last executing test programs: 18m16.815709803s ago: executing program 32 (id=52): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) 18m7.634275184s ago: executing program 2 (id=89): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 18m7.331429399s ago: executing program 2 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x4) readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) listen(0xffffffffffffffff, 0x0) 18m2.584220857s ago: executing program 2 (id=96): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='mounts\x00') socket$nl_generic(0x10, 0x3, 0x10) preadv(r5, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f0000000880)=""/214, 0xd6}], 0x2, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) 18m0.488161908s ago: executing program 2 (id=98): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$get_persistent(0x16, 0xee01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 17m57.761680556s ago: executing program 2 (id=103): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x8167, 0xe}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x1000008, 0x1, 0x7}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 17m57.218253248s ago: executing program 2 (id=106): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 17m41.987755818s ago: executing program 33 (id=106): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 17m12.937726746s ago: executing program 3 (id=175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) getrlimit(0xd, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 17m11.639915032s ago: executing program 3 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) fsopen(0x0, 0x0) 17m10.316370963s ago: executing program 3 (id=177): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = timerfd_create(0x8, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xf92, 0x0, 0x0, 0x0, 0x6733, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0xb0000000000, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000000c0)={0x5, 0xf, "d0e98f1052e786ec81ec732bf656be"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @loopback}, &(0x7f0000000380)=0xc) 17m9.392262311s ago: executing program 3 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x6}, 0x1ff, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0xc, 0xb692, 0x4, 0x6}) 17m8.024610632s ago: executing program 3 (id=180): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0xfd, 0x1}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) 17m6.430934623s ago: executing program 3 (id=182): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0xfffffffffffffffe, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27", 0xfdef}], 0x1) 16m50.732299605s ago: executing program 34 (id=182): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0xfffffffffffffffe, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27", 0xfdef}], 0x1) 14m37.44333426s ago: executing program 4 (id=335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000580)=[@increfs_done], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) 14m37.291827931s ago: executing program 4 (id=336): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x2, 0x80000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 14m36.322362416s ago: executing program 4 (id=337): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0xd21, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[], 0x8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000040)={@none, 0xfff, 0x8001, 0x100, 0xa, 0x5, "7d2a8e00ac3c8a91240e3f8d836096df943f9338f5f2dc1b96162b31443d71b450c59a2cc829c0f50e07c56ab8ee7bf0eee540aea4dcc0e7732c89bbda23f0106a693d494657f908f8f5d3bbed74e2059ad8411a7554dbbdf651b8e8cc7a00212edf16565717563f5e4c5faf65f6657912b84c280f458abf9b91ef07ee7f1054"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) pread64(r5, 0x0, 0x0, 0x10000) 14m33.965364745s ago: executing program 4 (id=340): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 14m33.852467656s ago: executing program 4 (id=341): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x1, 0x43, 0x2000001, 0x0, 0x2004cb, 0x3, 0x1000000, 0x68ff, 0x3, 0x9, 0x3], 0xeeee8000, 0x202}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f000033c000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="66ba4300b8cc14610aefc4c201906c34b1f20f0feea7660f388103b9800000c00f3235010000000f3036dc82b732eb4166baf80cb858df5d86ef66bafc0c66edea07000000fe000fc718b805000000b9004800000f01d9", 0x57}], 0x1, 0x2, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x3, 0x0, 0x1}, @cr4={0x1, 0x2}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m31.323722102s ago: executing program 1 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14m31.061354636s ago: executing program 1 (id=344): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x2, 0x80000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 14m30.062140829s ago: executing program 4 (id=345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) 14m30.047099619s ago: executing program 1 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14m29.934237786s ago: executing program 1 (id=347): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0xd21, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[], 0x8) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000040)={@none, 0xfff, 0x8001, 0x100, 0xa, 0x5, "7d2a8e00ac3c8a91240e3f8d836096df943f9338f5f2dc1b96162b31443d71b450c59a2cc829c0f50e07c56ab8ee7bf0eee540aea4dcc0e7732c89bbda23f0106a693d494657f908f8f5d3bbed74e2059ad8411a7554dbbdf651b8e8cc7a00212edf16565717563f5e4c5faf65f6657912b84c280f458abf9b91ef07ee7f1054"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) pread64(r6, 0x0, 0x0, 0x10000) 14m27.437228791s ago: executing program 1 (id=348): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 14m27.325257541s ago: executing program 1 (id=349): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x2}}) 14m14.05228195s ago: executing program 35 (id=345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) 14m12.026186396s ago: executing program 36 (id=349): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x2}}) 3m15.202874267s ago: executing program 6 (id=968): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000200)={0x0, 0x1, 0xffffffce}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001400)=""/4076, 0xfec) 3m12.339663997s ago: executing program 6 (id=971): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) 3m9.463651389s ago: executing program 6 (id=974): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x0) 3m6.783201121s ago: executing program 6 (id=977): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) epoll_create1(0x0) epoll_create(0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) 3m6.566357196s ago: executing program 6 (id=978): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) statx(r2, &(0x7f0000000340)='./file0\x00', 0x6000, 0x400, &(0x7f0000000200)) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2400c800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$nl_generic(0x10, 0x3, 0x10) 3m2.510397235s ago: executing program 6 (id=980): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 3m1.753431964s ago: executing program 37 (id=980): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 6.148197507s ago: executing program 0 (id=1193): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.707386575s ago: executing program 7 (id=1194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000080)="3b2f42080c8d49d7238ba3cf091b433f28cd60c2c3e3917151156fbf2711", 0x1e}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab85909d7c1b04a28c26e6256ff6c75ca8d5200d239f187830c755a267aaf7af49921be2f882f26d9f74c850b65d6ef250bca001e70a2cd8d523c0b71a7377d598b494cccd68e3d4bf378bfd9df0d8ea28923b63184449c78031d6c736e638fda62", 0x9d}, {&(0x7f0000000340)="ef648434b9034870d043039407c3b1b07a75ee0c550bd64654c7ada40f6f6ef6a5c5fb8345f32b0f549a8fbf85264caff0b839dd748fec4b052c4f0d152c80c700f4b86de88dbd046b838f2b659c890e0ab56fc3a92f74e42caf85cd7267fabeef72599a6b73c56939d9c5c1116d39ce0df9ee4b355f", 0x76}], 0x5, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) 4.779984324s ago: executing program 7 (id=1195): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x8, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x9, 0x80000000, 0x242, 0x3, 0x10e, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x6, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffb, 0x3, 0x2, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x9, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x410002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffd, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0x3, 0xfffffffe]}, 0x45c) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x2, 0x9}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000140)={{0xa, 0x4, 0x10, 0x9, 'syz0\x00', 0x9}, 0x1, [0x80000001, 0x8000000000000000, 0x10001, 0x1, 0x8000000000000000, 0x5, 0x7, 0x100000001, 0x1, 0x7fff, 0x8, 0xcb, 0x100, 0xa2b8, 0xc, 0xfffffffffffffffd, 0x1, 0x100, 0x79, 0x4, 0x1f, 0x57eb, 0x3, 0xfffffffffffffffb, 0x3, 0x735, 0xfa1, 0x7365a6d3, 0xffffffff, 0x6, 0x7f, 0x9, 0xfffffffffffffff8, 0x303, 0x4, 0x3, 0x25, 0x5, 0x6, 0x9, 0x100000001, 0x7, 0x0, 0x7, 0x123, 0xfffffffffffffff8, 0x7, 0x7, 0xba1, 0x1, 0xf, 0x7fff, 0x9, 0x8001, 0x2, 0x1, 0x80, 0x8, 0xfffffffffffffbff, 0x0, 0xdb, 0x401, 0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x5, 0x2, 0xd, 0x907, 0xfffffffffffffffb, 0x9, 0x7, 0xff, 0x6, 0x5, 0x9, 0xa9, 0x7, 0x4, 0x81, 0x0, 0xbc, 0x7, 0x7fffffffffffffff, 0x8, 0xdea4, 0x500000000, 0x6, 0x2, 0x5, 0x4, 0xff, 0x0, 0x9, 0x33a2, 0x1, 0x9, 0x4, 0x40, 0xd, 0x100, 0x80, 0x5, 0x3, 0x7fffffff, 0x7, 0x2, 0xffff, 0x0, 0x6, 0xa2e, 0x7fffffffffffffff, 0xbb87, 0x2, 0xabfc, 0x1b9d, 0x80000000, 0x4, 0x5, 0xa, 0xfffffffffffffffb, 0x0, 0x8, 0x9, 0x1000000000, 0x7ff, 0x1]}) 4.690049604s ago: executing program 0 (id=1196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x7) fcntl$setlease(r0, 0x400, 0x1) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xa}}, 0x18) syz_emit_ethernet(0x56, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x308d2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xfff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000240), 0x4003) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_create(0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 3.608158835s ago: executing program 0 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x669f, 0x8, 0x0, 0xfffffffc}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x1, {0x1}}) io_uring_enter(r1, 0x47f9, 0x3f, 0x0, 0x0, 0x0) 3.48757095s ago: executing program 0 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 3.174220582s ago: executing program 0 (id=1199): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x13, r4, 0x0) 2.940389482s ago: executing program 0 (id=1200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") readv(r4, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1) 1.873048185s ago: executing program 7 (id=1201): socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8c0, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1.550293935s ago: executing program 7 (id=1202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000080)="3b2f42080c8d49d7238ba3cf091b433f28cd60c2c3e3917151156fbf2711", 0x1e}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab85909d7c1b04a28c26e6256ff6c75ca8d5200d239f187830c755a267aaf7af49921be2f882f26d9f74c850b65d6ef250bca001e70a2cd8d523c0b71a7377d598b494cccd68e3d4bf378bfd9df0d8ea28923b63184449c78031d6c736e638fda62", 0x9d}, {&(0x7f0000000340)="ef648434b9034870d043039407c3b1b07a75ee0c550bd64654c7ada40f6f6ef6a5c5fb8345f32b0f549a8fbf85264caff0b839dd748fec4b052c4f0d152c80c700f4b86de88dbd046b838f2b659c890e0ab56fc3a92f74e42caf85cd7267fabeef72599a6b73c56939d9c5c1116d39ce0df9ee4b355f", 0x76}], 0x5, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) 1.409419527s ago: executing program 7 (id=1203): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=1204): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000010000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x802, @private0, 0x5}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1, {[0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0xe1d]}}, 0x5c) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001680)) eventfd2(0x1, 0x0) kernel console output (not intermixed with test programs): 664][ T59] Bluetooth: hci5: command 0x0419 tx timeout [ 834.311983][ T67] team0 (unregistering): Port device team_slave_1 removed [ 834.409632][ T59] Bluetooth: hci6: command tx timeout [ 834.445818][ T67] team0 (unregistering): Port device team_slave_0 removed [ 835.529565][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 835.769648][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 835.929667][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 836.169705][ T59] Bluetooth: hci5: command 0x0419 tx timeout [ 836.489573][ T59] Bluetooth: hci6: command tx timeout [ 836.660401][ T67] team0 (unregistering): Port device team_slave_1 removed [ 836.750459][ T67] team0 (unregistering): Port device team_slave_0 removed [ 836.920093][ T44] vhci_hcd: vhci_device speed not set [ 837.569286][ T9934] chnl_net:caif_netlink_parms(): no params data found [ 837.611147][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 837.879037][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 838.029435][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 838.297912][ T59] Bluetooth: hci5: command 0x0419 tx timeout [ 838.654877][ T5850] Bluetooth: hci6: command tx timeout [ 839.354922][T10056] use of bytesused == 0 is deprecated and will be removed in the future, [ 839.354940][T10056] use the actual size instead. [ 840.232333][T10070] bridge_slave_0: left allmulticast mode [ 840.232366][T10070] bridge_slave_0: left promiscuous mode [ 840.232670][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.334653][T10070] bridge_slave_1: left allmulticast mode [ 840.334687][T10070] bridge_slave_1: left promiscuous mode [ 840.334958][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.494392][T10070] bond0: (slave bond_slave_0): Releasing backup interface [ 840.571568][T10070] bond0: (slave bond_slave_1): Releasing backup interface [ 840.677707][T10070] team0: Port device team_slave_0 removed [ 840.733892][T10070] team0: Port device team_slave_1 removed [ 840.734695][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.734716][T10070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.773303][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.773334][T10070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.889783][ T5850] Bluetooth: hci6: command tx timeout [ 840.889815][ T5850] Bluetooth: hci5: command 0x0419 tx timeout [ 841.248826][T10080] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 842.771906][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 843.319096][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.319238][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.321953][ T9934] bridge_slave_0: entered allmulticast mode [ 843.333557][ T9934] bridge_slave_0: entered promiscuous mode [ 843.797152][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.797290][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.797536][ T9934] bridge_slave_1: entered allmulticast mode [ 843.840005][ T9934] bridge_slave_1: entered promiscuous mode [ 844.019714][T10115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 844.019879][T10115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 844.025201][T10115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 844.028805][T10115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 844.029081][T10115] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 844.029320][T10115] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 844.045194][T10115] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 844.112278][T10115] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 844.534521][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.688929][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.195432][ T9934] team0: Port device team_slave_0 added [ 845.268906][ T9934] team0: Port device team_slave_1 added [ 846.089964][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 846.090128][ T59] Bluetooth: hci5: command 0x0419 tx timeout [ 846.090157][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 846.090183][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 846.090210][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 846.090235][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 846.256104][T10136] vlan2: entered promiscuous mode [ 