [ 2826.257820][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.265728][T28643] HARDIRQ-ON-R at: [ 2826.269889][T28643] lock_acquire+0x1ed/0x550 [ 2826.276492][T28643] _raw_read_lock_bh+0x3d/0x50 [ 2826.283358][T28643] ppp_input+0x3dc/0xa10 [ 2826.289606][T28643] pppoe_rcv_core+0x117/0x310 [ 2826.296291][T28643] __release_sock+0x243/0x350 [ 2826.303084][T28643] release_sock+0x61/0x1f0 [ 2826.309538][T28643] pppoe_sendmsg+0xd5/0x750 [ 2826.316065][T28643] __sock_sendmsg+0x221/0x270 [ 2826.322762][T28643] ____sys_sendmsg+0x52a/0x7e0 [ 2826.329594][T28643] __sys_sendmmsg+0x3ac/0x730 [ 2826.336295][T28643] __x64_sys_sendmmsg+0xa0/0xb0 [ 2826.343155][T28643] do_syscall_64+0xf3/0x230 [ 2826.349672][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.357662][T28643] IN-SOFTIRQ-R at: [ 2826.361853][T28643] lock_acquire+0x1ed/0x550 [ 2826.368369][T28643] _raw_read_lock_bh+0x3d/0x50 [ 2826.375147][T28643] ppp_input+0x3dc/0xa10 [ 2826.381400][T28643] pppoe_rcv_core+0x117/0x310 [ 2826.388164][T28643] __sk_receive_skb+0x82b/0x8b0 [ 2826.395029][T28643] __netif_receive_skb+0x2e0/0x650 [ 2826.402231][T28643] process_backlog+0x662/0x15b0 [ 2826.409216][T28643] __napi_poll+0xcb/0x490 [ 2826.415644][T28643] net_rx_action+0x89b/0x1240 [ 2826.422336][T28643] handle_softirqs+0x2c5/0x980 [ 2826.429115][T28643] __irq_exit_rcu+0xf4/0x1c0 [ 2826.435716][T28643] irq_exit_rcu+0x9/0x30 [ 2826.441969][T28643] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2826.449615][T28643] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2826.457608][T28643] preempt_count_add+0x6/0x190 [ 2826.464378][T28643] _raw_spin_lock+0x12/0x40 [ 2826.470889][T28643] __close_range+0x3d2/0x940 [ 2826.477666][T28643] __x64_sys_close_range+0x7a/0x90 [ 2826.484785][T28643] do_syscall_64+0xf3/0x230 [ 2826.491302][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.499291][T28643] INITIAL USE at: [ 2826.503366][T28643] lock_acquire+0x1ed/0x550 [ 2826.509794][T28643] _raw_write_lock_bh+0x35/0x50 [ 2826.516567][T28643] ppp_bridge_channels+0x32/0x4c0 [ 2826.523614][T28643] ppp_ioctl+0xe8f/0x1cd0 [ 2826.529870][T28643] __se_sys_ioctl+0xf9/0x170 [ 2826.536385][T28643] do_syscall_64+0xf3/0x230 [ 2826.542814][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.550632][T28643] INITIAL READ USE at: [ 2826.555154][T28643] lock_acquire+0x1ed/0x550 [ 2826.562023][T28643] _raw_read_lock_bh+0x3d/0x50 [ 2826.569153][T28643] ppp_input+0x3dc/0xa10 [ 2826.575749][T28643] pppoe_rcv_core+0x117/0x310 [ 2826.582884][T28643] __release_sock+0x243/0x350 [ 2826.590107][T28643] release_sock+0x61/0x1f0 [ 2826.596994][T28643] pppoe_sendmsg+0xd5/0x750 [ 2826.603958][T28643] __sock_sendmsg+0x221/0x270 [ 2826.611005][T28643] ____sys_sendmsg+0x52a/0x7e0 [ 2826.618131][T28643] __sys_sendmmsg+0x3ac/0x730 [ 2826.625254][T28643] __x64_sys_sendmmsg+0xa0/0xb0 [ 2826.632463][T28643] do_syscall_64+0xf3/0x230 [ 2826.639333][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.647608][T28643] } [ 2826.650291][T28643] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 2826.659882][T28643] -> (&ppp->wlock){+...}-{2:2} { [ 2826.664963][T28643] HARDIRQ-ON-W at: [ 2826.669152][T28643] lock_acquire+0x1ed/0x550 [ 2826.675590][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2826.682195][T28643] ppp_get_stats64+0xc3/0x290 [ 2826.688736][T28643] dev_get_stats+0xad/0xa00 [ 2826.695084][T28643] rtnl_fill_stats+0x47/0x880 [ 2826.701605][T28643] rtnl_fill_ifinfo+0x18da/0x2270 [ 2826.708469][T28643] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 2826.715763][T28643] rtmsg_ifinfo+0x91/0x1b0 [ 2826.722013][T28643] register_netdevice+0x1774/0x1b00 [ 2826.729059][T28643] ppp_dev_configure+0x883/0xb10 [ 2826.735839][T28643] ppp_ioctl+0x797/0x1cd0 [ 2826.742017][T28643] __se_sys_ioctl+0xf9/0x170 [ 2826.748446][T28643] do_syscall_64+0xf3/0x230 [ 2826.754790][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.762518][T28643] INITIAL USE at: [ 2826.766503][T28643] lock_acquire+0x1ed/0x550 [ 2826.772755][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2826.779265][T28643] ppp_get_stats64+0xc3/0x290 [ 2826.785721][T28643] dev_get_stats+0xad/0xa00 [ 2826.791974][T28643] rtnl_fill_stats+0x47/0x880 [ 2826.798393][T28643] rtnl_fill_ifinfo+0x18da/0x2270 [ 2826.805242][T28643] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 2826.812379][T28643] rtmsg_ifinfo+0x91/0x1b0 [ 2826.818554][T28643] register_netdevice+0x1774/0x1b00 [ 2826.825518][T28643] ppp_dev_configure+0x883/0xb10 [ 2826.832226][T28643] ppp_ioctl+0x797/0x1cd0 [ 2826.838329][T28643] __se_sys_ioctl+0xf9/0x170 [ 2826.844681][T28643] do_syscall_64+0xf3/0x230 [ 2826.850949][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.858616][T28643] } [ 2826.861235][T28643] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 2826.870207][T28643] ... acquired at: [ 2826.874145][T28643] lock_acquire+0x1ed/0x550 [ 2826.878866][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2826.883814][T28643] ppp_connect_channel+0x174/0x650 [ 2826.889112][T28643] ppp_ioctl+0xdd4/0x1cd0 [ 2826.893643][T28643] __se_sys_ioctl+0xf9/0x170 [ 2826.898431][T28643] do_syscall_64+0xf3/0x230 [ 2826.903132][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.909305][T28643] [ 2826.911645][T28643] -> (&ppp->rlock){+...}-{2:2} { [ 2826.916631][T28643] HARDIRQ-ON-W at: [ 2826.920620][T28643] lock_acquire+0x1ed/0x550 [ 2826.926793][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2826.933217][T28643] ppp_get_stats64+0x33/0x290 [ 2826.939657][T28643] dev_get_stats+0xad/0xa00 [ 2826.945822][T28643] rtnl_fill_stats+0x47/0x880 [ 2826.952162][T28643] rtnl_fill_ifinfo+0x18da/0x2270 [ 2826.958843][T28643] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 2826.965866][T28643] rtmsg_ifinfo+0x91/0x1b0 [ 2826.971938][T28643] register_netdevice+0x1774/0x1b00 [ 2826.978805][T28643] ppp_dev_configure+0x883/0xb10 [ 2826.985407][T28643] ppp_ioctl+0x797/0x1cd0 [ 2826.991399][T28643] __se_sys_ioctl+0xf9/0x170 [ 2826.997649][T28643] do_syscall_64+0xf3/0x230 [ 2827.003815][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.011373][T28643] INITIAL USE at: [ 2827.015273][T28643] lock_acquire+0x1ed/0x550 [ 2827.021352][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2827.027687][T28643] ppp_get_stats64+0x33/0x290 [ 2827.033937][T28643] dev_get_stats+0xad/0xa00 [ 2827.040010][T28643] rtnl_fill_stats+0x47/0x880 [ 2827.046293][T28643] rtnl_fill_ifinfo+0x18da/0x2270 [ 2827.053064][T28643] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 2827.060090][T28643] rtmsg_ifinfo+0x91/0x1b0 [ 2827.066083][T28643] register_netdevice+0x1774/0x1b00 [ 2827.072865][T28643] ppp_dev_configure+0x883/0xb10 [ 2827.079387][T28643] ppp_ioctl+0x797/0x1cd0 [ 2827.085295][T28643] __se_sys_ioctl+0xf9/0x170 [ 2827.091463][T28643] do_syscall_64+0xf3/0x230 [ 2827.097541][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.105035][T28643] } [ 2827.107536][T28643] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 2827.116307][T28643] ... acquired at: [ 2827.120111][T28643] lock_acquire+0x1ed/0x550 [ 2827.124804][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2827.129753][T28643] ppp_dev_uninit+0x6c/0x1a0 [ 2827.134540][T28643] unregister_netdevice_many_notify+0x1735/0x1da0 [ 2827.141140][T28643] unregister_netdevice_queue+0x303/0x370 [ 2827.147046][T28643] ppp_release+0xed/0x1f0 [ 2827.151563][T28643] __fput+0x23f/0x880 [ 2827.155736][T28643] task_work_run+0x24f/0x310 [ 2827.160518][T28643] get_signal+0x16ad/0x1810 [ 2827.165397][T28643] arch_do_signal_or_restart+0x96/0x860 [ 2827.171128][T28643] syscall_exit_to_user_mode+0xc9/0x370 [ 2827.176874][T28643] do_syscall_64+0x100/0x230 [ 2827.181655][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.188264][T28643] [ 2827.190588][T28643] [ 2827.190588][T28643] the dependencies between the lock to be acquired [ 2827.190599][T28643] and SOFTIRQ-READ-irq-unsafe lock: [ 2827.204548][T28643] -> (&pch->downl){+.+.