last executing test programs: 6.061785864s ago: executing program 1 (id=91): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb000800103aff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) 5.644102522s ago: executing program 0 (id=94): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40404, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x7f, 0xe) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x14, 0x30, 0xffffffffffffffff, 0xcf0f3000) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) 5.643763773s ago: executing program 3 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x3c}}, 0x0) 3.455490344s ago: executing program 1 (id=104): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050100) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xfdff) write$tun(r4, &(0x7f0000000880)=ANY=[], 0xc4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) connect$tipc(r7, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18, 0x20000001}], 0x1, 0x200448f1) 3.455350474s ago: executing program 2 (id=105): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x100000000000000, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 3.378957846s ago: executing program 3 (id=106): r0 = fsopen(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x807ffd, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x10001, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0xf6e0, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce4, 0x1ff, 0xffff, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x2, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 1.940068243s ago: executing program 0 (id=107): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 1.920305454s ago: executing program 1 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) 1.56858209s ago: executing program 0 (id=111): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40404, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x7f, 0xe) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x14, 0x30, 0xffffffffffffffff, 0xcf0f3000) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) 969.351262ms ago: executing program 3 (id=112): openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400240, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x11, 0xc9}}}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x3c}}, 0x0) 293.304745ms ago: executing program 0 (id=113): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xe72, 0x4b, 0x809}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) write$uinput_user_dev(r2, 0x0, 0x0) 292.582195ms ago: executing program 1 (id=121): openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400240, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x11, 0xc9}}}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x3c}}, 0x0) 291.867005ms ago: executing program 3 (id=122): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x3c}}, 0x0) 0s ago: executing program 0 (id=115): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x90000002}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000100)=""/177, 0x39) pselect6(0x40, &(0x7f0000000000)={0x4, 0x8000000000000001, 0x6e11, 0xfffffffffffffffc, 0x22, 0x100000001, 0xe, 0x9}, &(0x7f0000000080)={0x4, 0x3, 0x0, 0x5, 0x7, 0xe5, 0x4, 0x3}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. syzkaller login: [ 82.458563][ T5779] cgroup: Unknown subsys name 'net' [ 82.600595][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.317471][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.041739][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.051127][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.059115][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.061436][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.068123][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.074499][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.081884][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.090138][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.102987][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.103752][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.121460][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.123063][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.130310][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.137213][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.151116][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.163399][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.179656][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.187628][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.204243][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.217787][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.226432][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.234482][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.243874][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.243909][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.790635][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 86.833438][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.961115][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 86.977914][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.016385][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.024112][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.031990][ T5794] bridge_slave_0: entered allmulticast mode [ 87.039244][ T5794] bridge_slave_0: entered promiscuous mode [ 87.090192][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.097467][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.104925][ T5794] bridge_slave_1: entered allmulticast mode [ 87.112367][ T5794] bridge_slave_1: entered promiscuous mode [ 87.144678][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.152155][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.159675][ T5789] bridge_slave_0: entered allmulticast mode [ 87.167259][ T5789] bridge_slave_0: entered promiscuous mode [ 87.236494][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.248110][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.256735][ T5789] bridge_slave_1: entered allmulticast mode [ 87.264336][ T5789] bridge_slave_1: entered promiscuous mode [ 87.276596][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.293553][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.484341][ T5794] team0: Port device team_slave_0 added [ 87.490792][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.498405][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.506745][ T5793] bridge_slave_0: entered allmulticast mode [ 87.514428][ T5793] bridge_slave_0: entered promiscuous mode [ 87.523809][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.530976][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.538302][ T5793] bridge_slave_1: entered allmulticast mode [ 87.545875][ T5793] bridge_slave_1: entered promiscuous mode [ 87.601752][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.614839][ T5794] team0: Port device team_slave_1 added [ 87.626698][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.634992][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.642475][ T5790] bridge_slave_0: entered allmulticast mode [ 87.650006][ T5790] bridge_slave_0: entered promiscuous mode [ 87.659021][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.667040][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.674515][ T5790] bridge_slave_1: entered allmulticast mode [ 87.682049][ T5790] bridge_slave_1: entered promiscuous mode [ 87.748828][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.838244][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.848481][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.855889][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.881917][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.895614][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.903813][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.931298][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.957274][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.968964][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.013376][ T5789] team0: Port device team_slave_0 added [ 88.023215][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.050378][ T5793] team0: Port device team_slave_0 added [ 88.059109][ T5789] team0: Port device team_slave_1 added [ 88.095769][ T5793] team0: Port device team_slave_1 added [ 88.143404][ T5790] team0: Port device team_slave_0 added [ 88.164662][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.171723][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.198559][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.222139][ T5803] Bluetooth: hci2: command tx timeout [ 88.239233][ T5790] team0: Port device team_slave_1 added [ 88.245831][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.253153][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.279228][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.297349][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.304496][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.311538][ T5802] Bluetooth: hci0: command tx timeout [ 88.330498][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.334438][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.336863][ T5105] Bluetooth: hci1: command tx timeout [ 88.346804][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.359542][ T5803] Bluetooth: hci3: command tx timeout [ 88.392048][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.413331][ T5794] hsr_slave_0: entered promiscuous mode [ 88.421955][ T5794] hsr_slave_1: entered promiscuous mode [ 88.463251][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.470248][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.496654][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.528358][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.535413][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.561635][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.638489][ T5793] hsr_slave_0: entered promiscuous mode [ 88.645879][ T5793] hsr_slave_1: entered promiscuous mode [ 88.652634][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.660532][ T5793] Cannot create hsr debugfs directory [ 88.701133][ T5789] hsr_slave_0: entered promiscuous mode [ 88.707880][ T5789] hsr_slave_1: entered promiscuous mode [ 88.714731][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.722937][ T5789] Cannot create hsr debugfs directory [ 88.759393][ T5790] hsr_slave_0: entered promiscuous mode [ 88.766493][ T5790] hsr_slave_1: entered promiscuous mode [ 88.773214][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.780808][ T5790] Cannot create hsr debugfs directory [ 89.223332][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.238082][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.252850][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.263919][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.356142][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.370195][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.394881][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.406138][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.492364][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.509689][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.524131][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.540980][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.627173][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.658893][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.679273][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.690180][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.706084][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.765635][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.778749][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.786307][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.847287][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.854538][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.915392][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.996237][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.015317][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.050276][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.057520][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.090979][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.105579][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.112954][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.141020][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.174055][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.181298][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.215686][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.226346][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.233628][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.289986][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.297303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.314015][ T5803] Bluetooth: hci2: command tx timeout [ 90.325469][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.332846][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.461517][ T5803] Bluetooth: hci0: command tx timeout [ 90.467001][ T5803] Bluetooth: hci3: command tx timeout [ 90.472045][ T5105] Bluetooth: hci1: command tx timeout [ 90.528471][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.629216][ T5794] veth0_vlan: entered promiscuous mode [ 90.665125][ T5794] veth1_vlan: entered promiscuous mode [ 90.736851][ T5794] veth0_macvtap: entered promiscuous mode [ 90.768251][ T5794] veth1_macvtap: entered promiscuous mode [ 90.815848][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.872991][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.905896][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.932392][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.944810][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.958000][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.015457][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.085916][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.137814][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.218305][ T5793] veth0_vlan: entered promiscuous mode [ 91.238531][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.258268][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.302909][ T5793] veth1_vlan: entered promiscuous mode [ 91.323079][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.329648][ T5790] veth0_vlan: entered promiscuous mode [ 91.347580][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.377536][ T5789] veth0_vlan: entered promiscuous