last executing test programs: 3m29.834768616s ago: executing program 2 (id=3): socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = creat(0x0, 0xecf86c37d53049cc) close(r4) 3m28.597730112s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @void}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3m27.442532942s ago: executing program 2 (id=11): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m25.172975304s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x3}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) 3m24.960632202s ago: executing program 0 (id=1): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0', 0x1) r1 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0', 0x1) r2 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0', 0x1) r3 = openat(0xffffff9c, &(0x7f0000000c00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0', 0x1) symlink(&(0x7f0000000e00)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000f00)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='dummy_udc.0', 0xb) 3m24.596868534s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* /tmp 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 /tmp 1\n\x00', 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/tmp\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 3m23.360869289s ago: executing program 0 (id=17): openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 3m19.98466942s ago: executing program 0 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000280)={{@align=0x3, {0x2, 0x0, 0x9, 0x9}}, {{[0xfffffff7, 0x0, 0x3, 0x4]}, 0x0, 0x1, 0xfffffff9, 0x0, 0x0}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='\n', 0x1) 3m19.797167644s ago: executing program 2 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0xf, 0x0, &(0x7f0000000000)=0x28) r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 3m14.939241613s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) open(0x0, 0x8000, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000f00)='./file1\x00') 3m12.838464803s ago: executing program 2 (id=31): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x14000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 3m9.978412545s ago: executing program 32 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x3}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) 3m0.069930605s ago: executing program 33 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 2m57.722714609s ago: executing program 34 (id=31): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x14000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1m10.805817463s ago: executing program 5 (id=184): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 1m7.776824671s ago: executing program 5 (id=189): sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x0) socket$kcm(0x29, 0x2, 0x0) 1m1.101064798s ago: executing program 5 (id=210): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x20000085) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/2478], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000"], 0x28}}, 0x0) 58.872033386s ago: executing program 5 (id=198): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x180000504) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 57.152408019s ago: executing program 6 (id=201): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x10, 0x200, &(0x7f0000000540)="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"}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 57.088177012s ago: executing program 5 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40010002, 0x0) r5 = syz_clone3(&(0x7f0000000500)={0x2100000, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180), {0x25}, 0x0, 0x0, &(0x7f0000000440)=""/79, 0x0}, 0x58) tgkill(r5, r2, 0x1b) 54.856659511s ago: executing program 5 (id=205): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) 47.797793302s ago: executing program 6 (id=217): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 45.801366912s ago: executing program 6 (id=223): sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') socket$kcm(0x29, 0x2, 0x0) 42.887196618s ago: executing program 6 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 39.049864629s ago: executing program 35 (id=205): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) 35.136650984s ago: executing program 1 (id=235): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x320242, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 35.115404777s ago: executing program 6 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/142, 0x8e}], 0x1, 0x36, 0xffffffff) 31.205083275s ago: executing program 6 (id=240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 29.72087284s ago: executing program 1 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc47f, 0xd, 0xfff, 0xfffffffa, 0x9ca0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x9438}, @TCA_PIE_TARGET={0x8, 0x1, 0x2}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7bf51655}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25.389624812s ago: executing program 4 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* /tmp 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 /tmp 1\n\x00', 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/tmp\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 25.147484847s ago: executing program 1 (id=244): getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = timerfd_create(0x1, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 19.80749733s ago: executing program 8 (id=247): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 17.442508865s ago: executing program 4 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 17.183026581s ago: executing program 1 (id=250): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_clone3(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0xd6fff000) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) 16.573386514s ago: executing program 8 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r2, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0x1000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0xffffffffffff9fe5, 0xffffffffffffffff, 0x24, {0x1, 0x8998}, 0xff}, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f00000000c0)={0x1, 0x4}) close(r6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c405) 16.280820853s ago: executing program 4 (id=253): socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087ccc6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 16.182675777s ago: executing program 7 (id=254): setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 15.949803677s ago: executing program 36 (id=240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 13.213167138s ago: executing program 7 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x9438}, @TCA_PIE_TARGET={0x8, 0x1, 0x2}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7bf51655}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.030617544s ago: executing program 4 (id=258): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @random='\a\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x0, 0x0, 0x32315842}}) 12.926725141s ago: executing program 8 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) fsopen(0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) close(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) io_setup(0xc, &(0x7f0000000040)=0x0) io_pgetevents(r2, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.515126783s ago: executing program 8 (id=260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) 11.325496806s ago: executing program 4 (id=261): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.908621179s ago: executing program 7 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* /tmp 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 /tmp 1\n\x00', 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/tmp\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 7.155944035s ago: executing program 8 (id=263): getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = timerfd_create(0x1, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 7.155676468s ago: executing program 4 (id=264): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39"], 0xf) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) 5.26109069s ago: executing program 7 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000480)="fef0eda8c799a4", 0x7, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc0046209, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xe1, 0x800, 0x400, 0xffffffc0, 0x0, 0xd91, 0x6a1ebc98, 0x70000}}) 3.477236456s ago: executing program 1 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x6004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.40000698s ago: executing program 8 (id=267): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) 3.260653312s ago: executing program 7 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) 391.197348ms ago: executing program 7 (id=269): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=270): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) connect$pptp(r3, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 86.787079][ T5607] cgroup: Unknown subsys name 'net' [ 86.927641][ T5607] cgroup: Unknown subsys name 'cpuset' [ 86.937351][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.646772][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.193444][ T185] cfg80211: failed to load regulatory.db [ 91.262382][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.284933][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.296271][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.308108][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.308743][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.315883][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.324850][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.332083][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.340714][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.345510][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.363980][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.364471][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.377865][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.382711][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.394933][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.402826][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.403238][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.410617][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.420337][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.431786][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.433813][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.440683][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.453400][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.454781][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.468351][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.477281][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.479796][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.492051][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.500724][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.515675][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.504766][ T5643] Bluetooth: hci0: command tx timeout [ 93.584053][ T5645] Bluetooth: hci4: command tx timeout [ 93.590095][ T5645] Bluetooth: hci5: command tx timeout [ 93.596442][ T50] Bluetooth: hci3: command tx timeout [ 93.596553][ T5633] Bluetooth: hci1: command tx timeout [ 93.603443][ T5643] Bluetooth: hci2: command tx timeout [ 94.049716][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.057740][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.065516][ T5623] bridge_slave_0: entered allmulticast mode [ 94.073448][ T5623] bridge_slave_0: entered promiscuous mode [ 94.158659][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.165944][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.175354][ T5623] bridge_slave_1: entered allmulticast mode [ 94.184203][ T5623] bridge_slave_1: entered promiscuous mode [ 94.342603][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.420899][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.444156][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.451430][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.459926][ T5631] bridge_slave_0: entered allmulticast mode [ 94.467650][ T5631] bridge_slave_0: entered promiscuous mode [ 94.483975][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.491127][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.498516][ T5621] bridge_slave_0: entered allmulticast mode [ 94.506655][ T5621] bridge_slave_0: entered promiscuous mode [ 94.566518][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.573865][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.581053][ T5631] bridge_slave_1: entered allmulticast mode [ 94.589257][ T5631] bridge_slave_1: entered promiscuous mode [ 94.603635][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.610799][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.618367][ T5621] bridge_slave_1: entered allmulticast mode [ 94.626143][ T5621] bridge_slave_1: entered promiscuous mode [ 94.646294][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.653661][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.660977][ T5629] bridge_slave_0: entered allmulticast mode [ 94.669086][ T5629] bridge_slave_0: entered promiscuous mode [ 94.731470][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.738769][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.746094][ T5629] bridge_slave_1: entered allmulticast mode [ 94.754037][ T5629] bridge_slave_1: entered promiscuous mode [ 94.764803][ T5623] team0: Port device team_slave_0 added [ 94.813241][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.837286][ T5623] team0: Port device team_slave_1 added [ 94.860027][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.891908][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.927056][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.934490][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.941697][ T5622] bridge_slave_0: entered allmulticast mode [ 94.949735][ T5622] bridge_slave_0: entered promiscuous mode [ 94.959961][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.983564][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.990724][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.998430][ T5630] bridge_slave_0: entered allmulticast mode [ 95.006109][ T5630] bridge_slave_0: entered promiscuous mode [ 95.030700][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.054101][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.061392][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.068910][ T5622] bridge_slave_1: entered allmulticast mode [ 95.076669][ T5622] bridge_slave_1: entered promiscuous mode [ 95.096672][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.104376][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.111603][ T5630] bridge_slave_1: entered allmulticast mode [ 95.120776][ T5630] bridge_slave_1: entered promiscuous mode [ 95.161625][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.171818][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.180183][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.206823][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.233838][ T5631] team0: Port device team_slave_0 added [ 95.254459][ T5621] team0: Port device team_slave_0 added [ 95.275533][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.282626][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.309014][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.335605][ T5631] team0: Port device team_slave_1 added [ 95.344586][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.356086][ T5621] team0: Port device team_slave_1 added [ 95.389157][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.413776][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.438911][ T5629] team0: Port device team_slave_0 added [ 95.448311][ T5629] team0: Port device team_slave_1 added [ 95.456997][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.519122][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.526258][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.552274][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.584072][ T5643] Bluetooth: hci0: command tx timeout [ 95.592591][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.599685][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.626007][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.663400][ T5633] Bluetooth: hci1: command tx timeout [ 95.663435][ T50] Bluetooth: hci3: command tx timeout [ 95.668867][ T5633] Bluetooth: hci4: command tx timeout [ 95.674345][ T5645] Bluetooth: hci5: command tx timeout [ 95.686193][ T5643] Bluetooth: hci2: command tx timeout [ 95.694515][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.701499][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.727538][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.763125][ T5622] team0: Port device team_slave_0 added [ 95.769567][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.776924][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.803354][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.816844][ T5630] team0: Port device team_slave_0 added [ 95.830139][ T5623] hsr_slave_0: entered promiscuous mode [ 95.836797][ T5623] hsr_slave_1: entered promiscuous mode [ 95.852833][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.859869][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.886868][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.900727][ T5622] team0: Port device team_slave_1 added [ 95.931494][ T5630] team0: Port device team_slave_1 added [ 95.943002][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.950006][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.975967][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.001819][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.008962][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.035482][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.094251][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.101258][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.127643][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.212780][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.219897][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.246019][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.311593][ T5629] hsr_slave_0: entered promiscuous mode [ 96.319399][ T5629] hsr_slave_1: entered promiscuous mode [ 96.326069][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 96.331879][ T5629] Cannot create hsr debugfs directory [ 96.340114][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.347268][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.373809][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.401534][ T5621] hsr_slave_0: entered promiscuous mode [ 96.408251][ T5621] hsr_slave_1: entered promiscuous mode [ 96.414716][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 96.420440][ T5621] Cannot create hsr debugfs directory [ 96.442042][ T5631] hsr_slave_0: entered promiscuous mode [ 96.448819][ T5631] hsr_slave_1: entered promiscuous mode [ 96.455317][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 96.461041][ T5631] Cannot create hsr debugfs directory [ 96.504637][ T5622] hsr_slave_0: entered promiscuous mode [ 96.511350][ T5622] hsr_slave_1: entered promiscuous mode [ 96.518293][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 96.524251][ T5622] Cannot create hsr debugfs directory [ 96.666339][ T5630] hsr_slave_0: entered promiscuous mode [ 96.673024][ T5630] hsr_slave_1: entered promiscuous mode [ 96.679359][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 96.685712][ T5630] Cannot create hsr debugfs directory [ 97.364838][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.382188][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.392954][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.404450][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.414373][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.427261][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.446486][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.458099][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.530533][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.542706][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.558327][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.568515][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.578952][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.590118][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.598379][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.609204][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.663094][ T5633] Bluetooth: hci0: command tx timeout [ 97.724493][ T5621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.735973][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.744383][ T5633] Bluetooth: hci3: command tx