last executing test programs: 1m7.254472084s ago: executing program 1 (id=21): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @generic={0x82, 0xc, "11b683c86a21559393fc"}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sk_msg=0xf1804ec5a093f13f}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x31, 0x1e}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close(r2) 1m5.458403138s ago: executing program 1 (id=23): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000008, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 1m5.182355013s ago: executing program 1 (id=27): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') pread64(r4, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.175465422s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5808, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1m2.301315038s ago: executing program 1 (id=34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m1.737823899s ago: executing program 1 (id=40): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="0f09f30fc7b6b5ac2ef30f7ffb440f20c066350e000000440f22c0f40f30f7cd0a0036670f2095d903", 0x2d}], 0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.625424039s ago: executing program 32 (id=40): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="0f09f30fc7b6b5ac2ef30f7ffb440f20c066350e000000440f22c0f40f30f7cd0a0036670f2095d903", 0x2d}], 0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.184956382s ago: executing program 2 (id=146): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYRESOCT], 0x50}, 0x4) 28.496753085s ago: executing program 2 (id=152): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}], 0x1, 0x16, 0x0) 28.325996088s ago: executing program 2 (id=154): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) 27.265473138s ago: executing program 2 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5808, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 26.987710184s ago: executing program 2 (id=158): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x2, 0x19, 0x33, &(0x7f0000000080)}) 25.929527064s ago: executing program 2 (id=159): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000000c0)=0x3, 0x4) timer_create(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x9, 0xffff, 0x3, 0x0, 0xff}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10000010}, 0x81) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x8000801, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @mcast2, 0x7}, 0x1c) close(0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffeffffd) 25.334053646s ago: executing program 33 (id=159): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000000c0)=0x3, 0x4) timer_create(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x9, 0xffff, 0x3, 0x0, 0xff}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10000010}, 0x81) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x8000801, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @mcast2, 0x7}, 0x1c) close(0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffeffffd) 14.002999963s ago: executing program 0 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r3, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) landlock_create_ruleset(&(0x7f0000000300)={0x1102}, 0x18, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r2, 0x2, {0x2, 0xf0}, 0xfd}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_rdma(0x10, 0x3, 0x14) 8.783496552s ago: executing program 0 (id=204): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) 7.363265889s ago: executing program 0 (id=208): mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000fed000/0x2000)=nil) 7.259425652s ago: executing program 0 (id=210): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 7.024494896s ago: executing program 0 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r3, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) landlock_create_ruleset(&(0x7f0000000300)={0x1102}, 0x18, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r2, 0x2, {0x2, 0xf0}, 0xfd}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_rdma(0x10, 0x3, 0x14) 5.849728109s ago: executing program 4 (id=215): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.086153353s ago: executing program 5 (id=216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) setrlimit(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 4.942006146s ago: executing program 5 (id=217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) lseek(r1, 0x5, 0x3) 4.842483318s ago: executing program 4 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.502755934s ago: executing program 3 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x13, 0xfffffffb, 0x4, 0x8000}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a00000000010600"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) 3.804615828s ago: executing program 4 (id=221): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000110000008500000050"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bind$unix(r2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x701, 0x70bd2b, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 3.13122251s ago: executing program 3 (id=222): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.737589458s ago: executing program 5 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x12b0}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xa, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71, r2}, 0x38) syz_open_dev$evdev(0x0, 0x2, 0x842) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800000, 0x0) semget$private(0x0, 0x2, 0x486) bpf$MAP_CREATE(0x0, 0x0, 0x48) iopl(0x3) gettid() timer_create(0x0, 0x0, 0x0) mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.260587157s ago: executing program 4 (id=224): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.59495591s ago: executing program 5 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2010000000000400140013"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 829.660295ms ago: executing program 0 (id=226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x4, 0x9}, 0x0, &(0x7f0000000180)={0x3fb, 0x408000, 0x400000000002, 0x2000000000009, 0x40000000000000, 0x1000000f, 0x6, 0x2}, 0x0, 0x0) 744.116036ms ago: executing program 5 (id=227): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/24, 0x18) getdents64(r0, &(0x7f00000001c0)=""/219, 0xdb) 731.556687ms ago: executing program 4 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 632.437978ms ago: executing program 3 (id=229): mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000fed000/0x2000)=nil) 560.43368ms ago: executing program 3 (id=230): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 437.400532ms ago: executing program 5 (id=231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) lseek(r1, 0x5, 0x3) 273.662855ms ago: executing program 4 (id=232): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x1c2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$netlink(0x10, 0x3, 0x8000000004) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 200.691397ms ago: executing program 3 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5808, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) 0s ago: executing program 3 (id=234): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 66.358281][ T5770] cgroup: Unknown subsys name 'net' [ 66.493319][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.892427][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.001750][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.011138][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.019810][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.025113][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.028060][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.042159][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.049955][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.073488][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.086967][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.093039][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.102502][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.112443][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.116585][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.121632][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.134122][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.134711][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.150005][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.157821][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.159034][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.172490][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.180204][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.187623][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.195390][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.212493][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.490810][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 70.585299][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 70.703689][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.710966][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.718457][ T5780] bridge_slave_0: entered allmulticast mode [ 70.725638][ T5780] bridge_slave_0: entered promiscuous mode [ 70.759538][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.767081][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.774262][ T5780] bridge_slave_1: entered allmulticast mode [ 70.781655][ T5780] bridge_slave_1: entered promiscuous mode [ 70.838176][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.845335][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.853182][ T5782] bridge_slave_0: entered allmulticast mode [ 70.860389][ T5782] bridge_slave_0: entered promiscuous mode [ 70.879650][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.889207][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.896927][ T5782] bridge_slave_1: entered allmulticast mode [ 70.904158][ T5782] bridge_slave_1: entered promiscuous mode [ 70.927488][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.938616][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 70.964286][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.008663][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.028512][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 71.043610][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.065494][ T5780] team0: Port device team_slave_0 added [ 71.079507][ T5780] team0: Port device team_slave_1 added [ 71.137274][ T5782] team0: Port device team_slave_0 added [ 71.152902][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.160676][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.187050][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.210521][ T5782] team0: Port device team_slave_1 added [ 71.232077][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.239156][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.265579][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.311897][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.319220][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.326487][ T5783] bridge_slave_0: entered allmulticast mode [ 71.333228][ T5783] bridge_slave_0: entered promiscuous mode [ 71.340879][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.348165][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.374232][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.400160][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.408068][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.415331][ T5783] bridge_slave_1: entered allmulticast mode [ 71.422406][ T5783] bridge_slave_1: entered promiscuous mode [ 71.439467][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.446873][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.473138][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.517383][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.559696][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.567465][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.574733][ T5781] bridge_slave_0: entered allmulticast mode [ 71.584221][ T5781] bridge_slave_0: entered promiscuous mode [ 71.593061][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.632072][ T5780] hsr_slave_0: entered promiscuous mode [ 71.638526][ T5780] hsr_slave_1: entered promiscuous mode [ 71.645507][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.652916][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.660236][ T5781] bridge_slave_1: entered allmulticast mode [ 71.668039][ T5781] bridge_slave_1: entered promiscuous mode [ 71.695304][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.702019][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.724682][ T5783] team0: Port device team_slave_0 added [ 71.747058][ T5782] hsr_slave_0: entered promiscuous mode [ 71.753297][ T5782] hsr_slave_1: entered promiscuous mode [ 71.761232][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.773174][ T5782] Cannot create hsr debugfs directory [ 71.791853][ T5783] team0: Port device team_slave_1 added [ 