846.505757][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.506303][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.506335][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.818442][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.818460][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.818490][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.700124][T10170] tipc: Failed to remove unknown binding: 66,1,1/0:486824460/486824462 [ 847.739379][T10170] tipc: Failed to remove unknown binding: 66,1,1/0:486824460/486824462 [ 847.742980][T10170] tipc: Failed to remove unknown binding: 66,1,1/0:486824460/486824462 [ 848.190218][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 850.233351][ T9959] chnl_net:caif_netlink_parms(): no params data found [ 850.468821][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 851.555714][ T9934] hsr_slave_0: entered promiscuous mode [ 851.558502][ T9934] hsr_slave_1: entered promiscuous mode [ 851.577221][ T9934] debugfs: 'hsr0' already exists in 'hsr' [ 851.579340][ T9934] Cannot create hsr debugfs directory [ 851.666646][T10205] vlan2: entered promiscuous mode [ 852.063435][ T9976] chnl_net:caif_netlink_parms(): no params data found [ 852.102145][ T67] bridge_slave_1: left allmulticast mode [ 852.102180][ T67] bridge_slave_1: left promiscuous mode [ 852.102457][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.201429][ T67] bridge_slave_0: left allmulticast mode [ 852.201465][ T67] bridge_slave_0: left promiscuous mode [ 852.201783][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.292584][ T67] bridge_slave_1: left allmulticast mode [ 852.292616][ T67] bridge_slave_1: left promiscuous mode [ 852.292858][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.386481][ T67] bridge_slave_0: left allmulticast mode [ 852.386514][ T67] bridge_slave_0: left promiscuous mode [ 852.386763][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.466955][ T67] bridge_slave_1: left allmulticast mode [ 852.466989][ T67] bridge_slave_1: left promiscuous mode [ 852.467246][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.541253][ T67] bridge_slave_0: left allmulticast mode [ 852.541289][ T67] bridge_slave_0: left promiscuous mode [ 852.541585][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.231692][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.371306][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.488962][ T67] bond0 (unregistering): Released all slaves [ 854.100279][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.230318][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.346101][ T67] bond0 (unregistering): Released all slaves [ 854.770257][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.920303][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.016777][ T67] bond0 (unregistering): Released all slaves [ 857.453134][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.453365][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.453635][ T9959] bridge_slave_0: entered allmulticast mode [ 857.456534][ T9959] bridge_slave_0: entered promiscuous mode [ 857.581348][T10269] tipc: Enabling of bearer rejected, failed to enable media [ 857.600357][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.600516][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.600869][ T9959] bridge_slave_1: entered allmulticast mode [ 857.604430][ T9959] bridge_slave_1: entered promiscuous mode [ 857.605917][T10271] syzkaller0: entered promiscuous mode [ 857.605943][T10271] syzkaller0: entered allmulticast mode [ 857.974292][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.974403][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.974545][ T9976] bridge_slave_0: entered allmulticast mode [ 858.001354][ T9976] bridge_slave_0: entered promiscuous mode [ 858.120656][ T67] hsr_slave_0: left promiscuous mode [ 858.159599][ T67] hsr_slave_1: left promiscuous mode [ 858.160418][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.232763][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.390040][ T67] hsr_slave_0: left promiscuous mode [ 858.477098][ T67] hsr_slave_1: left promiscuous mode [ 858.485191][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.528686][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.670942][ T67] hsr_slave_0: left promiscuous mode [ 858.716168][ T67] hsr_slave_1: left promiscuous mode [ 858.726075][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.755548][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.780383][ T67] team0 (unregistering): Port device team_slave_1 removed [ 859.936547][ T67] team0 (unregistering): Port device team_slave_0 removed [ 862.621807][ T67] team0 (unregistering): Port device team_slave_1 removed [ 862.780501][ T67] team0 (unregistering): Port device team_slave_0 removed [ 864.100971][ T67] team0 (unregistering): Port device team_slave_1 removed [ 864.311794][ T67] team0 (unregistering): Port device team_slave_0 removed [ 865.332291][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.332513][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.332811][ T9976] bridge_slave_1: entered allmulticast mode [ 865.335629][ T9976] bridge_slave_1: entered promiscuous mode [ 865.398847][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.975369][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.343431][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.594140][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.658566][ T9959] team0: Port device team_slave_0 added [ 871.174006][ T9959] team0: Port device team_slave_1 added [ 871.567086][ T9976] team0: Port device team_slave_0 added [ 872.294537][ T9976] team0: Port device team_slave_1 added [ 872.300690][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.300710][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.300744][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.303520][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.303537][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.303570][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.788753][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.676'. [ 872.847790][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.676'. [ 874.153606][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.153622][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.153649][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.551990][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.552009][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.552039][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.880903][ T9959] hsr_slave_0: entered promiscuous mode [ 874.882698][ T9959] hsr_slave_1: entered promiscuous mode [ 875.459553][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.459633][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.041123][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.680'. [ 876.806076][ T9976] hsr_slave_0: entered promiscuous mode [ 876.810860][ T9976] hsr_slave_1: entered promiscuous mode [ 876.813281][ T9976] debugfs: 'hsr0' already exists in 'hsr' [ 876.813307][ T9976] Cannot create hsr debugfs directory [ 878.030787][ T9934] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 878.392177][ T9934] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 878.585086][ T9934] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 878.688289][ T9934] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 879.204963][ T9959] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 879.259200][ T9959] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 879.336427][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.690'. [ 879.338372][ T9959] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 879.512210][ T9959] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 880.485913][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.693'. [ 880.485940][T10399] netlink: 32 bytes leftover after parsing attributes in process `syz.7.693'. [ 880.604877][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.693'. [ 880.657842][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.693'. [ 881.389638][ T9976] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 881.451091][ T9976] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 881.706698][ T9976] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 881.770553][ T9976] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 882.933293][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.072408][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.175203][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.175416][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.231640][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.231804][ T9610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.315999][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.512366][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.690445][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.690816][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.778234][ T9976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.846228][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.846410][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.334942][ T9976] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.614473][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.619666][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.716756][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.718630][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.122498][ T9976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.084419][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.699'. [ 887.095254][ T8016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 887.104085][ T8016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 887.111800][ T8016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 887.124808][ T8016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 887.150528][ T8016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.014826][ T8016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.018854][ T8016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.028067][ T8016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.029279][ T8016] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.041350][ T8016] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.712992][ T8016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 888.728290][ T8016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 888.740891][ T8016] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 888.763098][ T8016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 888.771718][ T8016] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 889.209977][ T59] Bluetooth: hci0: command tx timeout [ 890.089712][ T59] Bluetooth: hci1: command tx timeout [ 890.893335][ T59] Bluetooth: hci4: command tx timeout [ 891.294868][ T59] Bluetooth: hci0: command tx timeout [ 892.169529][ T59] Bluetooth: hci1: command tx timeout [ 892.969767][ T59] Bluetooth: hci4: command tx timeout [ 893.091332][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.709'. [ 893.369694][ T59] Bluetooth: hci0: command tx timeout [ 894.249525][ T8016] Bluetooth: hci1: command tx timeout [ 894.447347][T10461] chnl_net:caif_netlink_parms(): no params data found [ 894.612124][T10474] chnl_net:caif_netlink_parms(): no params data found [ 895.049680][ T8016] Bluetooth: hci4: command tx timeout [ 895.449754][ T8016] Bluetooth: hci0: command tx timeout [ 896.198907][T10481] chnl_net:caif_netlink_parms(): no params data found [ 896.331061][ T8016] Bluetooth: hci1: command tx timeout [ 897.590742][ T8016] Bluetooth: hci4: command tx timeout [ 898.133678][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.159722][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.160009][T10461] bridge_slave_0: entered allmulticast mode [ 898.169030][T10461] bridge_slave_0: entered promiscuous mode [ 898.435392][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.435492][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.435656][T10461] bridge_slave_1: entered allmulticast mode [ 898.437649][T10461] bridge_slave_1: entered promiscuous mode [ 898.503892][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.504021][T10474] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.504266][T10474] bridge_slave_0: entered allmulticast mode [ 898.506866][T10474] bridge_slave_0: entered promiscuous mode [ 898.660861][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.667774][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.668005][T10474] bridge_slave_1: entered allmulticast mode [ 898.703373][T10474] bridge_slave_1: entered promiscuous mode [ 898.705457][ T67] bridge_slave_1: left allmulticast mode [ 898.705484][ T67] bridge_slave_1: left promiscuous mode [ 898.705694][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.906901][ T67] bridge_slave_0: left allmulticast mode [ 898.906925][ T67] bridge_slave_0: left promiscuous mode [ 898.907102][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.795815][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.141955][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.230178][ T67] bond0 (unregistering): Released all slaves [ 905.108331][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.535053][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.664868][T10474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.942011][ T67] hsr_slave_0: left promiscuous mode [ 905.975205][ T67] hsr_slave_1: left promiscuous mode [ 905.976167][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.053188][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.143343][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.733'. [ 908.702057][ T67] team0 (unregistering): Port device team_slave_1 removed [ 908.922869][T10637] input: syz1 as /devices/virtual/input/input10 [ 909.380435][ T67] team0 (unregistering): Port device team_slave_0 removed [ 914.691710][T10481] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.691966][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.692222][T10481] bridge_slave_0: entered allmulticast mode [ 914.695191][T10481] bridge_slave_0: entered promiscuous mode [ 914.747558][T10474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.951383][T10481] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.951537][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.951754][T10481] bridge_slave_1: entered allmulticast mode [ 914.954645][T10481] bridge_slave_1: entered promiscuous mode [ 915.135714][T10461] team0: Port device team_slave_0 added [ 916.735624][T10461] team0: Port device team_slave_1 added [ 916.843556][T10474] team0: Port device team_slave_0 added [ 917.250787][T10481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.252899][T10474] team0: Port device team_slave_1 added [ 917.377736][T10693] netlink: 64 bytes leftover after parsing attributes in process `syz.6.754'. [ 918.215431][T10481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.767149][T10699] netlink: 'syz.7.756': attribute type 10 has an invalid length. [ 919.901640][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.901659][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.901690][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.579078][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.579094][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.579117][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.864695][T10474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.864712][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.864738][T10474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.940375][T10481] team0: Port device team_slave_0 added [ 920.942292][T10474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.942306][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.942334][T10474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.052160][T10481] team0: Port device team_slave_1 added [ 921.611987][T10481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.612005][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.612033][T10481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.045761][T10481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.045778][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.045815][T10481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.129210][T10716] program syz.7.