timeout [ 97.744412][ T5643] Bluetooth: hci5: command tx timeout [ 97.749811][ T50] Bluetooth: hci1: command tx timeout [ 97.749846][ T50] Bluetooth: hci4: command tx timeout [ 97.749878][ T50] Bluetooth: hci2: command tx timeout [ 97.775648][ T5621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.785496][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.794203][ T5621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.804762][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.813528][ T5621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.823183][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.927688][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.938829][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.947088][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.957330][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.965547][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.976143][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.989686][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.000160][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.017057][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.158829][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.171028][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.182102][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.190198][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.200441][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.208648][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.218288][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.227467][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.237955][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.265039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.272218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.348440][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.355635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.404902][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.415822][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.430948][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.447115][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.458331][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.479783][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.489970][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.498579][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.508404][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.566506][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.617183][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.624358][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.680313][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.687491][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.707757][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.734940][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.858631][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.875054][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.911074][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.918307][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.955625][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.962842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.976287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.983518][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.015153][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.022403][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.086095][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.222058][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.246053][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.339582][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.346791][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.420074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.427344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.502105][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.642323][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.649573][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.677241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.684468][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.747412][ T5643] Bluetooth: hci0: command tx timeout [ 99.757689][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.825349][ T5643] Bluetooth: hci3: command tx timeout [ 99.826859][ T5625] Bluetooth: hci4: command tx timeout [ 99.830800][ T5643] Bluetooth: hci1: command tx timeout [ 99.830830][ T5643] Bluetooth: hci5: command tx timeout [ 99.850802][ T5633] Bluetooth: hci2: command tx timeout [ 101.006399][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.160385][ T5623] veth0_vlan: entered promiscuous mode [ 101.233107][ T5623] veth1_vlan: entered promiscuous mode [ 101.270274][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.364416][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.486737][ T5629] veth0_vlan: entered promiscuous mode [ 101.502463][ T5623] veth0_macvtap: entered promiscuous mode [ 101.538970][ T5623] veth1_macvtap: entered promiscuous mode [ 101.562090][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.602204][ T5629] veth1_vlan: entered promiscuous mode [ 101.626074][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.647278][ T5631] veth0_vlan: entered promiscuous mode [ 101.681209][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.699244][ T5631] veth1_vlan: entered promiscuous mode [ 101.734678][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.898316][ T5629] veth0_macvtap: entered promiscuous mode [ 101.962000][ T5631] veth0_macvtap: entered promiscuous mode [ 101.978201][ T5622] veth0_vlan: entered promiscuous mode [ 101.986269][ T5629] veth1_macvtap: entered promiscuous mode [ 102.021965][ T5631] veth1_macvtap: entered promiscuous mode [ 102.033147][ T111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.090341][ T5630] veth0_vlan: entered promiscuous mode [ 102.107033][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.121029][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.130549][ T5630] veth1_vlan: entered promiscuous mode [ 102.163279][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.180994][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.189397][ T5622] veth1_vlan: entered promiscuous mode [ 102.249865][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.264277][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.278875][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.279310][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.323776][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.379799][ T5621] veth0_vlan: entered promiscuous mode [ 102.391548][ T5630] veth0_macvtap: entered promiscuous mode [ 102.410095][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.416565][ T5621] veth1_vlan: entered promiscuous mode [ 102.470399][ T5630] veth1_macvtap: entered promiscuous mode [ 102.523538][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.644068][ T5621] veth0_macvtap: entered promiscuous mode [ 102.657449][ T5621] veth1_macvtap: entered promiscuous mode [ 102.690024][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.702802][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.766544][ T2991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.778619][ T2991] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.792025][ T2991] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.801253][ T2991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.810449][ T2991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.820570][ T2991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.832585][ T2991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.844325][ T2991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.888129][ T5622] veth0_macvtap: entered promiscuous mode [ 103.054949][ T1051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.466201][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.505714][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.512458][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.536553][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.550106][ T5622] veth1_macvtap: entered promiscuous mode [ 103.593499][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.643665][ T2991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.679028][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.703577][ T1051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.714701][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.765549][ T2991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.956292][ T1051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.001965][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.048423][ T1051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.099023][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.335783][ T1051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.461378][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.472763][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.554285][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.705739][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.735027][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.923144][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.938573][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.961348][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.042245][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.073020][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.116886][ T1040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.243979][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.602887][ T111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.738198][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.849888][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.196515][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.215689][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.310562][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.355369][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.426710][ T5881] syzkaller0: entered promiscuous mode [ 108.783383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.687968][ T5881] syzkaller0: entered allmulticast mode [ 109.831768][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.879356][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.195835][ T5896] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 110.224065][ T5896] udc dummy_udc.0: failed to start g1: -19 [ 110.282670][ T5896] UDC core: g1: couldn't find an available UDC or it's busy [ 115.224979][ T5629] svc: failed to register nfsdv3 RPC service (errno 111). [ 115.259770][ T5629] svc: failed to register nfsaclv3 RPC service (errno 111). [ 115.290413][ T5629] failed to unregister tcp with rpcbind [ 116.517212][ T5629] svc: failed to register nfsdv3 RPC service (errno 97). [ 116.561719][ T5629] svc: failed to register nfsaclv3 RPC service (errno 97). [ 116.713093][ T5629] failed to unregister tcp with rpcbind [ 118.175648][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 118.613111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.118037][ T5952] process 'syz.2.21' launched '/dev/fd/6' with NULL argv: empty string added [ 119.867751][ T5959] loop4: detected capacity change from 0 to 512 [ 120.133407][ T5959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.173115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.583306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.248578][ T5959] EXT4-fs error (device loop4): ext4_readdir:223: inode #12: comm syz.4.27: path /8/file0/file0: directory fails checksum at offset 0 [ 123.954430][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.536393][ T5979] syzkaller0: entered promiscuous mode [ 124.542073][ T5979] syzkaller0: entered allmulticast mode [ 126.420164][ T5993] netlink: 48 bytes leftover after parsing attributes in process `syz.5.36'. [ 126.475626][ T5993] Zero length message leads to an empty skb [ 127.109977][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.38'. [ 128.311591][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.328824][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.339877][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.353905][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.365121][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.463839][ T5625] Bluetooth: hci6: command tx timeout [ 130.506605][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.173706][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 132.204076][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.212094][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.234783][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 132.544036][ T5625] Bluetooth: hci6: command tx timeout [ 133.875280][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.714817][ T5625] Bluetooth: hci6: command tx timeout [ 135.240908][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.534216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.943466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.103754][ T5625] Bluetooth: hci6: command tx timeout [ 137.353060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.789878][ T6061] loop1: detected capacity change from 0 to 40427 [ 137.833176][ T6061] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 137.841085][ T6061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 137.851184][ T6061] F2FS-fs (loop1): invalid crc value [ 137.996091][ T6061] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.025375][ T6061] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.033398][ T6061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.097661][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.110364][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.121090][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.130479][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.138836][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.271741][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.426462][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.445814][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.458079][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.472206][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.487291][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.223151][ T5625] Bluetooth: hci5: command tx timeout [ 140.846791][ T12] bridge_slave_1: left allmulticast mode [ 140.886971][ T12] bridge_slave_1: left promiscuous mode [ 140.917335][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.008093][ T12] bridge_slave_0: left allmulticast mode [ 141.026414][ T12] bridge_slave_0: left promiscuous mode [ 141.055036][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.363313][ T5625] Bluetooth: hci7: command tx timeout [ 142.373838][ T5625] Bluetooth: hci5: command tx timeout [ 143.803519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.213002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 145.658841][ T5633] Bluetooth: hci5: command tx timeout [ 145.658875][ T5625] Bluetooth: hci7: command tx timeout [ 147.238030][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.267737][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.308234][ T12] bond0 (unregistering): Released all slaves [ 147.359919][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 147.792434][ T5625] Bluetooth: hci7: command tx timeout [ 147.793497][ T5633] Bluetooth: hci5: command tx timeout [ 149.824874][ T5633] Bluetooth: hci7: command tx timeout [ 150.093713][ T12] hsr_slave_0: left promiscuous mode [ 150.117390][ T12] hsr_slave_1: left promiscuous mode [ 150.140995][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.172772][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.183938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.183971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.260973][ T12] veth1_macvtap: left promiscuous mode [ 150.261069][ T12] veth0_macvtap: left promiscuous mode [ 150.261207][ T12] veth1_vlan: left promiscuous mode [ 150.261316][ T12] veth0_vlan: left promiscuous mode [ 155.052916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 157.995456][ T12] team0 (unregistering): Port device team_slave_1 removed [ 158.017480][ T12] team0 (unregistering): Port device team_slave_0 removed [ 158.081486][ T6218] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 158.500617][ T6222] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.453337][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.478681][ T6195] tipc: Started in network mode [ 159.495744][ T6195] tipc: Node identity eefa6f7dbf01, cluster identity 4711 [ 159.523571][ T6195] tipc: Enabled bearer , priority 0 [ 159.535472][ T6204] syzkaller0: entered promiscuous mode [ 159.555130][ T6204] syzkaller0: entered allmulticast mode [ 160.641244][ T6215] tipc: Resetting bearer [ 160.748113][ T6215] tipc: Disabling bearer [ 160.879164][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.886598][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.895685][ T6004] bridge_slave_0: entered allmulticast mode [ 160.917011][ T6004] bridge_slave_0: entered promiscuous mode [ 160.932358][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.940463][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.952070][ T6004] bridge_slave_1: entered allmulticast mode [ 160.960837][ T6004] bridge_slave_1: entered promiscuous mode [ 161.911912][ T5632] tipc: Node number set to 1375432573 [ 162.004282][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.148746][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.209512][ T6004] team0: Port device team_slave_0 added [ 163.218738][ T6004] team0: Port device team_slave_1 added [ 163.982816][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.002922][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.061712][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.815326][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.837772][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.883279][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.624863][ T6286] loop5: detected capacity change from 0 to 40427 [ 165.723439][ T6286] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 165.731314][ T6286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 165.832164][ T6286] F2FS-fs (loop5): invalid crc value [ 165.937485][ T6286] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 165.975255][ T6286] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 165.982654][ T6286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 166.331424][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.157000][ T6302] syz.4.89 uses obsolete (PF_INET,SOCK_PACKET) [ 167.265718][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.298980][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.314483][ T6067] bridge_slave_0: entered allmulticast mode [ 167.331028][ T6067] bridge_slave_0: entered promiscuous mode [ 167.554615][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.589246][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.597575][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.618864][ T6067] bridge_slave_1: entered allmulticast mode [ 167.646461][ T6067] bridge_slave_1: entered promiscuous mode [ 167.722596][ T6004] hsr_slave_0: entered promiscuous mode [ 167.749858][ T6004] hsr_slave_1: entered promiscuous mode [ 167.771214][ T6004] debugfs: 'hsr0' already exists in 'hsr' [ 167.799800][ T6004] Cannot create hsr debugfs directory [ 167.926600][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.188009][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.945064][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.075445][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.115060][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.456661][ T6067] team0: Port device team_slave_0 added [ 171.714207][ T6067] team0: Port device team_slave_1 added [ 173.045484][ T6337] input: syz0 as /devices/virtual/input/input6 [ 173.149325][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.183479][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.211233][ T6075] bridge_slave_0: entered allmulticast mode [ 173.238212][ T6075] bridge_slave_0: entered promiscuous mode [ 173.270964][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.300554][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.327842][ T6075] bridge_slave_1: entered allmulticast mode [ 173.352220][ T6075] bridge_slave_1: entered promiscuous mode [ 173.379271][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.401219][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.569407][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.617562][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.643380][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.902803][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 175.460205][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.862551][ T6366] capability: warning: `syz.5.102' uses deprecated v2 capabilities in a way that may be insecure [ 179.032822][ T6383] loop4: detected capacity change from 0 to 4096 [ 179.040339][ T6383] ======================================================= [ 179.040339][ T6383] WARNING: The mand mount option has been deprecated and [ 179.040339][ T6383] and is ignored by this kernel. Remove the mand [ 179.040339][ T6383] option from the mount to silence this warning. [ 179.040339][ T6383] ======================================================= [ 179.075464][ T6383] ntfs3: Unknown parameter '@' [ 181.197253][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.227966][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.321627][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 181.710293][ T6075] team0: Port device team_slave_0 added [ 181.769438][ T6075] team0: Port device team_slave_1 added [ 182.566824][ T6067] hsr_slave_0: entered promiscuous mode [ 182.584211][ T6067] hsr_slave_1: entered promiscuous mode [ 182.607166][ T6067] debugfs: 'hsr0' already exists in 'hsr' [ 182.632696][ T6067] Cannot create hsr debugfs directory [ 182.867215][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.885779][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.943085][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.965333][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.987690][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.055403][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.263195][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.273964][ T5922] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 183.294487][ T5922] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 183.323989][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.181319][ T6075] hsr_slave_0: entered promiscuous mode [ 185.204874][ T6075] hsr_slave_1: entered promiscuous mode [ 185.231195][ T6075] debugfs: 'hsr0' already exists in 'hsr' [ 185.251800][ T6075] Cannot create hsr debugfs directory [ 185.423554][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.457122][ T5772] IPVS: starting estimator thread 0... [ 185.488459][ T6438] netlink: 164 bytes leftover after parsing attributes in process `syz.4.114'. [ 185.504480][ T5922] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 185.504916][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.554627][ T6004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.561765][ T6438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.114'. [ 185.574091][ T5922] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 185.653062][ T6439] IPVS: using max 25 ests per chain, 60000 per kthread [ 186.724195][ T6004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.016896][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.903003][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.051965][ T5922] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 188.108959][ T5922] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 188.465600][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 188.676453][ T6474] netlink: 'syz.5.118': attribute type 10 has an invalid length. [ 188.700381][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.843619][ T6474] syz_tun: entered promiscuous mode [ 188.866723][ T6474] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 188.896332][ T6477] tipc: Started in network mode [ 188.901827][ T6477] tipc: Node identity 5ee629976da8, cluster identity 4711 [ 188.910827][ T6477] tipc: Enabled bearer , priority 0 [ 188.939497][ T6473] syzkaller0: entered promiscuous mode [ 188.945936][ T6473] syzkaller0: entered allmulticast mode [ 188.967012][ T6479] netlink: 'syz.1.120': attribute type 4 has an invalid length. [ 188.992728][ T6475] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 189.015226][ T6480] netlink: 'syz.1.120': attribute type 4 has an invalid length. [ 189.178135][ T6475] tipc: Resetting bearer [ 189.229893][ T6067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 189.244163][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.276410][ T6472] tipc: Resetting bearer [ 189.304473][ T6472] tipc: Disabling bearer [ 190.445308][ T6067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 190.502682][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.526778][ T6067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 190.568147][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.832305][ T6067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 190.896229][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.027265][ T12] bridge_slave_1: left allmulticast mode [ 192.042637][ T12] bridge_slave_1: left promiscuous mode [ 192.790726][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout [ 193.017554][ T5922] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 193.025207][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.033253][ T5922] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 193.754934][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.762453][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345334][ T12] bridge_slave_0: left allmulticast mode [ 194.956678][ T12] bridge_slave_0: left promiscuous mode [ 195.677181][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.803716][ T12] bridge_slave_1: left allmulticast mode [ 196.834752][ T12] bridge_slave_1: left promiscuous mode [ 196.874474][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.090568][ T12] bridge_slave_0: left allmulticast mode [ 197.106710][ T12] bridge_slave_0: left promiscuous mode [ 197.227540][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.463178][ T5633] Bluetooth: hci7: command 0x0c1a tx timeout [ 198.701862][ T5922] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 198.790898][ T5922] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 198.928174][ T6571] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 199.026269][ T6574] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 199.106673][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.131803][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.149043][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.161376][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.175229][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.189375][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.202601][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.231002][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.247978][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.260484][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.276906][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.286187][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.296844][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.297286][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.314396][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.321768][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.322822][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.342321][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.349773][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.370765][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.428680][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.444988][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.455871][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.466860][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.476960][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.344866][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.394243][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.430309][ T12] bond0 (unregistering): Released all slaves [ 200.727880][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.740148][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.752499][ T12] bond0 (unregistering): Released all slaves [ 200.881826][ T6548] tipc: Enabled bearer , priority 0 [ 201.435836][ T5625] Bluetooth: hci3: command tx timeout [ 201.442815][ T50] Bluetooth: hci4: command tx timeout [ 201.695662][ T50] Bluetooth: hci6: command tx timeout [ 201.946806][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 202.016772][ T6546] tipc: Disabling bearer [ 203.251472][ T6617] o2cb: This node has not been configured. [ 203.257563][ T6617] o2cb: Cluster check failed. Fix errors before retrying. [ 203.264791][ T6617] (syz.1.141,6617,0):user_dlm_register:674 ERROR: status = -22 [ 203.272367][ T6617] (syz.1.141,6617,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file2" [ 203.783019][ T50] Bluetooth: hci4: command tx timeout [ 203.788519][ T50] Bluetooth: hci6: command tx timeout [ 203.794084][ T50] Bluetooth: hci3: command tx timeout [ 204.964640][ T9] IPVS: starting estimator thread 0... [ 204.969961][ T6627] netlink: 164 bytes leftover after parsing attributes in process `syz.1.142'. [ 205.020156][ T6627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.142'. [ 205.625960][ T6629] IPVS: using max 22 ests per chain, 52800 per kthread [ 205.825101][ T5633] Bluetooth: hci4: command tx timeout [ 205.830650][ T50] Bluetooth: hci6: command tx timeout [ 205.837643][ T5625] Bluetooth: hci3: command tx timeout [ 208.006986][ T5625] Bluetooth: hci3: command tx timeout [ 208.012552][ T5625] Bluetooth: hci6: command tx timeout [ 208.018168][ T50] Bluetooth: hci4: command tx timeout [ 208.668856][ T12] hsr_slave_0: left promiscuous mode [ 208.676041][ T6668] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 208.709304][ T12] hsr_slave_1: left promiscuous mode [ 208.733932][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.762278][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.801128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.825290][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.859315][ T12] hsr_slave_0: left promiscuous mode [ 208.877033][ T12] hsr_slave_1: left promiscuous mode [ 208.891101][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.908575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.927959][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.950017][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.040515][ T12] veth1_macvtap: left promiscuous mode [ 209.057749][ T12] veth0_macvtap: left promiscuous mode [ 209.071567][ T12] veth1_vlan: left promiscuous mode [ 209.086313][ T12] veth0_vlan: left promiscuous mode [ 209.134869][ T12] veth1_macvtap: left promiscuous mode [ 209.147483][ T12] veth0_macvtap: left promiscuous mode [ 209.166112][ T12] veth1_vlan: left promiscuous mode [ 209.179502][ T12] veth0_vlan: left promiscuous mode [ 209.787566][ T12] team0 (unregistering): Port device team_slave_1 removed [ 209.816436][ T12] team0 (unregistering): Port device team_slave_0 removed [ 210.117857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 210.137276][ T12] team0 (unregistering): Port device team_slave_0 removed [ 210.273885][ T6668] syz_tun: entered promiscuous mode [ 210.291608][ T6668] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 210.353841][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 211.457244][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.464874][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.472175][ T6564] bridge_slave_0: entered allmulticast mode [ 211.480680][ T6564] bridge_slave_0: entered promiscuous mode [ 211.548766][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.556365][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.563803][ T6564] bridge_slave_1: entered allmulticast mode [ 211.572008][ T6564] bridge_slave_1: entered promiscuous mode [ 211.650022][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 211.682282][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.696072][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.762020][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.769508][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.776894][ T6447] bridge_slave_0: entered allmulticast mode [ 211.785351][ T6447] bridge_slave_0: entered promiscuous mode [ 211.823540][ T6564] team0: Port device team_slave_0 added [ 211.829537][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.837008][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.844497][ T6447] bridge_slave_1: entered allmulticast mode [ 211.852134][ T6447] bridge_slave_1: entered promiscuous mode [ 211.874961][ T6564] team0: Port device team_slave_1 added [ 211.923989][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.931231][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.938959][ T6580] bridge_slave_0: entered allmulticast mode [ 211.946991][ T6580] bridge_slave_0: entered promiscuous mode [ 211.974963][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.986037][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.993734][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.001094][ T6580] bridge_slave_1: entered allmulticast mode [ 212.009424][ T6580] bridge_slave_1: entered promiscuous mode [ 212.019358][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.027021][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.053188][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.069885][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.126750][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.135863][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.162130][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.256759][ T6447] team0: Port device team_slave_0 added [ 212.276408][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.313263][ T6447] team0: Port device team_slave_1 added [ 212.322763][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.500605][ T6564] hsr_slave_0: entered promiscuous mode [ 212.510455][ T6564] hsr_slave_1: entered promiscuous mode [ 212.518909][ T6564] debugfs: 'hsr0' already exists in 'hsr' [ 212.524800][ T6564] Cannot create hsr debugfs directory [ 212.554948][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.561934][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.592247][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.607733][ T6580] team0: Port device team_slave_0 added [ 212.641001][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.648283][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.674458][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.734680][ T6580] team0: Port device team_slave_1 added [ 212.820178][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.827654][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.855339][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.921230][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.928522][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.954699][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.014301][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 213.028945][ T6447] hsr_slave_0: entered promiscuous mode [ 213.037728][ T6447] hsr_slave_1: entered promiscuous mode [ 213.044362][ T6447] debugfs: 'hsr0' already exists in 'hsr' [ 213.050110][ T6447] Cannot create hsr debugfs directory [ 213.237403][ T6580] hsr_slave_0: entered promiscuous mode [ 213.244357][ T6580] hsr_slave_1: entered promiscuous mode [ 213.250570][ T6580] debugfs: 'hsr0' already exists in 'hsr' [ 213.257717][ T6580] Cannot create hsr debugfs directory [ 214.156682][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 214.198376][ T12] bridge_slave_1: left allmulticast mode [ 214.204963][ T12] bridge_slave_1: left promiscuous mode [ 214.212622][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.225918][ T12] bridge_slave_0: left allmulticast mode [ 214.231580][ T12] bridge_slave_0: left promiscuous mode [ 214.237427][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.251168][ T12] bridge_slave_1: left allmulticast mode [ 214.256883][ T12] bridge_slave_1: left promiscuous mode [ 214.262701][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.272211][ T12] bridge_slave_0: left allmulticast mode [ 214.278979][ T12] bridge_slave_0: left promiscuous mode [ 214.284940][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.298271][ T12] bridge_slave_1: left allmulticast mode [ 214.304898][ T12] bridge_slave_1: left promiscuous mode [ 214.310977][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.321367][ T12] bridge_slave_0: left allmulticast mode [ 214.327382][ T12] bridge_slave_0: left promiscuous mode [ 214.333602][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.429611][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.441745][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.452148][ T12] bond0 (unregistering): Released all slaves [ 214.546429][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.558318][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.569895][ T12] bond0 (unregistering): Released all slaves [ 214.662388][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.674095][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.687551][ T12] bond0 (unregistering): Released all slaves [ 214.921186][ T12] hsr_slave_0: left promiscuous mode [ 214.934006][ T12] hsr_slave_1: left promiscuous mode [ 214.940369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.950471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.967735][ T12] hsr_slave_0: left promiscuous mode [ 214.974133][ T12] hsr_slave_1: left promiscuous mode [ 214.980339][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.989874][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.005728][ T12] hsr_slave_0: left promiscuous mode [ 215.012065][ T12] hsr_slave_1: left promiscuous mode [ 215.018425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.028650][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.249992][ T12] team0 (unregistering): Port device team_slave_1 removed [ 215.285828][ T12] team0 (unregistering): Port device team_slave_0 removed [ 215.641583][ T12] team0 (unregistering): Port device team_slave_1 removed [ 215.661009][ T12] team0 (unregistering): Port device team_slave_0 removed [ 215.938401][ T12] team0 (unregistering): Port device team_slave_1 removed [ 215.959264][ T12] team0 (unregistering): Port device team_slave_0 removed [ 216.116772][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 216.787393][ T6564] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 216.808950][ T6564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.817612][ T6564] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 216.830873][ T6564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.850885][ T6564] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.887542][ T6564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.908236][ T6564] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 216.936961][ T6564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.086567][ T6447] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 217.105421][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.117729][ T6447] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 217.131091][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.140278][ T6447] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 217.150849][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.160605][ T6447] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 217.184893][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.356391][ T6580] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 217.370083][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.384461][ T6580] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 217.398616][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.422526][ T6580] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 217.447102][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.457804][ T6580] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 217.469854][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.582194][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.627109][ T6564] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.660877][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.668215][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.700586][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.707836][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.738382][ T6447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.819774][ T6447] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.859337][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.866583][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.900527][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.907717][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.022556][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.087240][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.127527][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.134698][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.200520][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.207708][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.209414][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.292031][ T6447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.568646][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.040286][ T6564] veth0_vlan: entered promiscuous mode [ 220.085267][ T6564] veth1_vlan: entered promiscuous mode [ 220.127596][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 220.195114][ T6447] veth0_vlan: entered promiscuous mode [ 220.240627][ T6564] veth0_macvtap: entered promiscuous mode [ 220.265760][ T6447] veth1_vlan: entered promiscuous mode [ 220.281481][ T6564] veth1_macvtap: entered promiscuous mode [ 220.337961][ T6580] veth0_vlan: entered promiscuous mode [ 220.375649][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.441042][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.465869][ T6447] veth0_macvtap: entered promiscuous mode [ 220.475790][ T6580] veth1_vlan: entered promiscuous mode [ 220.491634][ T6447] veth1_macvtap: entered promiscuous mode [ 220.544158][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.574994][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.622559][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.693642][ T5990] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.721959][ T6580] veth0_macvtap: entered promiscuous mode [ 220.761421][ T6580] veth1_macvtap: entered promiscuous mode [ 220.779697][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.791834][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.798513][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.844150][ T5990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.942458][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.983295][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.990967][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.004010][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.043843][ T5990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.068285][ T5990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.102313][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.129700][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.164195][ T6389] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.234803][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.662701][ T6909] ubi0: attaching mtd0 [ 222.063594][ T6909] ubi0: scanning is finished [ 222.068635][ T6909] ubi0: empty MTD device detected [ 222.080112][ T6910] Cannot find add_set index 0 as target [ 222.126672][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.162333][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.319131][ T5990] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.356778][ T5990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.364376][ T6909] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 222.544469][ T5956] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.555956][ T5956] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.614450][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.648084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.759909][ T6917] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 222.821310][ T6923] loop6: detected capacity change from 0 to 512 [ 224.399740][ T6923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 224.856760][ T6923] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 224.958308][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.031939][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.089285][ T6923] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 225.178165][ T6923] EXT4-fs (loop6): 1 truncate cleaned up [ 225.869627][ T6923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.218601][ T6941] netlink: 'syz.5.150': attribute type 4 has an invalid length. [ 226.222618][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.268374][ T6946] netlink: 'syz.5.150': attribute type 4 has an invalid length. [ 226.384672][ T6945] gadgetfs: bound to dummy_udc driver [ 226.765071][ T6954] loop8: detected capacity change from 0 to 40427 [ 226.937844][ T6954] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 226.946475][ T6954] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 227.083302][ T5632] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 227.092746][ C0] gadgetfs: connected [ 227.099198][ T5632] gadgetfs: disconnected [ 227.127326][ T6954] F2FS-fs (loop8): invalid crc value [ 227.885104][ T6968] loop6: detected capacity change from 0 to 4096 [ 227.892712][ T6968] ntfs3: Unknown parameter '@' [ 227.990610][ T6954] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 228.141886][ T6954] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 228.149190][ T6954] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 228.224792][ C0] gadgetfs: connected [ 228.438995][ T5632] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 229.209321][ T5632] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 229.238092][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.277433][ C0] gadgetfs: configuration #1 [ 229.445006][ T6952] gadgetfs: suspended from state 3 [ 229.452552][ T6952] gadgetfs: disconnected [ 229.495529][ T5632] usb 1-1: USB disconnect, device number 2 [ 229.765326][ T6982] tipc: Started in network mode [ 229.770237][ T6982] tipc: Node identity 6e652675119e, cluster identity 4711 [ 229.820191][ T6982] tipc: Enabled bearer , priority 0 [ 229.837468][ T6986] syzkaller0: entered promiscuous mode [ 229.861546][ T6986] syzkaller0: entered allmulticast mode [ 229.893700][ T6982] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 230.941147][ T6981] tipc: Resetting bearer [ 231.060288][ T6981] tipc: Disabling bearer [ 231.185704][ T5772] tipc: Node number set to 2147165813 [ 231.540416][ T6999] tipc: Started in network mode [ 231.572552][ T6999] tipc: Node identity 42da84b23c83, cluster identity 4711 [ 233.364150][ T6999] tipc: Enabled bearer , priority 0 [ 234.207366][ T7005] loop6: detected capacity change from 0 to 32768 [ 234.235201][ T7005] (syz.6.166,7005,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.251431][ T7005] (syz.6.166,7005,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.285169][ T7005] JBD2: Ignoring recovery information on journal [ 234.350415][ T7005] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 234.429929][ T5786] tipc: Node number set to 2119795890 [ 234.848110][ T6999] tipc: Disabling bearer [ 235.865110][ T7021] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 236.037677][ T30] audit: type=1800 audit(1785904833.928:2): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.171" name="memory_backed" dev="configfs" ino=15808 res=0 errno=0 [ 236.132198][ T30] audit: type=1800 audit(1785904833.968:3): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.171" name="zone_nr_conv" dev="configfs" ino=16638 res=0 errno=0 [ 236.225541][ T30] audit: type=1800 audit(1785904833.968:4): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.171" name="power" dev="configfs" ino=16639 res=0 errno=0 [ 236.370159][ T7028] Bluetooth: MGMT ver 1.23 [ 236.570632][ T7022] null_blk: disk nullb1 created [ 237.911868][ T7039] loop7: detected capacity change from 0 to 32768 [ 237.997228][ T7039] (syz.7.185,7039,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.012419][ T7039] (syz.7.185,7039,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.298923][ T7044] Mass Storage Function, version: 2009/09/11 [ 238.306309][ T7039] debugfs: '9357E9D751824C228242B9B0D0FB6750' already exists in 'ocfs2' [ 238.321719][ T7039] JBD2: Ignoring recovery information on journal [ 238.368703][ T30] audit: type=1800 audit(1785904836.268:5): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.175" name="UDC" dev="configfs" ino=16722 res=0 errno=0 [ 238.399050][ T7048] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 238.416780][ T7039] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 238.494757][ T6447] ocfs2: Unmounting device (7,6) on (node local) [ 238.681667][ T7044] LUN: removable file: (no medium) [ 240.025944][ T7063] loop5: detected capacity change from 0 to 4096 [ 240.033603][ T7063] ntfs3: Unknown parameter '@' [ 240.128466][ T7048] udc dummy_udc.0: failed to start g1: -19 [ 240.275561][ T7048] UDC core: g1: couldn't find an available UDC or it's busy [ 240.513742][ T7060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.209948][ T7080] tipc: Enabling of bearer rejected, failed to enable media [ 242.277879][ T6564] ocfs2: Unmounting device (7,7) on (node local) [ 246.888386][ T7117] tipc: Enabled bearer , priority 0 [ 246.968011][ T7116] tipc: Disabling bearer [ 247.065120][ T7120] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 250.471020][ T7139] tipc: Started in network mode [ 251.213116][ T7139] tipc: Node identity a2a4fa370308, cluster identity 4711 [ 251.633719][ T7139] tipc: Enabled bearer , priority 0 [ 251.645361][ T7142] Set syz1 is full, maxelem 65536 reached [ 251.870280][ T7145] syzkaller0: entered promiscuous mode [ 251.877984][ T7145] syzkaller0: entered allmulticast mode [ 251.888909][ T7139] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 252.089103][ T7152] trusted_key: encrypted_key: insufficient parameters specified [ 252.597599][ T7154] loop7: detected capacity change from 0 to 32768 [ 252.641107][ T7154] (syz.7.194,7154,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.658297][ T7154] (syz.7.194,7154,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.686415][ T7137] tipc: Resetting bearer [ 252.710709][ T7154] JBD2: Ignoring recovery information on journal [ 252.819476][ T7154] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 253.379272][ T7137] tipc: Disabling bearer [ 253.433711][ T5772] tipc: Node number set to 2712468023 [ 254.084547][ T7170] loop6: detected capacity change from 0 to 32768 [ 254.147192][ T7170] (syz.6.208,7170,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.161228][ T7170] (syz.6.208,7170,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.181607][ T7170] debugfs: '9357E9D751824C228242B9B0D0FB6750' already exists in 'ocfs2' [ 254.228465][ T7170] JBD2: Ignoring recovery information on journal [ 254.520006][ T7170] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 254.661949][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.210'. [ 255.025273][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.032135][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003864][ T6564] ocfs2: Unmounting device (7,7) on (node local) [ 257.881177][ T6447] ocfs2: Unmounting device (7,6) on (node local) [ 260.358977][ T7216] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 260.390883][ T7213] tipc: Enabled bearer , priority 0 [ 260.516460][ T7212] tipc: Disabling bearer [ 264.251213][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 265.277686][ T7236] Set