}-{2:2} { [ 2827.209534][T28643] HARDIRQ-ON-W at: [ 2827.213563][T28643] lock_acquire+0x1ed/0x550 [ 2827.219758][T28643] _raw_spin_lock+0x2e/0x40 [ 2827.226012][T28643] ppp_input+0x18b/0xa10 [ 2827.231948][T28643] pppoe_rcv_core+0x117/0x310 [ 2827.238285][T28643] __release_sock+0x243/0x350 [ 2827.244624][T28643] release_sock+0x61/0x1f0 [ 2827.250741][T28643] pppoe_sendmsg+0xd5/0x750 [ 2827.256914][T28643] __sock_sendmsg+0x221/0x270 [ 2827.263366][T28643] ____sys_sendmsg+0x52a/0x7e0 [ 2827.269785][T28643] __sys_sendmmsg+0x3ac/0x730 [ 2827.276130][T28643] __x64_sys_sendmmsg+0xa0/0xb0 [ 2827.282648][T28643] do_syscall_64+0xf3/0x230 [ 2827.288815][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.296369][T28643] SOFTIRQ-ON-W at: [ 2827.300444][T28643] lock_acquire+0x1ed/0x550 [ 2827.306613][T28643] _raw_spin_lock+0x2e/0x40 [ 2827.312774][T28643] ppp_input+0x18b/0xa10 [ 2827.318673][T28643] pppoe_rcv_core+0x117/0x310 [ 2827.325097][T28643] __release_sock+0x243/0x350 [ 2827.331434][T28643] release_sock+0x61/0x1f0 [ 2827.337598][T28643] pppoe_sendmsg+0xd5/0x750 [ 2827.343807][T28643] __sock_sendmsg+0x221/0x270 [ 2827.350264][T28643] ____sys_sendmsg+0x52a/0x7e0 [ 2827.356951][T28643] __sys_sendmmsg+0x3ac/0x730 [ 2827.363288][T28643] __x64_sys_sendmmsg+0xa0/0xb0 [ 2827.369815][T28643] do_syscall_64+0xf3/0x230 [ 2827.375985][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.383541][T28643] INITIAL USE at: [ 2827.387444][T28643] lock_acquire+0x1ed/0x550 [ 2827.393524][T28643] _raw_spin_lock+0x2e/0x40 [ 2827.399686][T28643] ppp_input+0x18b/0xa10 [ 2827.405523][T28643] pppoe_rcv_core+0x117/0x310 [ 2827.411775][T28643] __release_sock+0x243/0x350 [ 2827.418024][T28643] release_sock+0x61/0x1f0 [ 2827.424016][T28643] pppoe_sendmsg+0xd5/0x750 [ 2827.430093][T28643] __sock_sendmsg+0x221/0x270 [ 2827.436342][T28643] ____sys_sendmsg+0x52a/0x7e0 [ 2827.442697][T28643] __sys_sendmmsg+0x3ac/0x730 [ 2827.448950][T28643] __x64_sys_sendmmsg+0xa0/0xb0 [ 2827.455486][T28643] do_syscall_64+0xf3/0x230 [ 2827.461569][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.469059][T28643] } [ 2827.471568][T28643] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 2827.480951][T28643] ... acquired at: [ 2827.484758][T28643] lock_acquire+0x1ed/0x550 [ 2827.489449][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2827.494394][T28643] ppp_connect_channel+0x194/0x650 [ 2827.499691][T28643] ppp_ioctl+0xdd4/0x1cd0 [ 2827.504203][T28643] __se_sys_ioctl+0xf9/0x170 [ 2827.508989][T28643] do_syscall_64+0xf3/0x230 [ 2827.513680][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.519757][T28643] [ 2827.522084][T28643] [ 2827.522084][T28643] stack backtrace: [ 2827.527974][T28643] CPU: 0 UID: 0 PID: 28643 Comm: syz.1.5182 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2827.538390][T28643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2827.548471][T28643] Call Trace: [ 2827.551754][T28643] [ 2827.554693][T28643] dump_stack_lvl+0x241/0x360 [ 2827.559423][T28643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2827.564644][T28643] ? __pfx__printk+0x10/0x10 [ 2827.569255][T28643] ? print_shortest_lock_dependencies+0xf2/0x160 [ 2827.575603][T28643] validate_chain+0x4ebd/0x5920 [ 2827.580496][T28643] ? __pfx_validate_chain+0x10/0x10 [ 2827.585733][T28643] ? stack_depot_save_flags+0x29/0x830 [ 2827.591227][T28643] ? register_lock_class+0x102/0x980 [ 2827.596564][T28643] ? __pfx_register_lock_class+0x10/0x10 [ 2827.602220][T28643] ? mark_lock+0x9a/0x360 [ 2827.606559][T28643] __lock_acquire+0x1384/0x2050 [ 2827.611431][T28643] lock_acquire+0x1ed/0x550 [ 2827.615951][T28643] ? ppp_connect_channel+0x194/0x650 [ 2827.621252][T28643] ? __pfx_lock_acquire+0x10/0x10 [ 2827.626293][T28643] ? ppp_connect_channel+0x194/0x650 [ 2827.631593][T28643] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 2827.637446][T28643] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2827.643612][T28643] ? ppp_connect_channel+0x194/0x650 [ 2827.648937][T28643] _raw_spin_lock_bh+0x35/0x50 [ 2827.653729][T28643] ? ppp_connect_channel+0x194/0x650 [ 2827.659149][T28643] ppp_connect_channel+0x194/0x650 [ 2827.664457][T28643] ? __might_fault+0xaa/0x120 [ 2827.669276][T28643] ppp_ioctl+0xdd4/0x1cd0 [ 2827.673637][T28643] ? __pfx_ppp_ioctl+0x10/0x10 [ 2827.678429][T28643] ? __fget_files+0x3f3/0x470 [ 2827.683123][T28643] ? __pfx_ppp_ioctl+0x10/0x10 [ 2827.687908][T28643] __se_sys_ioctl+0xf9/0x170 [ 2827.692515][T28643] do_syscall_64+0xf3/0x230 [ 2827.697038][T28643] ? clear_bhb_loop+0x35/0x90 [ 2827.701731][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.707736][T28643] RIP: 0033:0x7fbcac77def9 [ 2827.712161][T28643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2827.731869][T28643] RSP: 