71.825425][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.863668][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.873444][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.881491][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.907677][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.941922][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.949103][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.975174][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.027860][ T5781] team0: Port device team_slave_0 added [ 72.064502][ T5781] team0: Port device team_slave_1 added [ 72.087317][ T5796] Bluetooth: hci0: command tx timeout [ 72.152014][ T5783] hsr_slave_0: entered promiscuous mode [ 72.159099][ T5783] hsr_slave_1: entered promiscuous mode [ 72.165160][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.173096][ T5783] Cannot create hsr debugfs directory [ 72.190385][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.197519][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.224002][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.246276][ T5796] Bluetooth: hci1: command tx timeout [ 72.246731][ T5790] Bluetooth: hci2: command tx timeout [ 72.252042][ T5796] Bluetooth: hci3: command tx timeout [ 72.282743][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.291748][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.318030][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.408316][ T5781] hsr_slave_0: entered promiscuous mode [ 72.414570][ T5781] hsr_slave_1: entered promiscuous mode [ 72.421382][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.430028][ T5781] Cannot create hsr debugfs directory [ 72.553266][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.583078][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.593532][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.621604][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.694409][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.712553][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.723017][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.735380][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.815478][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.844200][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.855870][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.891516][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.925493][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.950407][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.961776][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.972832][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.109723][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.149394][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.165030][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.190665][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.219031][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.226407][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.241665][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.248846][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.274404][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.281583][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.299337][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.317141][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.324396][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.351419][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.375542][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.425908][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.433128][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.449806][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.475445][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.491164][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.498388][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.559468][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.566641][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.629773][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.636958][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.920856][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.934542][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.083959][ T5781] veth0_vlan: entered promiscuous mode [ 74.114253][ T5780] veth0_vlan: entered promiscuous mode [ 74.135553][ T5781] veth1_vlan: entered promiscuous mode [ 74.161088][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.170923][ T5796] Bluetooth: hci0: command tx timeout [ 74.182902][ T5780] veth1_vlan: entered promiscuous mode [ 74.213944][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.250213][ T5781] veth0_macvtap: entered promiscuous mode [ 74.262784][ T5781] veth1_macvtap: entered promiscuous mode [ 74.280390][ T5782] veth0_vlan: entered promiscuous mode [ 74.294800][ T5780] veth0_macvtap: entered promiscuous mode [ 74.305769][ T5780] veth1_macvtap: entered promiscuous mode [ 74.319868][ T5782] veth1_vlan: entered promiscuous mode [ 74.327029][ T5796] Bluetooth: hci3: command tx timeout [ 74.336969][ T5796] Bluetooth: hci2: command tx timeout [ 74.337366][ T5790] Bluetooth: hci1: command tx timeout [ 74.374139][ T5783] veth0_vlan: entered promiscuous mode [ 74.390582][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.411340][ T5783] veth1_vlan: entered promiscuous mode [ 74.424808][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.455039][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.470597][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.483330][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.494636][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.504585][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.513665][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.522570][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535442][ T5782] veth0_macvtap: entered promiscuous mode [ 74.553834][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.564892][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.578193][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.593797][ T5782] veth1_macvtap: entered promiscuous mode [ 74.625628][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.634735][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.643918][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.652839][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.663819][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.674706][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.684873][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.695703][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.708189][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.724695][ T5783] veth0_macvtap: entered promiscuous mode [ 74.736069][ T5783] veth1_macvtap: entered promiscuous mode [ 74.750363][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.761195][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.771701][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.782656][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.793613][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.804527][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813835][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822821][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.831617][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.903786][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.916258][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.927156][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.939262][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.949283][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.960340][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.973213][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.023098][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.034986][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.049034][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.059803][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.070493][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.081045][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.092264][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.105651][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.119743][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.129059][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.138104][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.181357][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.200661][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.226255][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.239799][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.260313][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.300059][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.321292][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.329841][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.399016][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.408624][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.431342][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.449125][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.494785][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.509588][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.633513][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.743971][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.033753][ T5880] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 76.042307][ T5880] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.249126][ T5790] Bluetooth: hci0: command tx timeout [ 76.407251][ T5790] Bluetooth: hci2: command tx timeout [ 76.412714][ T5790] Bluetooth: hci3: command tx timeout [ 76.418757][ T5796] Bluetooth: hci1: command tx timeout [ 76.575880][ T5884] syz.3.5[5884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.929688][ T5884] loop3: detected capacity change from 0 to 40427 [ 76.970875][ T5884] F2FS-fs (loop3): invalid crc value [ 77.067007][ T5884] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.244016][ T5884] F2FS-fs (loop3): Start checkpoint disabled! [ 77.596899][ T5884] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 78.189412][ T5888] loop2: detected capacity change from 0 to 1024 [ 78.241536][ T23] IPVS: starting estimator thread 0... [ 78.263742][ T5888] ======================================================= [ 78.263742][ T5888] WARNING: The mand mount option has been deprecated and [ 78.263742][ T5888] and is ignored by this kernel. Remove the mand [ 78.263742][ T5888] option from the mount to silence this warning. [ 78.263742][ T5888] ======================================================= [ 78.293638][ T5884] syz.3.5: attempt to access beyond end of device [ 78.293638][ T5884] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 78.329955][ T5789] Bluetooth: hci0: command tx timeout [ 78.347710][ T5888] EXT4-fs: Ignoring removed orlov option [ 78.396646][ T5900] IPVS: using max 18 ests per chain, 43200 per kthread [ 78.536315][ T5789] Bluetooth: hci3: command tx timeout [ 78.541783][ T5789] Bluetooth: hci1: command tx timeout [ 78.542415][ T5790] Bluetooth: hci2: command tx timeout [ 78.687675][ T5888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.735172][ T5888] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.743617][ T5905] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 78.806359][ T5905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.845095][ T5888] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 78.884726][ T5888] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 78.955756][ T5905] team0: Port device geneve0 added [ 79.077007][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.104542][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.265834][ T12] kworker/u4:1: attempt to access beyond end of device [ 79.265834][ T12] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 79.318608][ T5841] usb 2-1: config index 0 descriptor too short (expected 30768, got 18) [ 79.356710][ T5841] usb 2-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 79.385076][ T12] kworker/u4:1: attempt to access beyond end of device [ 79.385076][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 79.407350][ T5841] usb 2-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 79.423550][ T5841] usb 2-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 79.444930][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 79.466051][ T5841] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 79.472255][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 79.475920][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.954920][ T5841] usb 2-1: string descriptor 0 read error: -71 [ 79.973575][ T5841] usb 2-1: USB disconnect, device number 2 [ 80.189134][ T27] audit: type=1326 audit(1757672396.713:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 80.226545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.263487][ T5917] sctp: [Deprecated]: syz.3.12 (pid 5917) Use of int in max_burst socket option deprecated. [ 80.263487][ T5917] Use struct sctp_assoc_value instead [ 80.316571][ T27] audit: type=1326 audit(1757672396.713:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 80.382168][ T27] audit: type=1326 audit(1757672396.713:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 80.438081][ T5919] loop2: detected capacity change from 0 to 128 [ 80.454244][ T27] audit: type=1326 audit(1757672396.713:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 80.483668][ T27] audit: type=1326 audit(1757672396.713:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 80.606197][ T27] audit: type=1326 audit(1757672396.713:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 80.694319][ T27] audit: type=1326 audit(1757672396.713:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 80.760787][ T27] audit: type=1326 audit(1757672396.713:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0f8eba9 code=0x7fc00000 [ 81.646373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.588757][ T786] cfg80211: failed to load regulatory.db [ 82.617314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.227087][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.534784][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.630075][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.644277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.688697][ T5872] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.697922][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.705939][ T5872] usb 1-1: SerialNumber: syz [ 83.807293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 83.816388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.934656][ T5872] usb 1-1: 0:2 : does not exist [ 84.002087][ T5872] usb 1-1: USB disconnect, device number 2 [ 84.516998][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.637770][ T5947] loop2: detected capacity change from 0 to 16 [ 84.728789][ T5947] erofs: (device loop2): mounted with root inode @ nid 36. [ 85.090575][ T5949] process 'syz.2.22' launched './file2' with NULL argv: empty string added [ 85.111568][ T5949] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 85.121602][ T5949] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 85.133531][ T5949] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 85.143351][ T5949] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 85.152648][ T5949] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 85.162460][ T5949] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 85.172044][ T5949] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 85.183101][ T5949] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 85.193193][ T5949] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 85.684892][ T5951] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 85.727082][ T5951] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 85.753796][ T5951] overlayfs: missing 'lowerdir' [ 88.854673][ T5957] Bluetooth: MGMT ver 1.22 [ 88.887493][ T5957] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 91.277288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.330090][ T1093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.504742][ T1093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.548926][ T6006] loop2: detected capacity change from 0 to 7 [ 91.628614][ T6006] loop2: [ 91.632331][ T6006] loop2: partition table partially beyond EOD, truncated [ 92.218395][ T1093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.423271][ T6011] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 92.540082][ T1093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.576422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.446860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.667200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.230470][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.251186][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.259440][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.267844][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.275674][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.283081][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.480308][ T6035] Zero length message leads to an empty skb [ 96.176033][ T6061] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.052186][ T5796] Bluetooth: hci2: command tx timeout [ 97.507241][ T6027] chnl_net:caif_netlink_parms(): no params data found [ 98.775634][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.783981][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.792412][ T6027] bridge_slave_0: entered allmulticast mode [ 98.801308][ T6027] bridge_slave_0: entered promiscuous mode [ 98.812551][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.820274][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.827885][ T6027] bridge_slave_1: entered allmulticast mode [ 98.854763][ T6027] bridge_slave_1: entered promiscuous mode [ 99.143178][ T5796] Bluetooth: hci2: command tx timeout [ 99.210312][ T27] audit: type=1326 audit(1757672415.723:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1698eba9 code=0x7ffc0000 [ 99.258477][ T27] audit: type=1326 audit(1757672415.723:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1698eba9 code=0x7ffc0000 [ 99.281657][ T27] audit: type=1326 audit(1757672415.783:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f8b1698eba9 code=0x7ffc0000 [ 99.311383][ T27] audit: type=1326 audit(1757672415.783:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1698eba9 code=0x7ffc0000 [ 99.379754][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.621729][ T27] audit: type=1326 audit(1757672415.783:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1698eba9 code=0x7ffc0000 [ 99.672892][ T6027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.716479][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 99.834093][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.985373][ T786] usb 3-1: config 0 has no interfaces? [ 100.014224][ T786] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 100.041474][ T6027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.094222][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.173647][ T786] usb 3-1: config 0 descriptor?? [ 100.761195][ T6027] team0: Port device team_slave_0 added [ 100.829077][ T1093] hsr_slave_0: left promiscuous mode [ 100.845791][ T1093] hsr_slave_1: left promiscuous mode [ 100.870849][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.896446][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.912214][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.921894][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.932817][ T1093] bridge_slave_1: left allmulticast mode [ 100.941262][ T1093] bridge_slave_1: left promiscuous mode [ 100.953563][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.979727][ T1093] bridge_slave_0: left allmulticast mode [ 100.985619][ T1093] bridge_slave_0: left promiscuous mode [ 100.991635][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.080240][ T1093] veth1_macvtap: left promiscuous mode [ 101.086717][ T1093] veth0_macvtap: left promiscuous mode [ 101.092552][ T1093] veth1_vlan: left promiscuous mode [ 101.098786][ T1093] veth0_vlan: left promiscuous mode [ 101.208492][ T5796] Bluetooth: hci2: command tx timeout [ 101.905601][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 101.957225][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 102.009731][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.115953][ T5872] usb 3-1: USB disconnect, device number 2 [ 102.133064][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.344890][ T6146] loop3: detected capacity change from 0 to 128 [ 103.055408][ T1093] bond0 (unregistering): Released all slaves [ 103.219893][ T6027] team0: Port device team_slave_1 added [ 103.285373][ T6158] tipc: Started in network mode [ 103.287086][ T5796] Bluetooth: hci2: command tx timeout [ 103.291279][ T6158] tipc: Node identity aec56908e028, cluster identity 4711 [ 103.304093][ T6158] tipc: Enabled bearer , priority 0 [ 103.312999][ T6160] syzkaller0: entered promiscuous mode [ 103.321643][ T6160] syzkaller0: entered allmulticast mode [ 103.432687][ T6168] tipc: Resetting bearer [ 103.484691][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.550663][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.791685][ T6027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.986462][ T6151] tipc: Resetting bearer [ 104.031530][ T6151] tipc: Disabling bearer [ 104.083787][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.108136][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.162199][ T6027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.380989][ T6027] hsr_slave_0: entered promiscuous mode [ 104.397168][ T6027] hsr_slave_1: entered promiscuous mode [ 104.435866][ T6027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.463827][ T6027] Cannot create hsr debugfs directory [ 104.598901][ T6197] loop0: detected capacity change from 0 to 128 [ 105.937671][ T6027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.954859][ T6027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.974866][ T6027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.041996][ T6027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.651967][ T6027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.766400][ T6027] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.802708][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.809854][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.905375][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.913294][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.475620][ T6262] loop0: detected capacity change from 0 to 128 [ 107.766646][ T6027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.865445][ T6275] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 108.070410][ T6275] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.098297][ T6275] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 108.159703][ T6281] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.261162][ T6283] gretap1: entered promiscuous mode [ 108.280508][ T6283] bond1: (slave gretap1): making interface the new active one [ 108.335832][ T6283] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.494964][ T6270] loop0: detected capacity change from 0 to 32768 [ 108.554566][ T6270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.100 (6270) [ 108.573538][ T6027] veth0_vlan: entered promiscuous mode [ 108.619028][ T6027] veth1_vlan: entered promiscuous mode [ 108.639036][ T6270] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.666612][ T6270] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 108.695929][ T6270] BTRFS info (device loop0): turning off barriers [ 108.713350][ T6027] veth0_macvtap: entered promiscuous mode [ 108.719654][ T6270] BTRFS info (device loop0): setting nodatasum [ 108.726990][ T6270] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.753929][ T6027] veth1_macvtap: entered promiscuous mode [ 108.762083][ T6270] BTRFS info (device loop0): use zstd compression, level 3 [ 108.779639][ T6270] BTRFS info (device loop0): using free space tree [ 108.799927][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.832749][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.848886][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.866265][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.876643][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.887990][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.900150][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.911463][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.922617][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.933219][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.945223][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.955524][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.968382][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.980325][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.988878][ T6270] BTRFS info (device loop0): checking UUID tree [ 109.035133][ T6027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.101065][ T6027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.156207][ T6027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.195568][ T6027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.886696][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.913250][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.050613][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.079596][ T5780] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.098356][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.064981][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 113.529307][ T5772] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0 [ 113.598792][ T5772] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0 [ 113.656327][ T5772] hid-generic 0005:046D:5505.0001: item fetching failed at offset 2/3 [ 113.666980][ T5772] hid-generic: probe of 0005:046D:5505.0001 failed with error -22 [ 113.790831][ T6387] tipc: Started in network mode [ 113.801218][ T6387] tipc: Node identity 8a2e1b49890b, cluster identity 4711 [ 113.815496][ T6387] tipc: Enabled bearer , priority 0 [ 113.837257][ T6387] syzkaller0: entered promiscuous mode [ 