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.237649][T10461] hsr_slave_0: entered promiscuous mode [ 922.239102][T10461] hsr_slave_1: entered promiscuous mode [ 922.252329][T10461] debugfs: 'hsr0' already exists in 'hsr' [ 922.252357][T10461] Cannot create hsr debugfs directory [ 922.344483][T10474] hsr_slave_0: entered promiscuous mode [ 922.346264][T10474] hsr_slave_1: entered promiscuous mode [ 922.347646][T10474] debugfs: 'hsr0' already exists in 'hsr' [ 922.347733][T10474] Cannot create hsr debugfs directory [ 923.661968][T10722] nbd0: detected capacity change from 0 to 63 [ 923.681086][ T8016] block nbd0: Receive control failed (result -104) [ 925.428956][ T37] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.429474][T10733] pim6reg: entered allmulticast mode [ 926.431124][ T37] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.290645][ T37] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.052315][ T37] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.301297][T10481] hsr_slave_0: entered promiscuous mode [ 928.302189][T10481] hsr_slave_1: entered promiscuous mode [ 928.302698][T10481] debugfs: 'hsr0' already exists in 'hsr' [ 928.302714][T10481] Cannot create hsr debugfs directory [ 932.296943][T10777] syzkaller0: entered promiscuous mode [ 932.296976][T10777] syzkaller0: entered allmulticast mode [ 936.911260][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.911343][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.109055][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.109076][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.985463][ T67] bridge_slave_1: left allmulticast mode [ 938.985503][ T67] bridge_slave_1: left promiscuous mode [ 938.985797][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.151140][ T67] bridge_slave_0: left allmulticast mode [ 939.151177][ T67] bridge_slave_0: left promiscuous mode [ 939.151451][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.276749][ T67] bridge_slave_1: left allmulticast mode [ 939.276786][ T67] bridge_slave_1: left promiscuous mode [ 939.277040][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.371563][ T67] bridge_slave_0: left allmulticast mode [ 939.371599][ T67] bridge_slave_0: left promiscuous mode [ 939.371885][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.410516][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.484028][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.524814][ T67] bond0 (unregistering): Released all slaves [ 945.190488][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.250366][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.276698][ T67] bond0 (unregistering): Released all slaves [ 946.419617][ T67] hsr_slave_0: left promiscuous mode [ 946.469246][ T67] hsr_slave_1: left promiscuous mode [ 946.480508][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.640429][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.849630][ T67] hsr_slave_0: left promiscuous mode [ 946.869636][ T67] hsr_slave_1: left promiscuous mode [ 946.870610][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.910399][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.793386][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 947.815717][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 947.816915][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 947.818247][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 947.819079][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 948.731359][ T67] team0 (unregistering): Port device team_slave_1 removed [ 948.837420][ T8016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 948.851014][ T8016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 948.852730][ T8016] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 948.855278][ T8016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 948.856150][ T8016] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 949.020447][ T67] team0 (unregistering): Port device team_slave_0 removed [ 949.932305][ T8016] Bluetooth: hci5: command tx timeout [ 950.063264][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 950.091366][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 950.121433][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 950.126774][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 950.128460][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 950.889586][ T8016] Bluetooth: hci6: command tx timeout [ 952.009589][ T8016] Bluetooth: hci5: command tx timeout [ 952.250375][ T8016] Bluetooth: hci7: command tx timeout [ 952.983713][ T8016] Bluetooth: hci6: command tx timeout [ 954.099563][ T8016] Bluetooth: hci5: command tx timeout [ 954.231488][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 30 seconds [ 954.232313][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 30 seconds [ 954.232351][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 30 seconds [ 954.232385][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 30 seconds [ 954.329642][ T8016] Bluetooth: hci7: command tx timeout [ 954.571540][ T67] team0 (unregistering): Port device team_slave_1 removed [ 954.830845][ T67] team0 (unregistering): Port device team_slave_0 removed [ 955.049543][ T8016] Bluetooth: hci6: command tx timeout [ 956.169643][ T8016] Bluetooth: hci5: command tx timeout [ 956.409636][ T8016] Bluetooth: hci7: command tx timeout [ 957.155567][ T8016] Bluetooth: hci6: command tx timeout [ 958.489541][ T8016] Bluetooth: hci7: command tx timeout [ 960.715138][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.241054][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.615943][T10919] binder: BINDER_SET_CONTEXT_MGR already set [ 961.615960][T10919] binder: 10918:10919 ioctl 4018620d 200000000040 returned -16 [ 961.911084][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.821'. [ 962.761839][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.401267][T10863] chnl_net:caif_netlink_parms(): no params data found [ 964.548064][T10856] chnl_net:caif_netlink_parms(): no params data found [ 967.827121][T10875] chnl_net:caif_netlink_parms(): no params data found [ 973.163168][T11007] tmpfs: Unsupported parameter 'huge' [ 973.235888][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.236017][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.236251][T10863] bridge_slave_0: entered allmulticast mode [ 973.289680][T10863] bridge_slave_0: entered promiscuous mode [ 973.303714][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.303861][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.304164][T10856] bridge_slave_0: entered allmulticast mode [ 973.307305][T10856] bridge_slave_0: entered promiscuous mode [ 973.524988][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.525119][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.525327][T10863] bridge_slave_1: entered allmulticast mode [ 973.527969][T10863] bridge_slave_1: entered promiscuous mode [ 973.557416][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.557559][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.557824][T10856] bridge_slave_1: entered allmulticast mode [ 973.624358][T10856] bridge_slave_1: entered promiscuous mode [ 973.639095][ T67] bridge_slave_1: left allmulticast mode [ 973.639120][ T67] bridge_slave_1: left promiscuous mode [ 973.639281][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.419179][ T67] bridge_slave_0: left allmulticast mode [ 974.419203][ T67] bridge_slave_0: left promiscuous mode [ 974.421602][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.553968][ T67] bridge_slave_1: left allmulticast mode [ 974.553995][ T67] bridge_slave_1: left promiscuous mode [ 974.554194][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.678324][ T67] bridge_slave_0: left allmulticast mode [ 974.678369][ T67] bridge_slave_0: left promiscuous mode [ 974.678645][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.260404][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.390411][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.492233][ T67] bond0 (unregistering): Released all slaves [ 976.188691][T11026] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 976.191921][T11026] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 976.678424][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.809183][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.864025][ T67] bond0 (unregistering): Released all slaves [ 977.280972][T11015] syz_tun: entered allmulticast mode [ 977.299515][T11016] dvmrp8: entered allmulticast mode [ 977.326946][T10875] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.327074][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.327309][T10875] bridge_slave_0: entered allmulticast mode [ 977.351126][T10875] bridge_slave_0: entered promiscuous mode [ 977.541900][T11016] syz_tun: left allmulticast mode [ 977.542048][T11016] dvmrp8: left allmulticast mode [ 977.975131][T10875] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.975263][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.975509][T10875] bridge_slave_1: entered allmulticast mode [ 977.978367][T10875] bridge_slave_1: entered promiscuous mode [ 977.985550][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.992113][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.134897][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.141498][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.551973][ T67] hsr_slave_0: left promiscuous mode [ 979.573739][ T67] hsr_slave_1: left promiscuous mode [ 979.574947][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.622857][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.759763][ T67] hsr_slave_0: left promiscuous mode [ 979.779625][ T67] hsr_slave_1: left promiscuous mode [ 979.780882][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.820763][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.830436][ T67] team0 (unregistering): Port device team_slave_1 removed [ 981.108934][ T67] team0 (unregistering): Port device team_slave_0 removed [ 984.076481][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.861'. [ 984.197740][ T67] team0 (unregistering): Port device team_slave_1 removed [ 984.303811][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 60 seconds [ 984.303847][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 60 seconds [ 984.303869][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 60 seconds [ 984.303890][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 60 seconds [ 984.433465][ T67] team0 (unregistering): Port device team_slave_0 removed [ 985.474254][T10875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.682682][T11069] vlan3: entered promiscuous mode [ 985.829758][T10875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.850720][T10863] team0: Port device team_slave_0 added [ 985.869843][T10856] team0: Port device team_slave_0 added [ 986.008448][T10863] team0: Port device team_slave_1 added [ 986.022846][T10856] team0: Port device team_slave_1 added [ 986.069541][T11066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 986.069888][T11066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 986.070116][T11066] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 986.070226][T11066] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 986.164405][ T5210] udevd[5210]: worker [10488] /devices/virtual/block/nbd0 is taking a long time [ 986.176363][T11066] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 986.276701][T11066] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 986.276778][T11066] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 986.364019][T11066] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 986.383206][T10875] team0: Port device team_slave_0 added [ 986.479760][T11066] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 986.479897][T11066] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 986.555001][T10875] team0: Port device team_slave_1 added [ 986.557872][T11066] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 986.875608][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.875626][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.875653][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.893329][T11077] netlink: 'syz.7.864': attribute type 1 has an invalid length. [ 986.989730][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.989862][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.989893][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.007945][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.007963][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.008013][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.152073][T11077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 987.423325][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.423344][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.423374][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.455350][T10875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.455371][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.455401][T10875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.529274][T10875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.529291][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.529319][T10875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.769609][ T8016] Bluetooth: hci2: command 0x0406 tx timeout [ 988.089895][ T8016] Bluetooth: hci5: command 0x0c1a tx timeout [ 988.090016][ T8016] Bluetooth: hci3: command 0x0406 tx timeout [ 988.329492][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 988.489578][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 988.583792][T10856] hsr_slave_0: entered promiscuous mode [ 988.585467][T10856] hsr_slave_1: entered promiscuous mode [ 988.599567][T10863] hsr_slave_0: entered promiscuous mode [ 988.601519][T10863] hsr_slave_1: entered promiscuous mode [ 988.606619][T10863] debugfs: 'hsr0' already exists in 'hsr' [ 988.606655][T10863] Cannot create hsr debugfs directory [ 988.816163][T10875] hsr_slave_0: entered promiscuous mode [ 988.829437][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.869'. [ 988.829931][T10875] hsr_slave_1: entered promiscuous mode [ 988.830996][T10875] debugfs: 'hsr0' already exists in 'hsr' [ 988.831023][T10875] Cannot create hsr debugfs directory [ 988.973442][T11097] vlan2: entered promiscuous mode [ 988.973466][T11097] bridge0: entered promiscuous mode [ 990.169571][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 990.421932][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 990.579707][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 991.013808][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.873'. [ 992.249633][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 992.489493][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 992.649769][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 994.649104][T11158] tipc: Started in network mode [ 994.649135][T11158] tipc: Node identity 366aa82b5084, cluster identity 4711 [ 994.656067][T11158] tipc: Enabled bearer , priority 0 [ 994.682975][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.883'. [ 994.748177][T11162] syzkaller0: entered promiscuous mode [ 994.748208][T11162] syzkaller0: entered allmulticast mode [ 994.803991][T11154] tipc: Resetting bearer [ 994.945425][T11154] tipc: Disabling bearer [ 996.430056][T11191] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 996.430117][T11191] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 996.430140][T11191] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 996.518477][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 996.518501][ T38] audit: type=1800 audit(1757759995.384:97): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.885" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 998.333955][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.334011][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.482427][ T67] bridge_slave_1: left allmulticast mode [ 998.482464][ T67] bridge_slave_1: left promiscuous mode [ 998.482749][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.921262][ T67] bridge_slave_0: left allmulticast mode [ 998.921298][ T67] bridge_slave_0: left promiscuous mode [ 998.939501][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.909108][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.892'. [ 999.947781][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.084010][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.178386][ T67] bond0 (unregistering): Released all slaves [ 1000.253569][T11227] tipc: Enabled bearer , priority 0 [ 1000.254300][T11236] syzkaller0: entered promiscuous mode [ 1000.254330][T11236] syzkaller0: entered allmulticast mode [ 1000.610610][T11223] tipc: Resetting bearer [ 1000.772938][T11223] tipc: Disabling bearer [ 1001.000889][T11257] netlink: 'syz.7.894': attribute type 1 has an invalid length. [ 1001.199688][ T67] hsr_slave_0: left promiscuous