002b:00007fbcad563038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2827.740300][T28643] RAX: ffffffffffffffda RBX: 00007fbcac935f80 RCX: 00007fbcac77def9 [ 2827.748277][T28643] RDX: 0000000020000280 RSI: 000000004004743a RDI: 0000000000000005 [ 2827.756254][T28643] RBP: 00007fbcac7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 2827.764237][T28643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2827.772235][T28643] R13: 0000000000000000 R14: 00007fbcac935f80 R15: 00007ffccb2cd178 [ 2827.780250][T28643] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2827.783392][ C0] vkms_vblank_simulate: vblank timer overrun [ 2827.847235][T28650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5185'. [ 2828.895312][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.019060][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.100992][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.191861][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.294337][ T11] bridge_slave_1: left allmulticast mode [ 2829.300368][ T11] bridge_slave_1: left promiscuous mode [ 2829.309418][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2829.318561][ T11] bridge_slave_0: left allmulticast mode [ 2829.324245][ T11] bridge_slave_0: left promiscuous mode [ 2829.332464][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2829.492492][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2829.504137][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2829.519236][ T11] bond0 (unregistering): Released all slaves [ 2829.736720][ T11] hsr_slave_0: left promiscuous mode [ 2829.742595][ T11] hsr_slave_1: left promiscuous mode [ 2829.748787][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2829.757384][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2829.765095][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2829.772664][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2829.783989][ T11] veth1_macvtap: left promiscuous mode [ 2829.789785][ T11] veth0_macvtap: left promiscuous mode [ 2829.795569][ T11] veth1_vlan: left promiscuous mode [ 2829.800829][ T11] veth0_vlan: left promiscuous mode [ 2829.982281][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2830.014738][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2830.494527][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.553319][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.592389][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.652986][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.738500][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.792253][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.854460][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.922253][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.032309][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.093416][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.143662][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.203614][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.318994][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.383506][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.451880][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.503072][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.611054][ T11] bridge_slave_1: left allmulticast mode [ 2831.617006][ T11] bridge_slave_1: left promiscuous mode [ 2831.623485][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2831.632317][ T11] bridge_slave_0: left allmulticast mode [ 2831.639827][ T11] bridge_slave_0: left promiscuous mode [ 2831.645562][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.656105][ T11] bridge_slave_1: left allmulticast mode [ 2831.662105][ T11] bridge_slave_1: left promiscuous mode [ 2831.667790][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2831.678299][ T11] bridge_slave_0: left allmulticast mode [ 2831.683975][ T11] bridge_slave_0: left promiscuous mode [ 2831.690969][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.700281][ T11] bridge_slave_1: left allmulticast mode [ 2831.705971][ T11] bridge_slave_1: left promiscuous mode [ 2831.712441][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2831.721299][ T11] bridge_slave_0: left allmulticast mode [ 2831.727032][ T11] bridge_slave_0: left promiscuous mode [ 2831.733927][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.743294][ T11] bridge_slave_1: left allmulticast mode [ 2831.749158][ T11] bridge_slave_1: left promiscuous mode [ 2831.755369][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2831.764810][ T11] bridge_slave_0: left allmulticast mode [ 2831.771175][ T11] bridge_slave_0: left promiscuous mode [ 2831.776883][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2832.204871][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2832.215131][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2832.225114][ T11] bond0 (unregistering): Released all slaves [ 2832.237406][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2832.250031][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2832.262142][ T11] bond0 (unregistering): Released all slaves [ 2832.275817][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2832.286010][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2832.295965][ T11] bond0 (unregistering): Released all slaves [ 2832.308488][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2832.323117][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2832.333919][ T11] bond0 (unregistering): Released all slaves [ 2832.851330][ T11] hsr_slave_0: left promiscuous mode [ 2832.857520][ T11] hsr_slave_1: left promiscuous mode [ 2832.865013][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2832.873580][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2832.882140][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2832.889647][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2832.899444][ T11] hsr_slave_0: left promiscuous mode [ 2832.905446][ T11] hsr_slave_1: left promiscuous mode [ 2832.911311][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2832.918711][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2832.926575][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2832.934038][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2832.944767][ T11] hsr_slave_0: left promiscuous mode [ 2832.950880][ T11] hsr_slave_1: left promiscuous mode [ 2832.956788][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2832.964580][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2832.972258][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2832.979766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2832.989541][ T11] hsr_slave_0: left promiscuous mode [ 2832.995807][ T11] hsr_slave_1: left promiscuous mode [ 2833.002163][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2833.009556][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2833.017437][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2833.024890][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2833.037963][ T11] veth1_macvtap: left promiscuous mode [ 2833.046547][ T11] veth0_macvtap: left promiscuous mode [ 2833.052213][ T11] veth1_vlan: left promiscuous mode [ 2833.057489][ T11] veth0_vlan: left promiscuous mode [ 2833.063559][ T11] veth1_macvtap: left promiscuous mode [ 2833.069081][ T11] veth0_macvtap: left promiscuous mode [ 2833.074765][ T11] veth1_vlan: left promiscuous mode [ 2833.080091][ T11] veth0_vlan: left promiscuous mode [ 2833.086106][ T11] veth1_macvtap: left promiscuous mode [ 2833.091718][ T11] veth0_macvtap: left promiscuous mode [ 2833.097266][ T11] veth1_vlan: left promiscuous mode [ 2833.102819][ T11] veth0_vlan: left promiscuous mode [ 2833.108737][ T11] veth1_macvtap: left promiscuous mode [ 2833.114331][ T11] veth0_macvtap: left promiscuous mode [ 2833.120016][ T11] veth1_vlan: left promiscuous mode [ 2833.125284][ T11] veth0_vlan: left promiscuous mode [ 2833.430054][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2833.464571][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2833.665754][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2833.679736][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2833.894150][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2833.926706][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2834.122754][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2834.154051][ T11] team0 (unregistering): Port device team_slave_0 removed