syz1 is full, maxelem 65536 reached [ 266.566477][ T5633] Bluetooth: hci6: link tx timeout [ 266.574225][ T5633] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.025436][ T50] Bluetooth: hci6: link tx timeout [ 267.030639][ T50] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.745410][ T7260] loop4: detected capacity change from 0 to 32768 [ 267.769026][ T7260] (syz.4.218,7260,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.782796][ T7260] (syz.4.218,7260,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.807050][ T7260] JBD2: Ignoring recovery information on journal [ 267.922405][ T7260] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 269.045801][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 269.826718][ T7273] UDC core: g1: couldn't find an available UDC or it's busy [ 271.748110][ T5623] ocfs2: Unmounting device (7,4) on (node local) [ 271.753674][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.8.226'. [ 275.576994][ T7300] smpboot: CPU 1 is now offline [ 275.704475][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 283.787751][ T30] audit: type=1800 audit(1785904881.678:6): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.238" name="idVendor" dev="configfs" ino=17280 res=0 errno=0 [ 283.841137][ T7346] file system registered [ 283.889330][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.907580][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.926584][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.937250][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.948719][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.021501][ T7344] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 284.121685][ T30] audit: type=1800 audit(1785904881.718:7): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.238" name="idProduct" dev="configfs" ino=17281 res=0 errno=0 [ 286.062971][ T50] Bluetooth: hci5: command tx timeout [ 288.774652][ T50] Bluetooth: hci5: command tx timeout [ 289.160552][ T7361] tipc: Enabling of bearer rejected, failed to enable media [ 289.817995][ T7306] bond0: (slave syz_tun): Releasing backup interface [ 290.860081][ T50] Bluetooth: hci5: command tx timeout [ 292.942946][ T50] Bluetooth: hci5: command tx timeout [ 295.101105][ T1040] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.487040][ T5623] svc: failed to register nfsdv3 RPC service (errno 111). [ 297.571039][ T5623] svc: failed to register nfsaclv3 RPC service (errno 111). [ 297.638497][ T5623] failed to unregister tcp with rpcbind [ 297.688922][ T5623] svc: failed to register nfsdv3 RPC service (errno 97). [ 297.706121][ T1040] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.775201][ T5623] svc: failed to register nfsaclv3 RPC service (errno 97). [ 297.829796][ T5623] failed to unregister tcp with rpcbind [ 298.081214][ T1040] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.475636][ T1040] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.874637][ T7422] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 298.990519][ T7422] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 299.913126][ T7432] xt_hashlimit: size too large, truncated to 1048576 [ 301.193460][ T7422] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 302.176865][ T7444] warning: `syz.4.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 302.628259][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.643185][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.652421][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.663474][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.677866][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.728965][ T7443] tipc: Started in network mode [ 302.770461][ T7443] tipc: Node identity a647ee765dbf, cluster identity 4711 [ 302.826943][ T7443] tipc: Enabled bearer , priority 0 [ 302.911000][ T7440] syzkaller0: entered promiscuous mode [ 302.948642][ T7440] syzkaller0: entered allmulticast mode [ 303.058894][ T7449] tipc: Resetting bearer [ 303.253821][ T7439] tipc: Resetting bearer [ 303.371144][ T7439] tipc: Disabling bearer [ 303.581368][ T1040] bridge_slave_1: left allmulticast mode [ 304.786474][ T5633] Bluetooth: hci0: command tx timeout [ 304.949998][ T1040] bridge_slave_1: left promiscuous mode [ 305.912589][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.972514][ T1040] bridge_slave_0: left allmulticast mode [ 306.947045][ T5633] Bluetooth: hci0: command tx timeout [ 306.989380][ T1040] bridge_slave_0: left promiscuous mode [ 307.669693][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.201128][ T5633] Bluetooth: hci0: command tx timeout [ 309.631502][ T6564] svc: failed to register nfsdv3 RPC service (errno 111). [ 309.675524][ T6564] svc: failed to register nfsaclv3 RPC service (errno 111). [ 309.720177][ T6564] failed to unregister tcp with rpcbind [ 309.752399][ T6564] svc: failed to register nfsdv3 RPC service (errno 97). [ 309.812683][ T6564] svc: failed to register nfsaclv3 RPC service (errno 97). [ 309.845994][ T6564] failed to unregister tcp with rpcbind [ 311.268479][ T7475] binder: 7473:7475 ioctl c0046209 0 returned -22 [ 311.330401][ T5633] Bluetooth: hci0: command tx timeout [ 311.403277][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.460689][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.652734][ T1040] bond0 (unregistering): Released all slaves [ 313.196577][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.268'. [ 314.372682][ T7490] tipc: Enabling of bearer rejected, failed to enable media [ 314.731070][ T1040] tipc: Left network mode [ 314.808533][ T1040] rxrpc: Assertion failed [ 314.862696][ T1040] ------------[ cut here ]------------ [ 314.869021][ T1040] kernel BUG at net/rxrpc/conn_object.c:488! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.476870][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.514991][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.528313][ T1040] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 316.534810][ T1040] CPU: 0 UID: 0 PID: 1040 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 316.544285][ T1040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 316.554339][ T1040] Workqueue: netns cleanup_net [ 316.559106][ T1040] RIP: 0010:rxrpc_destroy_all_connections.cold+0x12/0x14 [ 316.566148][ T1040] Code: ff 90 0f 0b e8 ca 82 98 00 48 c7 c7 80 12 3a 8d e8 9e 79 b0 ff 90 0f 0b e8 b6 82 98 00 48 c7 c7 80 12 3a 8d e8 8a 79 b0 ff 90 <0f> 0b e8 a2 82 98 00 49 63 d6 48 83 ce ff 48 c7 c7 20 7c de 90 e8 [ 316.585880][ T1040] RSP: 0018:ffffc9000519f990 EFLAGS: 00010282 [ 316.591946][ T1040] RAX: 0000000000000017 RBX: ffff888029c40000 RCX: 0000000000000000 [ 316.599911][ T1040] RDX: 0000000000000017 RSI: ffffffff81e89fd9 RDI: fffff52000a33f23 [ 316.607875][ T1040] RBP: ffff888029c40064 R08: 0000000000000005 R09: 0000000000000000 [ 316.615838][ T1040] R10: 0000000080000000 R11: 0000000000000000 R12: 1ffff92000a33f34 [ 316.623800][ T1040] R13: ffff888029c40078 R14: ffff888029c40088 R15: ffff888029c40088 [ 316.631816][ T1040] FS: 0000000000000000(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 316.640743][ T1040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.647317][ T1040] CR2: 00007f6c701e4b45 CR3: 0000000057648000 CR4: 0000000000350ef0 [ 316.655280][ T1040] Call Trace: [ 316.658546][ T1040] [ 316.661462][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.667111][ T1040] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 316.673630][ T1040] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 316.679611][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.685264][ T1040] ? __timer_delete_sync+0x151/0x1c0 [ 316.690547][ T1040] rxrpc_exit_net+0x7b/0xc0 [ 316.695052][ T1040] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 316.700251][ T1040] ops_undo_list+0x2ee/0xab0 [ 316.704859][ T1040] ? __pfx_ops_undo_list+0x10/0x10 [ 316.709980][ T1040] ? cleanup_net+0x332/0x920 [ 316.714562][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.720195][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.725827][ T1040] ? idr_destroy+0x62/0x2e0 [ 316.730333][ T1040] cleanup_net+0x499/0x920 [ 316.734744][ T1040] ? __pfx_cleanup_net+0x10/0x10 [ 316.739727][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.745360][ T1040] ? rcu_is_watching+0x12/0xc0 [ 316.750160][ T1040] process_one_work+0xa23/0x1940 [ 316.755100][ T1040] ? __pfx_process_one_work+0x10/0x10 [ 316.760464][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.766104][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.771742][ T1040] worker_thread+0x5ef/0xe50 [ 316.776335][ T1040] ? kthread+0x13a/0x450 [ 316.780592][ T1040] ? __pfx_worker_thread+0x10/0x10 [ 316.785714][ T1040] kthread+0x370/0x450 [ 316.789799][ T1040] ? __pfx_kthread+0x10/0x10 [ 316.794404][ T1040] ret_from_fork+0x72b/0xd50 [ 316.798999][ T1040] ? __pfx_ret_from_fork+0x10/0x10 [ 316.804314][ T1040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.809954][ T1040] ? __switch_to+0x800/0x10f0 [ 316.814649][ T1040] ? __switch_to_asm+0x39/0x70 [ 316.819422][ T1040] ? __pfx_kthread+0x10/0x10 [ 316.824033][ T1040] ret_from_fork_asm+0x1a/0x30 [ 316.828821][ T1040] [ 316.831827][ T1040] Modules linked in: [ 316.838515][ T1040] ---[ end trace 0000000000000000 ]--- [ 319.586084][ T5622] bond0: (slave syz_tun): Releasing backup interface [ 320.243539][ T1040] RIP: 0010:rxrpc_destroy_all_connections.cold+0x12/0x14 [ 320.284486][ T1040] Code: ff 90 0f 0b e8 ca 82 98 00 48 c7 c7 80 12 3a 8d e8 9e 79 b0 ff 90 0f 0b e8 b6 82 98 00 48 c7 c7 80 12 3a 8d e8 8a 79 b0 ff 90 <0f> 0b e8 a2 82 98 00 49 63 d6 48 83 ce ff 48 c7 c7 20 7c de 90 e8 [ 320.372144][ T1040] RSP: 0018:ffffc9000519f990 EFLAGS: 00010282 [ 320.411370][ T1040] RAX: 0000000000000017 RBX: ffff888029c40000 RCX: 0000000000000000 [ 320.433264][ T1040] RDX: 0000000000000017 RSI: ffffffff81e89fd9 RDI: fffff52000a33f23 [ 320.458128][ T1040] RBP: ffff888029c40064 R08: 0000000000000005 R09: 0000000000000000 [ 320.474953][ T1040] R10: 0000000080000000 R11: 0000000000000000 R12: 1ffff92000a33f34 [ 320.492927][ T1040] R13: ffff888029c40078 R14: ffff888029c40088 R15: ffff888029c40088 [ 320.513128][ T1040] FS: 0000000000000000(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 320.527066][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 320.598573][ T1040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.620320][ T1040] CR2: 0000558cf9997138 CR3: 000000000e994000 CR4: 0000000000350ef0 [ 320.646285][ T1040] Kernel panic - not syncing: Fatal exception [ 320.652418][ T1040] Kernel Offset: disabled [ 320.656732][ T1040] Rebooting in 86400 seconds..