113.879463][ T6387] syzkaller0: entered allmulticast mode [ 114.026340][ T5772] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.228363][ T5772] usb 3-1: Using ep0 maxpacket: 16 [ 114.327604][ T6387] tipc: Resetting bearer [ 114.384483][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.405615][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.455649][ T6384] tipc: Resetting bearer [ 114.491077][ T6386] delete_channel: no stack [ 114.523173][ T5772] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.546766][ T5772] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 114.554492][ T5772] usb 3-1: can't read configurations, error -71 [ 114.567519][ T6384] tipc: Disabling bearer [ 115.066210][ T5827] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.288454][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 115.319989][ T5827] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 115.446702][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.479675][ T5827] usb 1-1: Product: syz [ 115.483903][ T5827] usb 1-1: Manufacturer: syz [ 115.489055][ T5827] usb 1-1: SerialNumber: syz [ 115.534196][ T5827] r8152-cfgselector 1-1: config 0 descriptor?? [ 117.728976][ T5827] r8152-cfgselector 1-1: Unknown version 0x0000 [ 117.736662][ T5827] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 117.972209][ T5841] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.602768][ T5841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.801658][ T5841] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.811652][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.823103][ T5841] usb 3-1: config 0 descriptor?? [ 119.878167][ T5841] pwc: Askey VC010 type 2 USB webcam detected. [ 120.648824][ T6493] netlink: set zone limit has 8 unknown bytes [ 120.726392][ T5841] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.766258][ T5841] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.781836][ T5841] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.152809][ T5841] pwc: recv_control_msg error -71 req 04 val 1300 [ 121.186515][ T5841] pwc: recv_control_msg error -71 req 04 val 1400 [ 121.206521][ T5841] pwc: recv_control_msg error -71 req 02 val 2000 [ 121.237096][ T5841] pwc: recv_control_msg error -71 req 02 val 2100 [ 121.975994][ T5841] pwc: recv_control_msg error -71 req 04 val 1500 [ 121.996765][ T5841] pwc: recv_control_msg error -71 req 02 val 2500 [ 122.006371][ T5841] pwc: recv_control_msg error -71 req 02 val 2400 [ 122.015356][ T5841] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.027130][ T5841] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.056200][ T5841] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.067849][ T5841] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.075075][ T5841] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.097475][ T5841] pwc: Registered as video103. [ 122.105126][ T5841] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 122.152283][ T5841] usb 3-1: USB disconnect, device number 5 [ 122.479402][ T6521] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 122.564323][ T6524] netlink: 'syz.3.151': attribute type 29 has an invalid length. [ 122.642356][ T6523] gretap1: entered promiscuous mode [ 122.665348][ T6524] netlink: 'syz.3.151': attribute type 29 has an invalid length. Stopping sshd: stopped /usr/sbin/sshd (pid 5545) OK Stopping crond: stopped /usr/sbin/crond (pid 5526) OK Stopping dhcpcd... [ 126.441145][ T6584] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 126.448145][ T6584] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.475392][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.485985][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.495382][ T6584] vhci_hcd vhci_hcd.0: Device attached [ 126.502582][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.547489][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.557957][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.565719][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 stopped /sbin/dhcpcd (pid 5451) [ 126.772938][ T785] vhci_hcd: vhci_device speed not set [ 126.798296][ T5772] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 127.074847][ T5772] usb 4-1: config 0 has no interfaces? [ 127.220453][ T5772] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.431707][ T785] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 127.482182][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.494275][ T5772] usb 4-1: config 0 descriptor?? Stopping network: [ 127.799266][ T6585] vhci_hcd: unknown pdu 1 [ 127.800142][ T5772] usb 4-1: USB disconnect, device number 2 [ 127.876369][ T785] vhci_hcd: vhci_device speed not set [ 128.019829][ T42] vhci_hcd: stop threads [ 128.043724][ T785] usb 39-1: device descriptor read/64, error -71 [ 128.144342][ T42] vhci_hcd: release socket [ 128.334095][ T42] vhci_hcd: disconnect device [ 128.416277][ T785] vhci_hcd: vhci_device speed not set [ 128.806704][ T5796] Bluetooth: hci1: command tx timeout [ 128.862400][ T6619] input: syz1 as /devices/virtual/input/input6 [ 129.734213][ T6587] chnl_net:caif_netlink_parms(): no params data found [ 129.853409][ T6622] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.234284][ T6634] binder: 6626:6634 ioctl c0306201 0 returned -14 [ 130.893982][ T5796] Bluetooth: hci1: command tx timeout [ 131.703950][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.729212][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.744577][ T6587] bridge_slave_0: entered allmulticast mode [ 131.844836][ T6587] bridge_slave_0: entered promiscuous mode [ 131.867119][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.881290][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.923197][ T6652] loop3: detected capacity change from 0 to 16 [ 131.943271][ T6587] bridge_slave_1: entered allmulticast mode [ 131.967466][ T6587] bridge_slave_1: entered promiscuous mode [ 131.981841][ T6652] erofs: (device loop3): mounted with root inode @ nid 36. [ 132.431744][ T6656] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 132.443463][ T6656] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 132.452821][ T6656] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 132.462575][ T6656] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 132.471982][ T6656] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 132.481767][ T6656] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 132.492487][ T6656] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 132.502618][ T6656] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 132.512386][ T6656] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 