mode [ 1001.239684][ T67] hsr_slave_1: left promiscuous mode [ 1001.240638][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.273473][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.569606][ T8019] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1001.745224][ T8019] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1001.745256][ T8019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.745277][ T8019] usb 7-1: Product: syz [ 1001.745291][ T8019] usb 7-1: Manufacturer: syz [ 1001.745306][ T8019] usb 7-1: SerialNumber: syz [ 1002.083480][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.6.896'. [ 1002.141017][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1002.206824][ T8019] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1002.206884][ T8019] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1002.206898][ T8019] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1002.304724][ T8019] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1002.320075][ T8019] usb 7-1: USB disconnect, device number 3 [ 1002.360437][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1003.333057][T11257] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1003.950769][T11281] netlink: 64 bytes leftover after parsing attributes in process `syz.6.899'. [ 1004.965400][T11286] tipc: Enabled bearer , priority 0 [ 1004.966226][T11286] syzkaller0: entered promiscuous mode [ 1004.966252][T11286] syzkaller0: entered allmulticast mode [ 1006.006554][ T5913] tipc: Node number set to 1726916651 [ 1006.145419][T11285] tipc: Resetting bearer [ 1006.683426][T11285] tipc: Disabling bearer [ 1006.696962][ T8019] IPVS: starting estimator thread 0... [ 1006.779879][T11296] IPVS: using max 10 ests per chain, 24000 per kthread [ 1007.680443][T10856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1007.703752][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.908'. [ 1008.565133][T10863] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1008.624169][T10863] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1008.919851][T10863] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1008.954557][T10863] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1009.288656][T10863] kthread_run failed with err -4 [ 1009.647647][ T8016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.667176][T10875] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1009.672165][ T8016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.673715][ T8016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.674979][ T8016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.675871][ T8016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.841271][T10875] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1010.154982][T10875] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1010.267642][T10875] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1010.762226][T11330] program syz.7.910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1011.439082][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1011.503712][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1011.506428][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1011.580320][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1011.581307][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1011.769527][ T8016] Bluetooth: hci0: command tx timeout [ 1012.208587][T11345] tipc: Started in network mode [ 1012.208615][T11345] tipc: Node identity bec516118b6, cluster identity 4711 [ 1012.208830][T11345] tipc: Enabled bearer , priority 0 [ 1012.241706][T11343] syzkaller0: entered promiscuous mode [ 1012.241769][T11343] syzkaller0: entered allmulticast mode [ 1012.298573][T11341] tipc: Resetting bearer [ 1012.332356][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1012.348907][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1012.357257][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1012.362284][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1012.367767][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1012.406272][T11339] tipc: Resetting bearer [ 1012.565919][T11339] tipc: Disabling bearer [ 1013.256998][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.917'. [ 1013.691833][ T8016] Bluetooth: hci1: command tx timeout [ 1014.090157][ T8016] Bluetooth: hci0: command tx timeout [ 1014.380525][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 90 seconds [ 1014.380577][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 90 seconds [ 1014.380613][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 90 seconds [ 1014.380648][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 90 seconds [ 1014.499874][ T8016] Bluetooth: hci4: command tx timeout [ 1016.017112][ T8016] Bluetooth: hci1: command tx timeout [ 1016.170223][ T8016] Bluetooth: hci0: command tx timeout [ 1016.189604][ T67] bridge_slave_1: left allmulticast mode [ 1016.189628][ T67] bridge_slave_1: left promiscuous mode [ 1016.189797][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.282262][ T67] bridge_slave_0: left allmulticast mode [ 1016.282292][ T67] bridge_slave_0: left promiscuous mode [ 1016.282483][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.626905][ T8016] Bluetooth: hci4: command tx timeout [ 1018.096483][ T8016] Bluetooth: hci1: command tx timeout [ 1018.251662][ T8016] Bluetooth: hci0: command tx timeout [ 1018.554852][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.665284][ T8016] Bluetooth: hci4: command tx timeout [ 1018.693362][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.763524][ T67] bond0 (unregistering): Released all slaves [ 1019.459698][ T67] hsr_slave_0: left promiscuous mode [ 1019.499464][ T67] hsr_slave_1: left promiscuous mode [ 1019.501117][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.534458][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.145804][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.927'. [ 1020.169607][ T8016] Bluetooth: hci1: command tx timeout [ 1020.729528][ T8016] Bluetooth: hci4: command tx timeout [ 1021.080298][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1021.223365][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1022.017909][T11320] chnl_net:caif_netlink_parms(): no params data found [ 1022.028996][T11400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1022.029294][T11400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1022.043955][T11400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1022.044034][T11400] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1022.155417][T11400] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1022.246299][T11400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1022.246392][T11400] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1022.388270][T11400] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1022.401950][T11329] chnl_net:caif_netlink_parms(): no params data found [ 1022.481063][T11400] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1022.481276][T11400] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1022.571877][T11400] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1024.699551][ T8016] Bluetooth: hci0: command 0x0c1a tx timeout [ 1024.699810][ T8016] Bluetooth: hci3: command 0x0406 tx timeout [ 1024.699844][ T8016] Bluetooth: hci2: command 0x0406 tx timeout [ 1024.699876][ T8016] Bluetooth: hci1: command 0x0c1a tx timeout [ 1024.699961][ T8016] Bluetooth: hci4: command 0x0c1a tx timeout [ 1026.442162][T11320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.442397][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.442625][T11320] bridge_slave_0: entered allmulticast mode [ 1026.450253][T11320] bridge_slave_0: entered promiscuous mode [ 1026.475899][T11347] chnl_net:caif_netlink_parms(): no params data found [ 1026.527938][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.528105][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.528332][T11320] bridge_slave_1: entered allmulticast mode [ 1026.538895][T11320] bridge_slave_1: entered promiscuous mode [ 1026.771566][ T8016] Bluetooth: hci1: command 0x0c1a tx timeout [ 1027.519755][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 1028.819510][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 1029.529615][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 1029.958762][T11320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.969773][T11329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.969920][T11329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.970170][T11329] bridge_slave_0: entered allmulticast mode [ 1029.973056][T11329] bridge_slave_0: entered promiscuous mode [ 1030.053699][T11329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.053863][T11329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.054124][T11329] bridge_slave_1: entered allmulticast mode [ 1030.088028][T11329] bridge_slave_1: entered promiscuous mode [ 1030.121507][T11320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.579963][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.936'. [ 1031.563726][T11480] netlink: 64 bytes leftover after parsing attributes in process `syz.7.938'. [ 1032.803528][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.826294][T11474] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1032.839977][T11474] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1032.840298][T11474] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1032.840560][T11474] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1032.842584][T11320] team0: Port device team_slave_0 added [ 1033.073208][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.091637][T11320] team0: Port device team_slave_1 added [ 1033.092363][T11347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.092537][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.092836][T11347] bridge_slave_0: entered allmulticast mode [ 1033.147120][T11347] bridge_slave_0: entered promiscuous mode [ 1034.889493][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 1034.889538][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 1034.889568][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 1034.892569][ T8016] Bluetooth: hci2: command 0x0406 tx timeout [ 1035.023473][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.023619][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.023848][T11347] bridge_slave_1: entered allmulticast mode [ 1035.036799][T11347] bridge_slave_1: entered promiscuous mode [ 1037.082085][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.945'. [ 1037.781630][T11329] team0: Port device team_slave_0 added [ 1037.786768][T11320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.786785][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.786815][T11320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.988541][T11329] team0: Port device team_slave_1 added [ 1038.005693][T11320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.005711][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.005740][T11320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.016220][T11347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.560380][T11347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.893518][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.893537][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.893567][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.484685][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.484703][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.484732][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.761719][T11347] team0: Port device team_slave_0 added [ 1040.971535][T11347] team0: Port device team_slave_1 added [ 1041.017510][T11320] hsr_slave_0: entered promiscuous mode [ 1041.027824][T11320] hsr_slave_1: entered promiscuous mode [ 1041.183144][ T31] IPVS: starting estimator thread 0... [ 1041.279650][T11553] IPVS: using max 7 ests per chain, 16800 per kthread [ 1042.286058][T11347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.286078][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.286110][T11347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.482211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.543212][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.954'. [ 1042.968098][T11347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.968117][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.968146][T11347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.002810][T11329] hsr_slave_0: entered promiscuous mode [ 1043.004445][T11329] hsr_slave_1: entered promiscuous mode [ 1043.005507][T11329] debugfs: 'hsr0' already exists in 'hsr' [ 1043.005537][T11329] Cannot create hsr debugfs directory [ 1043.126057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.448232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.739474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.025995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.356934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.589628][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 120 seconds [ 1044.589680][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 120 seconds [ 1044.589716][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 120 seconds [ 1044.589751][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 120 seconds [ 1044.727190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.929006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1047.041601][T11347] hsr_slave_0: entered promiscuous mode [ 1047.056663][T11347] hsr_slave_1: entered promiscuous mode [ 1047.078011][T11347] debugfs: 'hsr0' already exists in 'hsr' [ 1047.079576][T11347] Cannot create hsr debugfs directory [ 1049.568611][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.964'. [ 1054.177593][ T67] bridge_slave_1: left allmulticast mode [ 1054.177632][ T67] bridge_slave_1: left promiscuous mode [ 1054.177906][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.242483][ T67] bridge_slave_0: left allmulticast mode [ 1054.242519][ T67] bridge_slave_0: left promiscuous mode [ 1054.242855][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.350286][ T67] bridge_slave_1: left allmulticast mode [ 1054.350323][ T67] bridge_slave_1: left promiscuous mode [ 1054.350596][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.441180][ T67] bridge_slave_0: left allmulticast mode [ 1054.441217][ T67] bridge_slave_0: left promiscuous mode [ 1054.441484][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.172688][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.425194][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.572806][ T67] bond0 (unregistering): Released all slaves [ 1057.230399][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.290269][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.335151][ T67] bond0 (unregistering): Released all slaves [ 1058.055285][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.975'. [ 1058.090745][T11698] vlan3: entered promiscuous mode [ 1058.291555][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.974'. [ 1060.640531][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.640614][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.770337][ T67] hsr_slave_0: left promiscuous mode [ 1060.809738][ T67] hsr_slave_1: left promiscuous mode [ 1060.810685][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.862979][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.970002][ T67] hsr_slave_0: left promiscuous mode [ 1060.996216][ T67] hsr_slave_1: left promiscuous mode [ 1060.997232][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.055717][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.720419][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1061.860438][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1063.141292][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1063.270387][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1066.455955][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1066.474976][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1066.487642][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1066.519741][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1066.547438][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1067.439550][T11320] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1067.533529][T11320] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1067.676684][T11320] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1067.868757][T11320] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1068.599497][T11329] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1068.649651][T11499] Bluetooth: hci3: command tx timeout [ 1068.680572][T11329] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1068.786759][T11329] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1068.859746][T11329] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1068.977873][T11744] chnl_net:caif_netlink_parms(): no params data found [ 1069.151964][T11347] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1069.215495][T11347] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1069.267011][T11347] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1069.322154][T11347] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1069.635630][T11744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.635868][T11744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.636143][T11744] bridge_slave_0: entered allmulticast mode [ 1069.641339][T11744] bridge_slave_0: entered promiscuous mode [ 1069.663790][T11744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.663972][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.664263][T11744] bridge_slave_1: entered allmulticast mode [ 1069.668936][T11744] bridge_slave_1: entered promiscuous mode [ 1070.173858][T11744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.191094][T11744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.460496][T11744] team0: Port device team_slave_0 added [ 1070.692407][T11744] team0: Port device team_slave_1 added [ 1070.729506][T11499] Bluetooth: hci3: command tx timeout [ 1071.271108][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.984'. [ 1071.366078][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1071.405066][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1071.408328][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1071.421504][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1071.422340][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1071.620969][T11744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.620988][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.621019][T11744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.683899][T11744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.683917][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.683948][T11744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.554407][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1072.576902][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1072.585301][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1072.589050][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1072.598537][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1072.809923][ T5850] Bluetooth: hci3: command tx timeout [ 1073.301565][T11744] hsr_slave_0: entered promiscuous mode [ 1073.302907][T11744] hsr_slave_1: entered promiscuous mode [ 1073.303781][T11744] debugfs: 'hsr0' already exists in 'hsr' [ 1073.303805][T11744] Cannot create hsr debugfs directory [ 1073.581201][ T5850] Bluetooth: hci0: command tx timeout [ 1074.387178][T11499] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1074.411433][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1074.418572][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1074.435832][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1074.436648][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1074.655996][ T5850] Bluetooth: hci1: command tx timeout [ 1074.890987][ T5850] Bluetooth: hci3: command tx timeout [ 1075.329632][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 150 seconds [ 1075.329669][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 150 seconds [ 1075.329693][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 150 seconds [ 1075.329717][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 150 seconds [ 1075.611257][ T5850] Bluetooth: hci0: command tx timeout [ 1076.495507][ T5850] Bluetooth: hci4: command tx timeout [ 1076.739416][ T5850] Bluetooth: hci1: command tx timeout [ 1076.831621][ T9600] bridge_slave_1: left allmulticast mode [ 1076.831657][ T9600] bridge_slave_1: left promiscuous mode [ 1076.831944][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.891838][ T9600] bridge_slave_0: left allmulticast mode [ 1076.891874][ T9600] bridge_slave_0: left promiscuous mode [ 1076.892168][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.699538][ T5850] Bluetooth: hci0: command tx timeout [ 1078.000502][ T9600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.081449][ T9600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.146581][ T9600] bond0 (unregistering): Released all slaves [ 1078.569659][ T5850] Bluetooth: hci4: command tx timeout [ 1078.811312][ T5850] Bluetooth: hci1: command tx timeout [ 1078.832910][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.991'. [ 1078.896594][ T9600] hsr_slave_0: left promiscuous mode [ 1078.909579][ T9600] hsr_slave_1: left promiscuous mode [ 1078.910742][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.960455][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.770007][ T5850] Bluetooth: hci0: command tx timeout [ 1080.255755][ T9600] team0 (unregistering): Port device team_slave_1 removed [ 1080.423062][ T9600] team0 (unregistering): Port device team_slave_0 removed [ 1080.649713][ T5850] Bluetooth: hci4: command tx timeout [ 1080.889788][ T5850] Bluetooth: hci1: command tx timeout [ 1081.788180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.350843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.527328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.745737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.762776][ T5850] Bluetooth: hci4: command tx timeout [ 1083.422921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1083.846704][T11810] chnl_net:caif_netlink_parms(): no params data found [ 1084.420016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1084.431339][T11816] chnl_net:caif_netlink_parms(): no params data found [ 1085.416392][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.435913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.538501][T11823] chnl_net:caif_netlink_parms(): no params data found [ 1088.411713][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.411882][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.412166][T11810] bridge_slave_0: entered allmulticast mode [ 1088.440538][T11810] bridge_slave_0: entered promiscuous mode [ 1088.522297][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.522455][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.522711][T11810] bridge_slave_1: entered allmulticast mode [ 1088.525610][T11810] bridge_slave_1: entered promiscuous mode [ 1089.039503][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.998'. [ 1089.250953][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.251185][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.251400][T11816] bridge_slave_0: entered allmulticast mode [ 1089.256529][T11816] bridge_slave_0: entered promiscuous mode [ 1089.374264][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.393165][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.393335][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.393617][T11816] bridge_slave_1: entered allmulticast mode [ 1089.396176][T11816] bridge_slave_1: entered promiscuous mode [ 1089.696634][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.065970][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.066076][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.066272][T11823] bridge_slave_0: entered allmulticast mode [ 1090.068480][T11823] bridge_slave_0: entered promiscuous mode [ 1090.421094][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.422813][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.423039][T11823] bridge_slave_1: entered allmulticast mode [ 1090.460312][T11823] bridge_slave_1: entered promiscuous mode [ 1090.744955][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.474842][T11810] team0: Port device team_slave_0 added [ 1091.478856][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.651360][T11810] team0: Port device team_slave_1 added [ 1092.035645][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.251447][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.864475][T11816] team0: Port device team_slave_0 added [ 1093.312140][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.312245][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.312276][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.323647][T11816] team0: Port device team_slave_1 added [ 1093.443239][T11744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1093.483849][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.483869][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.483915][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.594474][T11823] team0: Port device team_slave_0 added [ 1093.603502][T11744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1094.063476][T11823] team0: Port device team_slave_1 added [ 1094.069702][T11744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1094.124779][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.124797][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.124851][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.232108][T11744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1094.274614][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.274627][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.274645][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.492382][T11823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.492401][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.492430][T11823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.599710][T11823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.599729][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.599757][T11823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.620668][T11810] hsr_slave_0: entered promiscuous mode [ 1094.622301][T11810] hsr_slave_1: entered promiscuous mode [ 1095.300925][T11816] hsr_slave_0: entered promiscuous mode [ 1095.302425][T11816] hsr_slave_1: entered promiscuous mode [ 1095.303413][T11816] debugfs: 'hsr0' already exists in 'hsr' [ 1095.303441][T11816] Cannot create hsr debugfs directory [ 1095.637377][T11823] hsr_slave_0: entered promiscuous mode [ 1095.638926][T11823] hsr_slave_1: entered promiscuous mode [ 1095.641429][T11823] debugfs: 'hsr0' already exists in 'hsr' [ 1095.641464][T11823] Cannot create hsr debugfs directory [ 1097.505922][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1005'. [ 1099.646812][T11744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.679177][ T9600] bridge_slave_1: left allmulticast mode [ 1099.679211][ T9600] bridge_slave_1: left promiscuous mode [ 1099.679582][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.781433][ T9600] bridge_slave_0: left allmulticast mode [ 1099.781475][ T9600] bridge_slave_0: left promiscuous mode [ 1099.781772][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.904535][ T9600] bridge_slave_1: left allmulticast mode [ 1099.904574][ T9600] bridge_slave_1: left promiscuous mode [ 1099.904827][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.971230][ T9600] bridge_slave_0: left allmulticast mode [ 1099.971268][ T9600] bridge_slave_0: left promiscuous mode [ 1099.971555][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.341636][ T9600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.470613][ T9600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.534885][ T9600] bond0 (unregistering): Released all slaves [ 1102.132909][ T9600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.222285][ T9600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.304256][ T9600] bond0 (unregistering): Released all slaves [ 1102.892484][T11744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.904643][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.904906][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.917659][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.918018][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.233580][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1012'. [ 1104.234533][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1012'. [ 1104.429606][ T9600] hsr_slave_0: left promiscuous mode [ 1104.469586][ T9600] hsr_slave_1: left promiscuous mode [ 1104.471340][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.501602][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.639510][ T9600] hsr_slave_0: left promiscuous mode [ 1104.669663][ T9600] hsr_slave_1: left promiscuous mode [ 1104.670655][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.874967][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.186477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.249464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.301589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.329505][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 180 seconds [ 1106.329558][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 180 seconds [ 1106.329594][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 180 seconds [ 1106.329647][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 180 seconds [ 1106.488365][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1015'. [ 1107.011985][ T9600] team0 (unregistering): Port device team_slave_1 removed [ 1107.150179][ T9600] team0 (unregistering): Port device team_slave_0 removed [ 1107.238384][ T5210] udevd[5210]: worker [10488] /devices/virtual/block/nbd0 timeout; kill it [ 1107.238504][ T5210] udevd[5210]: seq 30089 '/devices/virtual/block/nbd0' killed [ 1108.553225][ T9600] team0 (unregistering): Port device team_slave_1 removed [ 1108.700378][ T9600] team0 (unregistering): Port device team_slave_0 removed [ 1109.545920][T11985] vlan3: entered promiscuous mode [ 1109.979014][T11744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.456684][T11744] veth0_vlan: entered promiscuous mode [ 1110.497599][T11744] veth1_vlan: entered promiscuous mode [ 1110.790134][T11744] veth0_macvtap: entered promiscuous mode [ 1110.973324][T11744] veth1_macvtap: entered promiscuous mode [ 1111.047126][T11744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.146953][T11744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.181248][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.181562][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.182909][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.182952][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.597480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.896069][ T3619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.896093][ T3619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.183763][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.183785][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.305863][T11810] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1113.426222][T11810] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1114.223890][T11810] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1114.386437][T11810] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1114.569999][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1019'. [ 1114.570964][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1019'. [ 1115.053792][T11816] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1115.119578][T11816] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1115.329079][T11816] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1116.759677][T11816] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1117.217531][T11823] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1117.314118][T11823] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1117.348374][T11823] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1117.400976][T11823] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1119.017848][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.431632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.041124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.082965][T12058] binfmt_misc: register: failed to install interpreter file ./file0 [ 1120.086171][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.121025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.349989][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.393772][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.611718][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.649973][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.720165][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.720354][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.823199][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.825421][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.953021][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.035932][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.036134][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.131067][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.131269][ T8709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.183999][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 1121.184958][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'. [ 1121.289254][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.351336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.389187][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.392600][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.490223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.662718][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.277457][T11823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.354339][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.354929][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.367645][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.367773][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.418527][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.593995][T12107] vlan2: entered allmulticast mode [ 1126.594018][T12107] veth1: entered allmulticast mode [ 1126.981835][T12118] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1035'. [ 1127.223106][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.652831][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 1127.653766][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 1128.612892][T11823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.639659][T11810] veth0_vlan: entered promiscuous mode [ 1128.714452][T11810] veth1_vlan: entered promiscuous mode [ 1128.808310][T11810] veth0_macvtap: entered promiscuous mode [ 1129.323080][T11810] veth1_macvtap: entered promiscuous mode [ 1129.403459][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.435508][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.489754][ T9602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.493065][ T9602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.494341][ T9602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.494799][ T9602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.996861][T11965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1131.140655][T11965] usb 1-1: Using ep0 maxpacket: 16 [ 1131.143496][T11965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.143527][T11965] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1131.193207][T11965] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1131.193241][T11965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.193263][T11965] usb 1-1: Product: syz [ 1131.193278][T11965] usb 1-1: Manufacturer: syz [ 1131.193293][T11965] usb 1-1: SerialNumber: syz [ 1131.269755][T11965] usb 1-1: config 0 descriptor?? [ 1131.325963][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.325986][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.436264][ T9613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.436286][ T9613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.717428][T11816] veth0_vlan: entered promiscuous mode [ 1133.794708][T11816] veth1_vlan: entered promiscuous mode [ 1133.960700][T11816] veth0_macvtap: entered promiscuous mode [ 1134.002463][T11816] veth1_macvtap: entered promiscuous mode [ 1134.110482][T11823] veth0_vlan: entered promiscuous mode [ 1134.151750][T11816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.198815][T11816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.207916][T11823] veth1_vlan: entered promiscuous mode [ 1134.262167][ T3614] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.264984][ T3614] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.266303][ T3614] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.272019][ T3614] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.643004][ T5932] usb 1-1: USB disconnect, device number 2 [ 1135.047820][T11823] veth0_macvtap: entered promiscuous mode [ 1135.667645][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1135.686905][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1135.695513][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1135.697197][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1135.698037][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1135.706978][T11823] veth1_macvtap: entered promiscuous mode [ 1135.950143][ T3190] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.361232][ T3190] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.515888][T11823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.619623][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 210 seconds [ 1136.619669][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 210 seconds [ 1136.619698][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 210 seconds [ 1136.619724][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 210 seconds [ 1136.913645][ T3190] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.574176][ T3190] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.859794][ T5850] Bluetooth: hci0: command tx timeout [ 1138.293761][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1045'. [ 1138.294690][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1045'. [ 1138.335108][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1138.355229][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1138.356998][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1138.358791][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1138.361707][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1139.527438][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1139.542348][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1139.544269][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1139.546980][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1139.565261][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1139.931532][ T59] Bluetooth: hci0: command tx timeout [ 1140.817097][ T59] Bluetooth: hci1: command tx timeout [ 1141.745545][ T59] Bluetooth: hci4: command tx timeout [ 1142.267223][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 1142.291088][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 1142.393158][ T59] Bluetooth: hci0: command tx timeout [ 1142.989566][ T59] Bluetooth: hci1: command tx timeout [ 1144.336105][ T59] Bluetooth: hci4: command tx timeout [ 1144.347743][T12286] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1144.491060][ T59] Bluetooth: hci0: command tx timeout [ 1144.651684][ T3190] bridge_slave_1: left allmulticast mode [ 1144.651719][ T3190] bridge_slave_1: left promiscuous mode [ 1144.652049][ T3190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.761221][ T3190] bridge_slave_0: left allmulticast mode [ 1144.761257][ T3190] bridge_slave_0: left promiscuous mode [ 1144.761634][ T3190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.049559][ T59] Bluetooth: hci1: command tx timeout [ 1146.419588][ T59] Bluetooth: hci4: command tx timeout [ 1147.966720][ T59] Bluetooth: hci1: command tx timeout [ 1148.319154][ T3190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.351132][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 1148.363976][ T3190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.408015][ T3190] bond0 (unregistering): Released all slaves [ 1148.489542][ T59] Bluetooth: hci4: command tx timeout [ 1148.848642][T12193] chnl_net:caif_netlink_parms(): no params data found [ 1149.709717][T12335] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1067'. [ 1151.731126][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1072'. [ 1152.567567][T12224] chnl_net:caif_netlink_parms(): no params data found [ 1152.629389][ T38] audit: type=1326 audit(1757760151.574:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629449][ T38] audit: type=1326 audit(1757760151.574:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629494][ T38] audit: type=1326 audit(1757760151.574:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629540][ T38] audit: type=1326 audit(1757760151.574:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629584][ T38] audit: type=1326 audit(1757760151.574:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629629][ T38] audit: type=1326 audit(1757760151.574:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629673][ T38] audit: type=1326 audit(1757760151.574:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629727][ T38] audit: type=1326 audit(1757760151.574:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629772][ T38] audit: type=1326 audit(1757760151.574:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.629818][ T38] audit: type=1326 audit(1757760151.574:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.7.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7ffc0000 [ 1152.864251][T12239] chnl_net:caif_netlink_parms(): no params data found [ 1153.430097][ T3190] hsr_slave_0: left promiscuous mode [ 1153.501534][ T3190] hsr_slave_1: left promiscuous mode [ 1153.504372][ T3190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.504413][ T3190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.571303][ T3190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.571340][ T3190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.870487][ T3190] veth1_macvtap: left promiscuous mode [ 1153.870575][ T3190] veth0_macvtap: left promiscuous mode [ 1153.870768][ T3190] veth1_vlan: left promiscuous mode [ 1153.870926][ T3190] veth0_vlan: left promiscuous mode [ 1160.293125][ T3190] team0 (unregistering): Port device team_slave_1 removed [ 1160.580845][ T3190] team0 (unregistering): Port device team_slave_0 removed [ 1161.050167][T12418] befs: (nullb0): invalid magic header [ 1166.699845][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 240 seconds [ 1166.699912][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 240 seconds [ 1166.699966][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 240 seconds [ 1166.700003][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 240 seconds [ 1167.236952][T12446] befs: (nullb0): invalid magic header [ 1170.697143][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.697301][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.697584][T12193] bridge_slave_0: entered allmulticast mode [ 1170.711004][T12193] bridge_slave_0: entered promiscuous mode [ 1170.928792][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.928943][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.929177][T12193] bridge_slave_1: entered allmulticast mode [ 1170.975465][T12193] bridge_slave_1: entered promiscuous mode [ 1174.234526][T12193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.592927][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.593079][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.593287][T12224] bridge_slave_0: entered allmulticast mode [ 1174.609628][T12224] bridge_slave_0: entered promiscuous mode [ 1174.662551][T12193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.046290][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.046448][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.046719][T12224] bridge_slave_1: entered allmulticast mode [ 1176.053730][T12224] bridge_slave_1: entered promiscuous mode [ 1176.505520][T12239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.505650][T12239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.505847][T12239] bridge_slave_0: entered allmulticast mode [ 1176.508072][T12239] bridge_slave_0: entered promiscuous mode [ 1177.230673][T12239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.230820][T12239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.231038][T12239] bridge_slave_1: entered allmulticast mode [ 1177.237415][T12239] bridge_slave_1: entered promiscuous mode [ 1178.377053][T12193] team0: Port device team_slave_0 added [ 1178.615107][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.644618][T12193] team0: Port device team_slave_1 added [ 1178.928830][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.957113][T12239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.362107][T12239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.662543][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.662616][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.769076][T12193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.769093][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.769123][T12193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.914418][T12224] team0: Port device team_slave_0 added [ 1182.924230][T12193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.924250][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.924280][T12193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.234115][T12224] team0: Port device team_slave_1 added [ 1183.345791][T12239] team0: Port device team_slave_0 added [ 1183.770149][T12239] team0: Port device team_slave_1 added [ 1184.104080][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.104098][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.104127][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.929380][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 1186.929396][ T38] audit: type=1326 audit(1757760185.885:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12593 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51d4eba9 code=0x7fc00000 [ 1188.373367][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.373384][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.373412][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.507409][ T38] audit: type=1326 audit(1757760187.375:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12593 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff51d4eba9 code=0x7fc00000 [ 1188.683471][T12239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.683488][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.683513][T12239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.924011][T12193] hsr_slave_0: entered promiscuous mode [ 1188.940122][T12193] hsr_slave_1: entered promiscuous mode [ 1188.943872][T12239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.943886][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.943932][T12239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.675144][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 1191.727235][T12224] hsr_slave_0: entered promiscuous mode [ 1191.728564][T12224] hsr_slave_1: entered promiscuous mode [ 1191.741117][T12224] debugfs: 'hsr0' already exists in 'hsr' [ 1191.741147][T12224] Cannot create hsr debugfs directory [ 1191.797565][T12612] syz.0.1118: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1191.798200][T12612] CPU: 0 UID: 0 PID: 12612 Comm: syz.0.1118 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1191.798227][T12612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1191.798249][T12612] Call Trace: [ 1191.798258][T12612] [ 1191.798268][T12612] dump_stack_lvl+0x189/0x250 [ 1191.798315][T12612] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1191.798357][T12612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1191.798401][T12612] ? __pfx__printk+0x10/0x10 [ 1191.798424][T12612] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1191.798446][T12612] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1191.798477][T12612] warn_alloc+0x22e/0x3b0 [ 1191.798518][T12612] ? __pfx_warn_alloc+0x10/0x10 [ 1191.798559][T12612] ? __get_vm_area_node+0x2bc/0x350 [ 1191.798589][T12612] ? hash_netport4_resize+0x235/0x1b70 [ 1191.798627][T12612] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1191.798656][T12612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.798709][T12612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1191.798742][T12612] ? rcu_is_watching+0x15/0xb0 [ 1191.798777][T12612] __kvmalloc_node_noprof+0x330/0x550 [ 1191.798808][T12612] ? hash_netport4_resize+0x235/0x1b70 [ 1191.798836][T12612] ? hash_netport4_resize+0x235/0x1b70 [ 1191.798876][T12612] hash_netport4_resize+0x235/0x1b70 [ 1191.798908][T12612] ? hash_netport4_uadt+0xc9a/0xf30 [ 1191.798946][T12612] ? __pfx_hash_netport4_add+0x10/0x10 [ 1191.798985][T12612] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1191.799023][T12612] ? call_ad+0x102/0x9c0 [ 1191.799052][T12612] call_ad+0x3c5/0x9c0 [ 1191.799086][T12612] ? __pfx_call_ad+0x10/0x10 [ 1191.799127][T12612] ? __nla_parse+0x40/0x60 [ 1191.799151][T12612] ip_set_ad+0x797/0x940 [ 1191.799194][T12612] ? __pfx_ip_set_ad+0x10/0x10 [ 1191.799216][T12612] ? do_raw_spin_lock+0x121/0x290 [ 