last executing test programs: 15.066074181s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x116, &(0x7f00000000c0)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x3ff, 0x0, 0x1}, {0xfff00}, {}, {0x81, 0x0, 0x1}, {0x1cab}], @ipv6=@tipc_packet={0xd, 0x6, "a7270a", 0xcc, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, {[@hopopts={0x29, 0x8, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xa}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x7, [0x5, 0xffffffff, 0x8, 0x1]}}]}, @srh={0x11, 0xa, 0x4, 0x5, 0x8, 0x8, 0xfff, [@local, @mcast2, @remote, @remote, @mcast1]}, @fragment={0x2f, 0x0, 0x40, 0x0, 0x0, 0xc, 0x68}], @payload_conn={{{0x1c, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x0, 0x4e24, 0x4e24}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x28000600) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000002e80)=@assoc_value, &(0x7f0000002ec0)=0xfffffffffffffdae) connect$bt_l2cap(r2, &(0x7f0000002f00)={0x1f, 0x0, @any, 0x3}, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x18, 0x0, 0x0, &(0x7f0000003000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={r3, 0x0, 0x0, 0x0, &(0x7f00000030c0), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x7, 0x17, &(0x7f0000003300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003400)=@generic={&(0x7f0000003440)='./file0\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000003480)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000034c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, 0x0, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f0000003540)="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", 0xfdef}], 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$inet(0x2, 0x3, 0xd) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x3, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d40], 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, 0x2a8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000008000000000008000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1013, &(0x7f0000003940)=""/4115, 0x0, 0xc}, 0x94) 13.563743564s ago: executing program 2 (id=5): socket$inet6(0xa, 0x805, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x40000088}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000001200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000012c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001300)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f000001a3c0)='l', 0x1, 0x20000010, 0x0, 0x0) 10.809507576s ago: executing program 2 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000800)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) 10.681868599s ago: executing program 0 (id=1): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c6090400"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 9.506495569s ago: executing program 1 (id=2): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r3, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) write$md_sysfs(0xffffffffffffffff, &(0x7f0000000340)=@str='0', 0x1) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000440)=@str='active', 0x6) 8.935140937s ago: executing program 1 (id=7): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x8, 0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x6, 0x2, 0x3}) 8.22341145s ago: executing program 1 (id=8): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) mount(0x0, 0x0, &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = fsopen(&(0x7f0000000a80)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000b00)=0x13c) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x18}, 0xa) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}], 0x1, 0x40800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 7.44780804s ago: executing program 0 (id=9): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000840)="b3019c28", 0x4, 0x0, &(0x7f0000000880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 4.70669378s ago: executing program 1 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x11, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, 0x0, 0x0) 4.482301682s ago: executing program 2 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4.427048408s ago: executing program 0 (id=12): umount2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) 2.929440131s ago: executing program 3 (id=4): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002f40)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002f80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000003000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000003040), 0x0, 0x0) read$msr(r3, &(0x7f0000003080)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f000001c080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) 2.780460986s ago: executing program 1 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x116, &(0x7f00000000c0)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x3ff, 0x0, 0x1}, {0xfff00}, {}, {0x81, 0x0, 0x1}, {0x1cab}], @ipv6=@tipc_packet={0xd, 0x6, "a7270a", 0xcc, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, {[@hopopts={0x29, 0x8, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xa}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x7, [0x5, 0xffffffff, 0x8, 0x1]}}]}, @srh={0x11, 0xa, 0x4, 0x5, 0x8, 0x8, 0xfff, [@local, @mcast2, @remote, @remote, @mcast1]}, @fragment={0x2f, 0x0, 0x40, 0x0, 0x0, 0xc, 0x68}], @payload_conn={{{0x1c, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x0, 0x4e24, 0x4e24}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x28000600) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000002e80)=@assoc_value, &(0x7f0000002ec0)=0xfffffffffffffdae) connect$bt_l2cap(r2, &(0x7f0000002f00)={0x1f, 0x0, @any, 0x3}, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x18, 0x0, 0x0, &(0x7f0000003000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={r3, 0x0, 0x0, 0x0, &(0x7f00000030c0), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x7, 0x17, &(0x7f0000003300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003400)=@generic={&(0x7f0000003440)='./file0\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000003480)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000034c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, 0x0, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f0000003540)="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", 0xfdef}], 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$inet(0x2, 0x3, 0xd) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x3, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d40], 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, 0x2a8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000008000000000008000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1013, &(0x7f0000003940)=""/4115, 0x0, 0xc}, 0x94) 2.707149224s ago: executing program 0 (id=14): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000140)='PASV\r\n', 0x6) r3 = accept4(r1, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000180)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 483.869371ms ago: executing program 3 (id=15): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000005c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000600)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'dh\x00', 0x20, 0xa8a, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000640)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x27, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000006c0)={{0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4ea4, 0x10000, 0x0, 0x12d5c, 0x12d4f}}, 0x44) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='100', 0x3) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) mount(&(0x7f00000003c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000400)='./proc\x00', 0x0, 0x2800002, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x402) syz_open_dev$dvb_demux(&(0x7f0000000480), 0x0, 0x700) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f00000004c0)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad30c897700001b00", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 89.058059][ T5774] cgroup: Unknown subsys name 'net' [ 89.208801][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.135122][ T27] cfg80211: failed to load regulatory.db [ 92.272191][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.151324][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.180122][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.211503][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.233010][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.250104][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.260867][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.281844][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.302426][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.320306][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.351388][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.371977][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.381212][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.407316][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.416199][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.425196][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.457880][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.551694][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.572523][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.590708][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.591790][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.612103][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.652380][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.662619][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.676341][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.754117][ T5798] (null): rxe_set_mtu: Set mtu to 1024 [ 95.793777][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.793973][ T5792] (null): rxe_set_mtu: Set mtu to 1024 [ 95.815325][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.852593][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 95.912898][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.974326][ T5801] (null): rxe_set_mtu: Set mtu to 1024 [ 95.995857][ T5801] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 96.010087][ T5795] (null): rxe_set_mtu: Set mtu to 1024 [ 96.021461][ T5795] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 96.573843][ T5798] infiniband rxe0: set active [ 96.609677][ T5798] infiniband rxe0: added rxe_eth0 [ 96.672795][ T971] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.832766][ T5798] RDS/IB: rxe0: added [ 96.839095][ T5798] smc: adding ib device rxe0 with port count 1 [ 96.872125][ T5798] smc: ib device rxe0 port 1 has pnetid [ 96.928811][ T789] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.990301][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.481420][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 97.573091][ T5797] Bluetooth: hci0: command tx timeout [ 97.579674][ T5799] Bluetooth: hci2: command tx timeout [ 97.737023][ T5799] Bluetooth: hci1: command tx timeout [ 97.778395][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.818746][ T5799] Bluetooth: hci3: command tx timeout [ 97.891920][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 97.948004][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 98.098721][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.121057][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.136145][ T5801] bridge_slave_0: entered allmulticast mode [ 98.153564][ T5801] bridge_slave_0: entered promiscuous mode [ 98.179574][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.313962][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.334699][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.360509][ T5801] bridge_slave_1: entered allmulticast mode [ 98.386200][ T5801] bridge_slave_1: entered promiscuous mode [ 98.551477][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.576078][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.778191][ T5801] team0: Port device team_slave_0 added [ 98.795573][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.812293][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.826367][ T5795] bridge_slave_0: entered allmulticast mode [ 98.838109][ T5795] bridge_slave_0: entered promiscuous mode [ 98.854288][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.873676][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.894202][ T5795] bridge_slave_1: entered allmulticast mode [ 98.915362][ T5795] bridge_slave_1: entered promiscuous mode [ 98.979966][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.002770][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.020137][ T5792] bridge_slave_0: entered allmulticast mode [ 99.053289][ T5792] bridge_slave_0: entered promiscuous mode [ 99.091420][ T5801] team0: Port device team_slave_1 added [ 99.139657][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.160458][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.211889][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.236824][ T5792] bridge_slave_1: entered allmulticast mode [ 99.256398][ T5792] bridge_slave_1: entered promiscuous mode [ 99.388101][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.411480][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.511330][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.616316][ T5448] infiniband rxe0: set active [ 99.649673][ T5799] Bluetooth: hci2: command tx timeout [ 99.649690][ T5797] Bluetooth: hci0: command tx timeout [ 99.712557][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.795122][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.816297][ T5797] Bluetooth: hci1: command tx timeout [ 99.890879][ T5797] Bluetooth: hci3: command tx timeout [ 