132.932758][ T6587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.966421][ T5796] Bluetooth: hci1: command tx timeout [ 132.981574][ T6587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.157542][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.163970][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.920164][ T6587] team0: Port device team_slave_0 added OK [ 134.033911][ T6587] team0: Port device team_slave_1 added Stopping iptables: OK Stopping system message bus: [ 134.248069][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.262361][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.317561][ T6587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.353002][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.381557][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.461508][ T6587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.654567][ T6587] hsr_slave_0: entered promiscuous mode [ 134.682099][ T6587] hsr_slave_1: entered promiscuous mode [ 134.710021][ T6587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.734775][ T6587] Cannot create hsr debugfs directory done [ 135.067976][ T5796] Bluetooth: hci1: command tx timeout [ 136.030743][ T6587] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.063737][ T6587] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.159217][ T6587] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.194327][ T6587] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.230176][ T6587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.289738][ T6587] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.745125][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.752357][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.005937][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.013126][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.148349][ T785] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 138.416013][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.448248][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.467570][ T785] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.505542][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.527244][ T785] usb 4-1: config 0 descriptor?? killall: can't kill pid 5791: No such process killall: can't kill pid 6028: No such process killall: can't kill pid 6029: No such process [ 138.599837][ T785] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.637499][ T785] dvb-usb: bulk message failed: -22 (3/0) [ 138.678545][ T785] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.732155][ T785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.756151][ T785] usb 4-1: media controller created [ 138.773781][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.830323][ T785] dvb-usb: bulk message failed: -22 (6/0) [ 138.856508][ T785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 138.889669][ T785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 138.922463][ T785] dvb-usb: schedule remote query interval to 150 msecs. [ 138.936127][ T785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.952373][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 138.959082][ T785] usb 4-1: USB disconnect, device number 3 Stopping klogd: [ 139.028465][ T785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. OK [ 139.452883][ T6587] 8021q: adding VLAN 0 to HW filter on device batadv0 Stopping acpid: [ 140.464404][ T6755] pimreg: entered allmulticast mode [ 140.515991][ T6755] pimreg: left allmulticast mode [ 140.653946][ T6762] comedi comedi4: bad chanlist[1]=0x00000040 chan=64 range length=2 [ 141.594993][ T6587] veth0_vlan: entered promiscuous mode [ 141.621940][ T6587] veth1_vlan: entered promiscuous mode [ 141.681966][ T6587] veth0_macvtap: entered promiscuous mode [ 141.699906][ T6587] veth1_macvtap: entered promiscuous mode [ 141.753581][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.792252][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.818225][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.842437][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.854590][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.871133][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.884108][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.992162][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.145332][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.546580][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 OK [ 142.616206][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.660967][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.706091][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.715913][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.796285][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.838836][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 Stopping syslogd: [ 142.888499][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! stopped /sbin/syslogd (pid 5139) OK [ 143.219624][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.571493][ T6587] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.606293][ T6587] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.640473][ T6587] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.652855][ T6587] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.889240][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.936175][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.018967][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.038827][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.837803][ T6806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.212'. umount: can't remount debugfs read-only [ 145.988497][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 146.337137][ T6829] loop5: detected capacity change from 0 to 1024 [ 146.344342][ T6829] EXT4-fs: Ignoring removed orlov option [ 146.998309][ T6829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.211918][ T6829] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.280763][ T6587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.119521][ T6864] netlink: 'syz.5.225': attribute type 19 has an invalid length. [ 150.865927][ T6879] loop5: detected capacity change from 0 to 1024 [ 150.903308][ T6879] EXT4-fs: Ignoring removed orlov option [ 150.929530][ T6882] netlink: 'syz.4.232': attribute type 13 has an invalid length. [ 150.945504][ T6882] netlink: 'syz.4.232': attribute type 17 has an invalid length. [ 150.982053][ T6879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.033844][ T6879] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) serialport: VM disconnected.