1191.799284][T12612] nfnetlink_rcv_msg+0xb66/0x1150 [ 1191.799309][T12612] ? __lock_acquire+0xab9/0xd20 [ 1191.799335][T12612] ? nfnetlink_rcv_msg+0x212/0x1150 [ 1191.799378][T12612] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1191.799431][T12612] ? __pfx_migrate_enable+0x10/0x10 [ 1191.799456][T12612] ? __pfx_migrate_enable+0x10/0x10 [ 1191.799501][T12612] netlink_rcv_skb+0x208/0x470 [ 1191.799531][T12612] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1191.799558][T12612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1191.799599][T12612] ? bpf_lsm_capable+0x9/0x20 [ 1191.799624][T12612] ? security_capable+0x7e/0x2e0 [ 1191.799662][T12612] nfnetlink_rcv+0x26a/0x2530 [ 1191.799691][T12612] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 1191.799723][T12612] ? __dev_queue_xmit+0x26f/0x3b70 [ 1191.799761][T12612] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1191.799786][T12612] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1191.799824][T12612] ? ref_tracker_free+0x61e/0x7c0 [ 1191.799855][T12612] ? __asan_memcpy+0x40/0x70 [ 1191.799877][T12612] ? __pfx_ref_tracker_free+0x10/0x10 [ 1191.799905][T12612] ? __skb_clone+0x63/0x7a0 [ 1191.799930][T12612] ? __skb_clone+0x483/0x7a0 [ 1191.799957][T12612] ? skb_clone+0x246/0x3a0 [ 1191.799982][T12612] ? __netlink_deliver_tap+0x807/0x850 [ 1191.800010][T12612] ? netlink_deliver_tap+0x2e/0x1b0 [ 1191.800045][T12612] ? netlink_deliver_tap+0x2e/0x1b0 [ 1191.800085][T12612] netlink_unicast+0x846/0xa10 [ 1191.800120][T12612] ? __pfx_netlink_unicast+0x10/0x10 [ 1191.800148][T12612] ? netlink_sendmsg+0x642/0xb30 [ 1191.800185][T12612] ? skb_put+0x11b/0x210 [ 1191.800219][T12612] netlink_sendmsg+0x805/0xb30 [ 1191.800258][T12612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.800297][T12612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1191.800317][T12612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.800346][T12612] __sock_sendmsg+0x21c/0x270 [ 1191.800376][T12612] ____sys_sendmsg+0x508/0x820 [ 1191.800403][T12612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.800434][T12612] ? import_iovec+0x74/0xa0 [ 1191.800463][T12612] ___sys_sendmsg+0x21f/0x2a0 [ 1191.800485][T12612] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.800534][T12612] ? __fget_files+0x2a/0x420 [ 1191.800562][T12612] ? __fget_files+0x3a6/0x420 [ 1191.800602][T12612] __x64_sys_sendmsg+0x1a1/0x260 [ 1191.800626][T12612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.800658][T12612] ? rcu_is_watching+0x15/0xb0 [ 1191.800695][T12612] ? do_syscall_64+0xbe/0x3b0 [ 1191.800719][T12612] do_syscall_64+0xfa/0x3b0 [ 1191.800736][T12612] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.800766][T12612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.800786][T12612] ? clear_bhb_loop+0x60/0xb0 [ 1191.800830][T12612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.800857][T12612] RIP: 0033:0x7f0d0031eba9 [ 1191.800883][T12612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.800901][T12612] RSP: 002b:00007f0cfe586038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.800924][T12612] RAX: ffffffffffffffda RBX: 00007f0d00565fa0 RCX: 00007f0d0031eba9 [ 1191.800940][T12612] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1191.800955][T12612] RBP: 00007f0d003a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1191.800969][T12612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.800984][T12612] R13: 00007f0d00566038 R14: 00007f0d00565fa0 R15: 00007ffe3ac6cc18 [ 1191.801022][T12612] [ 1191.819319][T12612] Mem-Info: [ 1191.819338][T12612] active_anon:283 inactive_anon:40165 isolated_anon:0 [ 1191.819338][T12612] active_file:17977 inactive_file:37166 isolated_file:0 [ 1191.819338][T12612] unevictable:768 dirty:45 writeback:0 [ 1191.819338][T12612] slab_reclaimable:11679 slab_unreclaimable:110175 [ 1191.819338][T12612] mapped:31736 shmem:34147 pagetables:1753 [ 1191.819338][T12612] sec_pagetables:0 bounce:0 [ 1191.819338][T12612] kernel_misc_reclaimable:0 [ 1191.819338][T12612] free:1282826 free_pcp:2342 free_cma:0 [ 1191.819410][T12612] Node 0 active_anon:1132kB inactive_anon:160660kB active_file:71708kB inactive_file:148664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126944kB dirty:180kB writeback:0kB shmem:135052kB kernel_stack:14404kB pagetables:6868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1191.819464][T12612] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1191.819514][T12612] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1191.819587][T12612] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 1191.819628][T12612] Node 0 DMA32 free:1208504kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1128kB inactive_anon:160616kB active_file:70692kB inactive_file:148596kB unevictable:1536kB writepending:180kB present:3129332kB managed:2572300kB mlocked:0kB bounce:0kB free_pcp:8640kB local_pcp:1216kB free_cma:0kB [ 1191.819696][T12612] lowmem_reserve[]: 0 0 1 1 1 [ 1191.819734][T12612] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1016kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1191.819796][T12612] lowmem_reserve[]: 0 0 0 0 0 [ 1191.819831][T12612] Node 1 Normal free:3907440kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:728kB local_pcp:728kB free_cma:0kB [ 1191.819901][T12612] lowmem_reserve[]: 0 0 0 0 0 [ 1191.819939][T12612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1191.820065][T12612] Node 0 DMA32: 381*4kB (ME) 579*8kB (UME) 398*16kB (UM) 294*32kB (UME) 135*64kB (UME) 462*128kB (UME) 184*256kB (UME) 65*512kB (UME) 14*1024kB (UME) 8*2048kB (ME) 246*4096kB (UM) = 1208428kB [ 1191.820242][T12612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1191.820349][T12612] Node 1 Normal: 188*4kB (U) 56*8kB (UME) 34*16kB (UME) 205*32kB (UME) 80*64kB (UME) 26*128kB (UME) 16*256kB (UM) 9*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3907440kB [ 1191.820515][T12612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1191.820534][T12612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1191.820552][T12612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1191.820569][T12612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1191.820586][T12612] 89286 total pagecache pages [ 1191.820600][T12612] 0 pages in swap cache [ 1191.820624][T12612] Free swap = 124996kB [ 1191.820632][T12612] Total swap = 124996kB [ 1191.820641][T12612] 2097051 pages RAM [ 1191.820649][T12612] 0 pages HighMem/MovableOnly [ 1191.820657][T12612] 422078 pages reserved [ 1191.820665][T12612] 0 pages cma reserved [ 1192.648653][T12239] hsr_slave_0: entered promiscuous mode [ 1192.657412][T12239] hsr_slave_1: entered promiscuous mode [ 1192.662706][T12239] debugfs: 'hsr0' already exists in 'hsr' [ 1192.662737][T12239] Cannot create hsr debugfs directory [ 1196.089768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.235970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.919469][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 270 seconds [ 1196.919519][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 270 seconds [ 1196.919552][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 270 seconds [ 1196.919584][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 270 seconds [ 1197.129023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.304578][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1198.326355][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1198.327622][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1198.328861][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1198.331288][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1200.409436][ T59] Bluetooth: hci1: command tx timeout [ 1200.985144][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1201.014245][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1201.018730][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1201.040244][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1201.041103][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1202.478678][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1202.490503][T11499] Bluetooth: hci1: command tx timeout [ 1202.514880][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1202.529460][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1202.552705][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1202.569631][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1202.761536][ T3190] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.133089][ T5850] Bluetooth: hci5: command tx timeout [ 1204.521228][T12716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1204.593325][ T5850] Bluetooth: hci1: command tx timeout [ 1204.667946][ T5850] Bluetooth: hci0: command tx timeout [ 1204.885002][ T3190] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.239514][ T5850] Bluetooth: hci5: command tx timeout [ 1205.599242][ T3190] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.661309][ T5850] Bluetooth: hci1: command tx timeout [ 1206.732280][ T5850] Bluetooth: hci0: command tx timeout [ 1207.130965][T12657] chnl_net:caif_netlink_parms(): no params data found [ 1207.299499][ T5850] Bluetooth: hci5: command tx timeout [ 1207.328521][ T3190] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.957716][ T5850] Bluetooth: hci0: command tx timeout [ 1209.369440][ T5850] Bluetooth: hci5: command tx timeout [ 1210.692821][T12657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.692993][T12657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.693238][T12657] bridge_slave_0: entered allmulticast mode [ 1210.696954][T12657] bridge_slave_0: entered promiscuous mode [ 1210.970811][ T5850] Bluetooth: hci0: command tx timeout [ 1211.898248][T12657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.898386][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.898637][T12657] bridge_slave_1: entered allmulticast mode [ 1211.932918][T12657] bridge_slave_1: entered promiscuous mode [ 1212.697665][T12657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.776148][T12657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.915951][ T3190] bridge_slave_1: left allmulticast mode [ 1212.915988][ T3190] bridge_slave_1: left promiscuous mode [ 1212.916278][ T3190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.992843][ T3190] bridge_slave_0: left allmulticast mode [ 1212.992870][ T3190] bridge_slave_0: left promiscuous mode [ 1212.993060][ T3190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.077963][ T3190] bridge_slave_1: left allmulticast mode [ 1213.077997][ T3190] bridge_slave_1: left promiscuous mode [ 1213.078244][ T3190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.153187][ T3190] bridge_slave_0: left allmulticast mode [ 1213.153214][ T3190] bridge_slave_0: left promiscuous mode [ 1213.153402][ T3190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.823595][T12822] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1223.823984][T12822] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1223.824641][T12822] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1223.826545][T12822] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1223.826918][T12822] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1223.827291][T12822] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1223.828327][T12822] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1223.828639][T12822] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1223.828911][T12822] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1223.829671][T12822] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1223.829925][T12822] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1223.830245][T12822] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1225.104034][ T3190] bond0 (unregistering): Released all slaves [ 1227.491406][ T11] block nbd0: Possible stuck request ffff8880256fe000: control (read@0,1024B). Runtime 300 seconds [ 1227.491461][ T11] block nbd0: Possible stuck request ffff8880256fe1c0: control (read@1024,1024B). Runtime 300 seconds [ 1227.491497][ T11] block nbd0: Possible stuck request ffff8880256fe380: control (read@2048,1024B). Runtime 300 seconds [ 1227.491541][ T11] block nbd0: Possible stuck request ffff8880256fe540: control (read@3072,1024B). Runtime 300 seconds [ 1228.759716][T12844] input: syz0 as /devices/virtual/input/input20 [ 1230.522152][ T3190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.617655][ T3190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.641387][ T3190] bond0 (unregistering): Released all slaves [ 1232.078258][T12860] affs: No valid root block on device nullb0 [ 1235.930861][ T3190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.030435][ T3190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.065952][ T3190] bond0 (unregistering): Released all slaves [ 1237.554030][T12657] team0: Port device team_slave_0 added [ 1237.709408][ T3190] tipc: Left network mode [ 1237.740327][T12657] team0: Port device team_slave_1 added [ 1239.229973][T12657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.229993][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.230022][T12657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.400853][T12657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.400872][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.400900][T12657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.402068][T12684] chnl_net:caif_netlink_parms(): no params data found [ 1241.032642][T12708] chnl_net:caif_netlink_parms(): no params data found [ 1241.088577][T12657] hsr_slave_0: entered promiscuous mode [ 1241.105640][T12657] hsr_slave_1: entered promiscuous mode [ 1241.106682][T12657] debugfs: 'hsr0' already exists in 'hsr' [ 1241.106707][T12657] Cannot create hsr debugfs directory [ 1243.979996][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.980127][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.980389][T12684] bridge_slave_0: entered allmulticast mode [ 1244.003527][T12684] bridge_slave_0: entered promiscuous mode [ 1244.096160][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.096265][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.142495][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.142606][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.142809][T12684] bridge_slave_1: entered allmulticast mode [ 1244.144772][T12684] bridge_slave_1: entered promiscuous mode [ 1244.699461][T11588] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1244.892718][T11588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.892776][T11588] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1244.892802][T11588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.006702][T11588] usb 1-1: config 0 descriptor?? [ 1245.220500][T11588] usbhid 1-1:0.0: can't add hid device: -71 [ 1245.220610][T11588] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1245.224153][T11588] usb 1-1: USB disconnect, device number 3 [ 1245.358487][T12684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.506519][T12684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.566859][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.567092][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.567328][T12708] bridge_slave_0: entered allmulticast mode [ 1245.638618][T12708] bridge_slave_0: entered promiscuous mode [ 1245.753551][T11588] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1245.814898][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.815050][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.815277][T12708] bridge_slave_1: entered allmulticast mode [ 1245.818210][T12708] bridge_slave_1: entered promiscuous mode [ 1245.920204][T11588] usb 1-1: Using ep0 maxpacket: 32 [ 1245.922714][T11588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.922765][T11588] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1245.922790][T11588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.236743][T11588] usb 1-1: config 0 descriptor?? [ 1247.299367][T11588] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1247.337231][T11588] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1248.736255][T12958] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1248.736282][T12958] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 12958, name: syz.0.1200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1248.736301][T12958] preempt_count: 0, expected: 0 [ 1248.736311][T12958] RCU nest depth: 0, expected: 0 [ 1248.736333][T12958] 1 lock held by syz.0.1200/12958: [ 1248.736347][T12958] #0: ffff888144f18058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 1248.736418][T12958] irq event stamp: 14946 [ 1248.736426][T12958] hardirqs last enabled at (14945): [] _raw_spin_unlock_irq+0x23/0x50 [ 1248.736465][T12958] hardirqs last disabled at (14946): [] dummy_dequeue+0x151/0x480 [ 1248.736498][T12958] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 1248.736531][T12958] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 1248.736559][T12958] CPU: 1 UID: 0 PID: 12958 Comm: syz.0.1200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1248.736583][T12958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1248.736601][T12958] Call Trace: [ 1248.736610][T12958] [ 1248.736620][T12958] dump_stack_lvl+0x189/0x250 [ 1248.736660][T12958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1248.736702][T12958] ? print_lock_name+0xde/0x100 [ 1248.736732][T12958] __might_resched+0x44b/0x5d0 [ 1248.736765][T12958] ? __pfx___might_resched+0x10/0x10 [ 1248.736789][T12958] ? dummy_dequeue+0x164/0x480 [ 1248.736834][T12958] rt_spin_lock+0xc7/0x2c0 [ 1248.736865][T12958] ? __pfx_rt_spin_lock+0x10/0x10 [ 1248.736890][T12958] ? lockdep_hardirqs_on+0x9c/0x150 [ 1248.736926][T12958] ? rcu_is_watching+0x15/0xb0 [ 1248.736965][T12958] dummy_dequeue+0x164/0x480 [ 1248.737001][T12958] ? __pfx_dummy_dequeue+0x10/0x10 [ 1248.737031][T12958] ? __pfx_schedule_timeout+0x10/0x10 [ 1248.737071][T12958] ? __pfx___wait_for_common+0x10/0x10 [ 1248.737120][T12958] usb_ep_dequeue+0x66/0x250 [ 1248.737152][T12958] raw_process_ep_io+0x5a3/0xaf0 [ 1248.737195][T12958] ? __pfx_raw_process_ep_io+0x10/0x10 [ 1248.737243][T12958] ? _copy_from_user+0x94/0xb0 [ 1248.737275][T12958] raw_ioctl+0x22dc/0x3ba0 [ 1248.737308][T12958] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1248.737338][T12958] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1248.737369][T12958] ? do_vfs_ioctl+0xbeb/0x1440 [ 1248.737398][T12958] ? __pfx_raw_ioctl+0x10/0x10 [ 1248.737427][T12958] ? __pfx_smack_log+0x10/0x10 [ 1248.737462][T12958] ? smk_access+0x14c/0x4e0 [ 1248.737503][T12958] ? smk_tskacc+0x2fc/0x370 [ 1248.737543][T12958] ? smack_file_ioctl+0x24d/0x340 [ 1248.737571][T12958] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1248.737609][T12958] ? __fget_files+0x2a/0x420 [ 1248.737638][T12958] ? __fget_files+0x3a6/0x420 [ 1248.737668][T12958] ? __fget_files+0x2a/0x420 [ 1248.737704][T12958] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1248.737730][T12958] ? __pfx_raw_ioctl+0x10/0x10 [ 1248.737758][T12958] __se_sys_ioctl+0xff/0x170 [ 1248.737786][T12958] do_syscall_64+0xfa/0x3b0 [ 1248.737806][T12958] ? lockdep_hardirqs_on+0x9c/0x150 [ 1248.737837][T12958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.737860][T12958] ? clear_bhb_loop+0x60/0xb0 [ 1248.737887][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.737910][T12958] RIP: 0033:0x7f0d0031e7ab [ 1248.737929][T12958] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1248.737948][T12958] RSP: 002b:00007f0cfe584f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.737970][T12958] RAX: ffffffffffffffda RBX: fffffffffffffdca RCX: 00007f0d0031e7ab [ 1248.737987][T12958] RDX: 00007f0cfe584ff0 RSI: 0000000040085507 RDI: 0000000000000006 [ 1248.738002][T12958] RBP: 0000000000000006 R08: 00007f0d00690320 R09: 0000000000000000 [ 1248.738017][T12958] R10: 0000000000000006 R11: 0000000000000246 R12: 0000200000000080 [ 1248.738031][T12958] R13: 0000000000000000 R14: 00007f0d00565fa0 R15: 00007ffe3ac6cc18 [ 1248.738075][T12958] [ 1248.852545][T12684] team0: Port device team_slave_0 added [ 1249.385347][ T44] usb 1-1: USB disconnect, device number 4 [ 1249.390587][ T44] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1249.833736][ T3190] hsr_slave_0: left promiscuous mode [ 1249.929424][ T3190] hsr_slave_1: left promiscuous mode [ 1250.160690][ T3190] hsr_slave_0: left promiscuous mode [ 1250.239897][ T3190] hsr_slave_1: left promiscuous mode [ 1250.242478][ T3190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.242512][ T3190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.311338][ T3190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.549672][ T3190] hsr_slave_0: left promiscuous mode [ 1250.592865][ T3190] hsr_slave_1: left promiscuous mode [ 1250.595326][ T3190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.595359][ T3190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.650834][ T3190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.650869][ T3190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.865111][ T3190] veth1_macvtap: left promiscuous mode [ 1250.865246][ T3190] veth0_macvtap: left promiscuous mode [ 1250.865569][ T3190] veth1_vlan: left promiscuous mode [ 1250.865796][ T3190] veth0_vlan: left promiscuous mode [ 1250.899842][ T3190] veth1_macvtap: left promiscuous mode [ 1250.899972][ T3190] veth0_macvtap: left promiscuous mode [ 1250.900279][ T3190] veth1_vlan: left promiscuous mode [ 1250.900503][ T3190] veth0_vlan: left promiscuous mode [ 1251.694397][ T3190] pim6reg (unregistering): left allmulticast mode [ 1254.331126][ T39] INFO: task udevd:10488 blocked for more than 143 seconds. [ 1254.331156][ T39] Tainted: G W syzkaller #0 [ 1254.331176][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1254.331187][ T39] task:udevd state:D stack:21864 pid:10488 tgid:10488 ppid:5210 task_flags:0x400140 flags:0x00004006 [ 1254.331245][ T39] Call Trace: [ 1254.331254][ T39] [ 1254.331269][ T39] __schedule+0x16f3/0x4c20 [ 1254.331320][ T39] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1254.331366][ T39] ? __pfx___schedule+0x10/0x10 [ 1254.331424][ T39] ? schedule+0x91/0x360 [ 1254.331460][ T39] schedule+0x165/0x360 [ 1254.331494][ T39] io_schedule+0x81/0xe0 [ 1254.331529][ T39] folio_wait_bit_common+0x6b5/0xb90 [ 1254.331565][ T39] ? filemap_get_entry+0xad/0x2f0 [ 1254.331623][ T39] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1254.331660][ T39] ? __pfx_wake_page_function+0x10/0x10 [ 1254.331695][ T39] ? filemap_add_folio+0x1af/0x270 [ 1254.331733][ T39] ? __filemap_get_folio+0x6ed/0xa40 [ 1254.331766][ T39] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1254.331801][ T39] do_read_cache_folio+0x1a4/0x560 [ 1254.331825][ T39] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1254.331857][ T39] read_part_sector+0xb8/0x2b0 [ 1254.331885][ T39] adfspart_check_POWERTEC+0x8c/0xf30 [ 1254.331911][ T39] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1254.331936][ T39] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1254.331960][ T39] ? set_page_refcounted+0xa0/0x1e0 [ 1254.332004][ T39] bdev_disk_changed+0x75f/0x14b0 [ 1254.332050][ T39] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1254.332085][ T39] blkdev_get_whole+0x2e5/0x480 [ 1254.332118][ T39] bdev_open+0x31e/0xcc0 [ 1254.332155][ T39] blkdev_open+0x46c/0x610 [ 1254.332187][ T39] ? __pfx_blkdev_open+0x10/0x10 [ 1254.332215][ T39] do_dentry_open+0x9b1/0x1350 [ 1254.332252][ T39] vfs_open+0x3b/0x350 [ 1254.332270][ T39] ? path_openat+0x2ed9/0x3840 [ 1254.332300][ T39] path_openat+0x2ef1/0x3840 [ 1254.332334][ T39] ? try_to_take_rt_mutex+0x840/0xb00 [ 1254.332401][ T39] ? __pfx_path_openat+0x10/0x10 [ 1254.332428][ T39] ? do_raw_spin_lock+0x121/0x290 [ 1254.332468][ T39] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1254.332500][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1254.332535][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1254.332577][ T39] do_filp_open+0x1fa/0x410 [ 1254.332607][ T39] ? __pfx_do_filp_open+0x10/0x10 [ 1254.332630][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1254.332687][ T39] ? alloc_fd+0x64f/0x6c0 [ 1254.332732][ T39] do_sys_openat2+0x121/0x1c0 [ 1254.332753][ T39] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1254.332778][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 1254.332808][ T39] ? rcu_is_watching+0x15/0xb0 [ 1254.332844][ T39] __x64_sys_openat+0x138/0x170 [ 1254.332873][ T39] do_syscall_64+0xfa/0x3b0 [ 1254.332896][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.332917][ T39] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1254.332940][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1254.332967][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.332989][ T39] RIP: 0033:0x7f600332c407 [ 1254.333008][ T39] RSP: 002b:00007ffca1ef0030 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1254.333031][ T39] RAX: ffffffffffffffda RBX: 00007f600323e880 RCX: 00007f600332c407 [ 1254.333048][ T39] RDX: 00000000000a0800 RSI: 00005572cf254e60 RDI: ffffffffffffff9c [ 1254.333063][ T39] RBP: 00005572cf245910 R08: 0000000000000000 R09: 0000000000000000 [ 1254.333077][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 00005572cf26da40 [ 1254.333091][ T39] R13: 00005572cf253190 R14: 0000000000000000 R15: 00005572cf26da40 [ 1254.333122][ T39] [ 1254.333165][ T39] [ 1254.333165][ T39] Showing all locks held in the system: [ 1254.333178][ T39] 1 lock held by khungtaskd/39: [ 1254.333190][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1254.333246][ T39] 3 locks held by kworker/u8:3/57: [ 1254.333259][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1254.333318][ T39] #1: ffffc9000123fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1254.333375][ T39] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1254.333454][ T39] 4 locks held by kworker/u8:10/3190: [ 1254.333466][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1254.333523][ T39] #1: ffffc9000d867bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1254.333580][ T39] #2: ffffffff8ecc6600 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1254.333640][ T39] #3: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 1254.333704][ T39] 1 lock held by dhcpcd/5505: [ 1254.333717][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 1254.333780][ T39] 2 locks held by getty/5602: [ 1254.333792][ T39] #0: ffff88823bf688a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1254.333855][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1254.333918][ T39] 5 locks held by kworker/u8:22/9613: [ 1254.333932][ T39] 1 lock held by syz.7.561/9654: [ 1254.333944][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1254.334006][ T39] 1 lock held by udevd/10488: [ 1254.334018][ T39] #0: ffff888142bf84c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1254.334072][ T39] 1 lock held by syz-executor/11744: [ 1254.334084][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1254.334147][ T39] 2 locks held by syz-executor/12657: [ 1254.334160][ T39] #0: ffffffff8e43b720 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1254.334223][ T39] #1: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1254.334281][ T39] 1 lock held by syz-executor/12684: [ 1254.334294][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1254.334352][ T39] 1 lock held by syz-executor/12708: [ 1254.334364][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1254.334434][ T39] [ 1254.334439][ T39] ============================================= [ 1254.334439][ T39] [ 1254.334458][ T39] NMI backtrace for cpu 0 [ 1254.334476][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 1254.334506][ T39] Tainted: [W]=WARN [ 1254.334514][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1254.334527][ T39] Call Trace: [ 1254.334535][ T39] [ 1254.334543][ T39] dump_stack_lvl+0x189/0x250 [ 1254.334581][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1254.334614][ T39] ? __pfx__printk+0x10/0x10 [ 1254.334650][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1254.334684][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1254.334715][ T39] ? __pfx__printk+0x10/0x10 [ 1254.334744][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1254.334774][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1254.334806][ T39] watchdog+0xf93/0xfe0 [ 1254.334840][ T39] ? watchdog+0x1de/0xfe0 [ 1254.334875][ T39] kthread+0x70e/0x8a0 [ 1254.334912][ T39] ? __pfx_watchdog+0x10/0x10 [ 1254.334939][ T39] ? __pfx_kthread+0x10/0x10 [ 1254.334977][ T39] ? __pfx_kthread+0x10/0x10 [ 1254.335011][ T39] ret_from_fork+0x439/0x7d0 [ 1254.335044][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1254.335079][ T39] ? __switch_to_asm+0x39/0x70 [ 1254.335098][ T39] ? __switch_to_asm+0x33/0x70 [ 1254.335118][ T39] ? __pfx_kthread+0x10/0x10 [ 1254.335152][ T39] ret_from_fork_asm+0x1a/0x30 [ 1254.335192][ T39] [ 1254.335514][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1254.335556][ C1] NMI backtrace for cpu 1 [ 1254.335575][ C1] CPU: 1 UID: 0 PID: 9613 Comm: kworker/u8:22 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 1254.335601][ C1] Tainted: [W]=WARN [ 1254.335608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1254.335621][ C1] Workqueue: bat_events batadv_dat_purge [ 1254.335647][ C1] RIP: 0010:__lock_acquire+0x893/0xd20 [ 1254.335674][ C1] Code: 83 3d 44 61 81 0d 00 0f 85 36 02 00 00 48 83 7c 24 28 00 0f 84 bc 01 00 00 41 8b 46 f8 25 ff 1f 00 00 48 0f a3 05 5d d4 61 11 <0f> 83 5a 01 00 00 48 69 c0 c8 00 00 00 48 8d 80 f0 e2 9e 92 e9 87 [ 1254.335691][ C1] RSP: 0018:ffffc90004cd7810 EFLAGS: 00000003 [ 1254.335706][ C1] RAX: 000000000000000b RBX: 0000000000000006 RCX: 0000000090ccbc2a [ 1254.335719][ C1] RDX: 000000003e17144e RSI: 00000000f2b7efab RDI: ffff8880318d8000 [ 1254.335732][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ac1a661 [ 1254.335749][ C1] R10: dffffc0000000000 R11: fffffbfff1e3abe7 R12: 0000000027b204e6 [ 1254.335763][ C1] R13: ffff8880318d8b20 R14: ffff8880318d8c10 R15: 3c6e454390ccbc2a [ 1254.335777][ C1] FS: 0000000000000000(0000) GS:ffff8881269bd000(0000) knlGS:0000000000000000 [ 1254.335793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1254.335806][ C1] CR2: 00007f60034787b0 CR3: 0000000036bea000 CR4: 00000000003526f0 [ 1254.335823][ C1] Call Trace: [ 1254.335830][ C1] [ 1254.335843][ C1] ? __batadv_dat_purge+0x131/0x400 [ 1254.335866][ C1] lock_acquire+0x120/0x360 [ 1254.335890][ C1] ? __batadv_dat_purge+0x131/0x400 [ 1254.335920][ C1] rt_spin_lock+0x88/0x2c0 [ 1254.335943][ C1] ? __batadv_dat_purge+0x131/0x400 [ 1254.335965][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1254.335988][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1254.336012][ C1] ? rt_spin_unlock+0x65/0x80 [ 1254.336035][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1254.336065][ C1] __batadv_dat_purge+0x131/0x400 [ 1254.336089][ C1] ? __batadv_dat_purge+0xae/0x400 [ 1254.336111][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1254.336136][ C1] batadv_dat_purge+0x20/0x70 [ 1254.336157][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1254.336179][ C1] process_scheduled_works+0xade/0x17b0 [ 1254.336217][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1254.336249][ C1] worker_thread+0x8a0/0xda0 [ 1254.336286][ C1] kthread+0x70e/0x8a0 [ 1254.336315][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1254.336340][ C1] ? __pfx_kthread+0x10/0x10 [ 1254.336378][ C1] ? __pfx_kthread+0x10/0x10 [ 1254.336407][ C1] ret_from_fork+0x439/0x7d0 [ 1254.336432][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1254.336459][ C1] ? __switch_to_asm+0x39/0x70 [ 1254.336477][ C1] ? __switch_to_asm+0x33/0x70 [ 1254.336494][ C1] ? __pfx_kthread+0x10/0x10 [ 1254.336522][ C1] ret_from_fork_asm+0x1a/0x30 [ 1254.336548][ C1] [ 1254.338171][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1254.338199][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 1254.338231][ T39] Tainted: [W]=WARN [ 1254.338238][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1254.338252][ T39] Call Trace: [ 1254.338260][ T39] [ 1254.338270][ T39] dump_stack_lvl+0x99/0x250 [ 1254.338308][ T39] ? __asan_memcpy+0x40/0x70 [ 1254.338333][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1254.338364][ T39] ? __pfx__printk+0x10/0x10 [ 1254.338396][ T39] vpanic+0x281/0x750 [ 1254.338425][ T39] ? __pfx_vpanic+0x10/0x10 [ 1254.338450][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1254.338472][ T39] ? preempt_schedule+0xae/0xc0 [ 1254.338507][ T39] ? preempt_schedule_common+0x83/0xd0 [ 1254.338546][ T39] panic+0xb9/0xc0 [ 1254.338578][ T39] ? __pfx_panic+0x10/0x10 [ 1254.338621][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 1254.338655][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1254.338687][ T39] watchdog+0xfd2/0xfe0 [ 1254.338722][ T39] ? watchdog+0x1de/0xfe0 [ 1254.338758][ T39] kthread+0x70e/0x8a0 [ 1254.338796][ T39] ? __pfx_watchdog+0x10/0x10 [ 1254.338823][ T39] ? __pfx_kthread+0x10/0x10 [ 1254.338863][ T39] ? __pfx_kthread+0x10/0x10 [ 1254.338898][ T39] ret_from_fork+0x439/0x7d0 [ 1254.338931][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1254.338967][ T39] ? __switch_to_asm+0x39/0x70 [ 1254.338987][ T39] ? __switch_to_asm+0x33/0x70 [ 1254.339008][ T39] ? __pfx_kthread+0x10/0x10 [ 1254.339042][ T39] ret_from_fork_asm+0x1a/0x30 [ 1254.339082][ T39] [ 1254.339253][ T39] Kernel Offset: disabled