99.934095][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.960578][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.021118][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.056614][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.075249][ T971] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.159702][ T971] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.201004][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.277344][ T5792] team0: Port device team_slave_0 added [ 100.314006][ T5792] team0: Port device team_slave_1 added [ 100.537287][ T5795] team0: Port device team_slave_0 added [ 100.594962][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.616669][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.676524][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.734667][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.754078][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.817434][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.868810][ T5801] hsr_slave_0: entered promiscuous mode [ 100.885342][ T5801] hsr_slave_1: entered promiscuous mode [ 100.915853][ T5795] team0: Port device team_slave_1 added [ 101.138761][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.160667][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.216252][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.237810][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.254324][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.372798][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.588932][ T5792] hsr_slave_0: entered promiscuous mode [ 101.613651][ T5792] hsr_slave_1: entered promiscuous mode [ 101.651770][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.694968][ T5792] Cannot create hsr debugfs directory Stopping sshd: [ 101.730201][ T5797] Bluetooth: hci2: command tx timeout [ 101.730215][ T5799] Bluetooth: hci0: command tx timeout stopped /usr/sbin/sshd (pid 5541) [ 101.912249][ T5797] Bluetooth: hci1: command tx timeout OK [ 101.980709][ T5797] Bluetooth: hci3: command tx timeout [ 102.479015][ T5795] hsr_slave_0: entered promiscuous mode [ 102.489263][ T5795] hsr_slave_1: entered promiscuous mode [ 102.559845][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.599362][ T5795] Cannot create hsr debugfs directory Stopping crond: stopped /usr/sbin/crond (pid 5526) OK Stopping dhcpcd... [ 103.413301][ T5798] chnl_net:caif_netlink_parms(): no params data found stopped /sbin/dhcpcd (pid 5447) [ 103.815543][ T5797] Bluetooth: hci0: command tx timeout [ 103.844583][ T5799] Bluetooth: hci2: command tx timeout [ 103.894755][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.972618][ T5797] Bluetooth: hci1: command tx timeout [ 104.016101][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.051731][ T5797] Bluetooth: hci3: command tx timeout Stopping network: [ 104.112828][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.237696][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.271586][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.317248][ T5798] bridge_slave_0: entered allmulticast mode [ 104.340514][ T5798] bridge_slave_0: entered promiscuous mode [ 104.404063][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.455388][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.488857][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.516222][ T5798] bridge_slave_1: entered allmulticast mode [ 104.537631][ T5798] bridge_slave_1: entered promiscuous mode [ 104.678713][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.806554][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.857380][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.946001][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.977162][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.019998][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.060107][ T5798] team0: Port device team_slave_0 added [ 105.098924][ T5798] team0: Port device team_slave_1 added [ 105.277307][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.300846][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.357026][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.430170][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.446684][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.497329][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.727218][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.816444][ T5798] hsr_slave_0: entered promiscuous mode [ 105.832549][ T5798] hsr_slave_1: entered promiscuous mode [ 105.840586][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.860641][ T5798] Cannot create hsr debugfs directory [ 105.879884][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.911940][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.020000][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.738196][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 OK [ 107.132160][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.235555][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.251582][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state Stopping iptables: [ 107.358282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.379406][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state OK [ 107.735624][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.774183][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 Stopping system message bus: [ 107.875254][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.930056][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.068873][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.215214][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.320683][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.476358][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.493260][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.638469][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.656167][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.857803][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.249431][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.266014][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.338725][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.357710][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state done [ 109.852502][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.977656][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.152810][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.311359][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.334118][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.494940][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.512995][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.933943][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.114961][ T5801] veth0_vlan: entered promiscuous mode [ 111.199033][ T5801] veth1_vlan: entered promiscuous mode [ 111.277310][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.793417][ T5801] veth0_macvtap: entered promiscuous mode [ 111.994663][ T5801] veth1_macvtap: entered promiscuous mode [ 112.099876][ T5792] veth0_vlan: entered promiscuous mode [ 112.174184][ T5795] veth0_vlan: entered promiscuous mode [ 112.238755][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.340697][ T5792] veth1_vlan: entered promiscuous mode [ 112.412346][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.478858][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.514232][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.536980][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.563572][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 Stopping klogd: [ 112.635453][ T5795] veth1_vlan: entered promiscuous mode [ 112.773084][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.932208][ T5792] veth0_macvtap: entered promiscuous mode OK [ 113.152162][ T5792] veth1_macvtap: entered promiscuous mode Stopping acpid: [ 113.434587][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.468868][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.521057][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.608138][ T4518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.628615][ T5795] veth0_macvtap: entered promiscuous mode [ 113.654690][ T5798] veth0_vlan: entered promiscuous mode [ 113.671619][ T4518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.757276][ T5795] veth1_macvtap: entered promiscuous mode [ 113.780857][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.822182][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.854938][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.881091][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.916589][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.921034][ T5798] veth1_vlan: entered promiscuous mode [ 113.974350][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.998959][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.032443][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.050697][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.100887][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.138958][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.171148][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.195627][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.216401][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.317686][ T5801] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.372858][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.401409][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.433380][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.474863][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.500474][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.521530][ T5795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.551024][ T5795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.570633][ T5795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.580272][ T5795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 OK [ 114.858718][ T5798] veth0_macvtap: entered promiscuous mode [ 114.992797][ T5798] veth1_macvtap: entered promiscuous mode [ 115.009043][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.057851][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 Stopping syslogd: [ 115.254506][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.291349][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.317134][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 stopped /sbin/syslogd (pid 5135)[ 115.354656][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! OK [ 115.416819][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.463315][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.491908][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.561316][ T5936] syzkaller1: entered promiscuous mode [ 115.585134][ T5936] syzkaller1: entered allmulticast mode [ 115.617505][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.651541][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.674601][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.692359][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.709884][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.759631][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.813607][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.939746][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.959721][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.117854][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.181660][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.213653][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.240197][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.759771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.169993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.269548][ C1] sched: RT throttling activated [ 118.291918][ T5799] Bluetooth: hci3: command tx timeout [ 118.991854][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.111495][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 umount: can't remount debugfs read-only [ 119.437224][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.619049][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.640168][ T5905] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.919340][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.995389][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.000757][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.193063][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.272609][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.346663][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.391397][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.468849][ T5905] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 120.512515][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.670897][ T5905] usb 1-1: Product: syz [ 120.713159][ T5905] usb 1-1: Manufacturer: syz [ 120.837337][ T5905] usb 1-1: SerialNumber: syz [ 121.154647][ T5905] usb 1-1: selecting invalid altsetting 1 [ 121.437567][ T5905] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 121.614400][ T5905] usb 1-1: USB disconnect, device number 2 [ 123.289654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.699975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.909820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.111614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.519595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 125.000392][ T5797] Bluetooth: hci3: command tx timeout [ 125.092534][ T28] audit: type=1800 audit(1793974257.793:2): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 127.799850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.000228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.111524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 130.094645][ T5982] syzkaller1: entered promiscuous mode [ 130.135005][ T5982] syzkaller1: entered allmulticast mode serialport: VM disconnected.