mode [ 91.386521][ T5790] veth1_vlan: entered promiscuous mode [ 91.447117][ T5789] veth1_vlan: entered promiscuous mode [ 91.479801][ T5793] veth0_macvtap: entered promiscuous mode [ 91.524006][ T5790] veth0_macvtap: entered promiscuous mode [ 91.544026][ T5793] veth1_macvtap: entered promiscuous mode [ 91.569624][ T5790] veth1_macvtap: entered promiscuous mode [ 91.637230][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.650992][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.664770][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.677365][ T5885] 9pnet_virtio: no channels available for device syz [ 91.693551][ T5883] kernel write not supported for file /uhid (pid: 5883 comm: kworker/1:5) [ 91.699193][ T5789] veth0_macvtap: entered promiscuous mode [ 91.717801][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.728741][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.739202][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.752726][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.765555][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.785062][ T5789] veth1_macvtap: entered promiscuous mode [ 91.795250][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.806598][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.818742][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.830155][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.842053][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.852563][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.859180][ T5885] overlayfs: unescaped trailing colons in lowerdir mount option. [ 91.863753][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.883853][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.907433][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.917149][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926624][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.937060][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.963296][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.976926][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.012371][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.041894][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.130478][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.147171][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.158369][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.174303][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.184702][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.195277][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.207198][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.218757][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.229739][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.240037][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.250709][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.260868][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.273990][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.290392][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.312679][ T9] cfg80211: failed to load regulatory.db [ 92.375915][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.386326][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.395711][ T5802] Bluetooth: hci2: command tx timeout [ 92.407111][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.416419][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.527635][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.539359][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.547361][ T5802] Bluetooth: hci1: command tx timeout [ 92.553551][ T5105] Bluetooth: hci3: command tx timeout [ 92.557851][ T5803] Bluetooth: hci0: command tx timeout [ 92.747391][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.748897][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.757859][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.786768][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.883807][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.935625][ T5893] Zero length message leads to an empty skb [ 92.941614][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.392061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.406147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.472535][ T5803] Bluetooth: hci2: command tx timeout [ 94.499970][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.512169][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.577589][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.586429][ T5893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.592776][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.607517][ T5893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.621413][ T5803] Bluetooth: hci0: command tx timeout [ 94.621428][ T5802] Bluetooth: hci3: command tx timeout [ 94.856197][ T5903] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.884455][ T5893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.974495][ T5905] comedi comedi0: Minor 3 could not be opened [ 95.082752][ T5893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.090560][ T5893] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.101738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.334377][ T5893] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.387190][ T5893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.399240][ T5893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.422055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.603375][ T5893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.630589][ T5893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.641630][ T5893] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.655309][ T5893] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.743854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.006715][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.007141][ T5914] lo: entered promiscuous mode [ 96.007382][ T5914] lo: entered allmulticast mode [ 96.019902][ T5914] tunl0: entered promiscuous mode [ 96.019975][ T5914] tunl0: entered allmulticast mode [ 96.030822][ T5914] gre0: entered promiscuous mode [ 96.031108][ T5914] gre0: entered allmulticast mode [ 96.044969][ T5914] gretap0: entered promiscuous mode [ 96.045228][ T5914] gretap0: entered allmulticast mode [ 96.071550][ T5914] erspan0: entered promiscuous mode [ 96.072101][ T5914] erspan0: entered allmulticast mode [ 96.091968][ T5914] ip_vti0: entered promiscuous mode [ 96.091990][ T5914] ip_vti0: entered allmulticast mode [ 96.272378][ T5914] ip6_vti0: entered promiscuous mode [ 96.272509][ T5914] ip6_vti0: entered allmulticast mode [ 96.282822][ T5914] sit0: entered promiscuous mode [ 96.283241][ T5914] sit0: entered allmulticast mode [ 96.306625][ T5914] ip6tnl0: entered promiscuous mode [ 96.307224][ T5914] ip6tnl0: entered allmulticast mode [ 96.329752][ T5914] ip6gre0: entered promiscuous mode [ 96.329852][ T5914] ip6gre0: entered allmulticast mode [ 96.339888][ T5914] syz_tun: entered promiscuous mode [ 96.339910][ T5914] syz_tun: entered allmulticast mode [ 96.351801][ T5914] ip6gretap0: entered promiscuous mode [ 96.352012][ T5914] ip6gretap0: entered allmulticast mode [ 96.369878][ T5914] bridge0: entered promiscuous mode [ 96.370025][ T5914] bridge0: entered allmulticast mode [ 96.401910][ T5914] vcan0: entered promiscuous mode [ 96.402008][ T5914] vcan0: entered allmulticast mode [ 96.416302][ T5914] bond0: entered promiscuous mode [ 96.416536][ T5914] bond_slave_0: entered promiscuous mode [ 96.422739][ T5914] bond_slave_1: entered promiscuous mode [ 96.429256][ T5914] bond0: entered allmulticast mode [ 96.429515][ T5914] bond_slave_0: entered allmulticast mode [ 96.429709][ T5914] bond_slave_1: entered allmulticast mode [ 96.462565][ T5914] team0: entered promiscuous mode [ 96.462636][ T5914] team_slave_0: entered promiscuous mode [ 96.464731][ T5914] team_slave_1: entered promiscuous mode [ 96.466875][ T5914] team0: entered allmulticast mode [ 96.466998][ T5914] team_slave_0: entered allmulticast mode [ 96.467128][ T5914] team_slave_1: entered allmulticast mode [ 96.485258][ T5914] dummy0: entered promiscuous mode [ 96.485489][ T5914] dummy0: entered allmulticast mode [ 96.501911][ T5914] nlmon0: entered promiscuous mode [ 96.502080][ T5914] nlmon0: entered allmulticast mode [ 96.621741][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.709463][ T5914] caif0: entered promiscuous mode [ 96.709559][ T5914] caif0: entered allmulticast mode [ 96.709959][ T5914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.951870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.261812][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.596027][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.661505][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.839667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.042206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.680479][ T5927] input: syz0 as /devices/virtual/input/input5 [ 98.703038][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.850862][ T5930] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 98.891580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.065992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.029584][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.036053][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.047908][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.254318][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.343767][ T5804] udevd[5804]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 101.737993][ T5937] tipc: Enabling of bearer rejected, failed to enable media [ 101.992664][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 102.055277][ T5949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.128744][ T5802] Bluetooth: hci3: unexpected event for opcode 0x200c [ 102.141276][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.141296][ T5105] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.233338][ T5953] syz.3.18[5953]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 103.462018][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 103.550233][ T5964] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.621064][ T27] libceph: connect (1)[c::]:6789 error -101 [ 103.645176][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.667591][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 103.695547][ T5969] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 103.768671][ T5961] ceph: No mds server is up or the cluster is laggy [ 103.869150][ T5969] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.915725][ T5973] lo: entered promiscuous mode [ 103.927931][ T5973] lo: entered allmulticast mode [ 103.962995][ T5973] tunl0: entered promiscuous mode [ 104.006681][ T5973] tunl0: entered allmulticast mode [ 104.020721][ T5973] gre0: entered promiscuous mode [ 104.029090][ T5973] gre0: entered allmulticast mode [ 104.059284][ T5973] gretap0: entered promiscuous mode [ 104.078648][ T5973] gretap0: entered allmulticast mode [ 104.106884][ T5973] erspan0: entered promiscuous mode [ 104.121615][ T5973] erspan0: entered allmulticast mode [ 104.134193][ T5973] ip_vti0: entered promiscuous mode [ 104.150254][ T5975] fuse: Bad value for 'fd' [ 104.151565][ T5973] ip_vti0: entered allmulticast mode [ 104.168407][ T5973] ip6_vti0: entered promiscuous mode [ 104.175061][ T5973] ip6_vti0: entered allmulticast mode [ 106.000718][ T5973] sit0: entered promiscuous mode [ 106.011398][ T5973] sit0: entered allmulticast mode [ 106.027594][ T5973] ip6tnl0: entered promiscuous mode [ 106.037948][ T5973] ip6tnl0: entered allmulticast mode [ 106.232358][ T5973] ip6gre0: entered promiscuous mode [ 106.305000][ T5973] ip6gre0: entered allmulticast mode [ 106.349013][ T5973] syz_tun: entered promiscuous mode [ 106.370629][ T5973] syz_tun: entered allmulticast mode [ 106.451520][ T5973] ip6gretap0: entered promiscuous mode [ 106.613870][ T5973] ip6gretap0: entered allmulticast mode [ 106.621951][ T5973] bridge0: entered promiscuous mode [ 106.627480][ T5973] bridge0: entered allmulticast mode [ 106.635128][ T5973] vcan0: entered promiscuous mode [ 106.640229][ T5973] vcan0: entered allmulticast mode [ 106.687556][ T5973] bond0: entered promiscuous mode [ 106.701847][ T5973] bond_slave_0: entered promiscuous mode [ 106.739498][ T5973] bond_slave_1: entered promiscuous mode [ 106.747949][ T5973] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 106.755636][ T5973] bond0: entered allmulticast mode [ 106.760995][ T5973] bond_slave_0: entered allmulticast mode [ 106.768055][ T5973] bond_slave_1: entered allmulticast mode [ 106.778139][ T5973] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 106.788098][ T5973] team0: entered promiscuous mode [ 106.838994][ T5973] team_slave_0: entered promiscuous mode [ 106.851263][ T5973] team_slave_1: entered promiscuous mode [ 106.860505][ T5973] team0: entered allmulticast mode [ 106.867445][ T5973] team_slave_0: entered allmulticast mode [ 106.879083][ T5973] team_slave_1: entered allmulticast mode [ 106.889667][ T5973] dummy0: entered promiscuous mode [ 106.899070][ T5973] dummy0: entered allmulticast mode [ 106.908964][ T5973] nlmon0: entered promiscuous mode [ 106.917836][ T5973] nlmon0: entered allmulticast mode [ 106.925534][ T5973] caif0: entered promiscuous mode [ 106.931045][ T5973] caif0: entered allmulticast mode [ 106.944068][ T5973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.223260][ T6018] overlay: ./bus is not a directory [ 108.474728][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 111.204156][ T9] libceph: connect (1)[c::]:6789 error -101 [ 111.249538][ T6053] fuse: Bad value for 'fd' [ 111.261683][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 111.531650][ T6047] ceph: No mds server is up or the cluster is laggy [ 111.543652][ T8] libceph: connect (1)[c::]:6789 error -101 [ 113.115902][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 113.433199][ T6063] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 113.498032][ T6063] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 113.572183][ T6065] lo: entered promiscuous mode [ 113.600607][ T6065] lo: entered allmulticast mode [ 114.662442][ T6065] tunl0: entered promiscuous mode [ 114.667565][ T6065] tunl0: entered allmulticast mode [ 114.673677][ T6065] gre0: entered promiscuous mode [ 114.678796][ T6065] gre0: entered allmulticast mode [ 114.684912][ T6065] gretap0: entered promiscuous mode [ 114.690359][ T6065] gretap0: entered allmulticast mode [ 114.697066][ T6065] erspan0: entered promiscuous mode [ 114.702436][ T6065] erspan0: entered allmulticast mode [ 114.708998][ T6065] ip_vti0: entered promiscuous mode [ 114.714359][ T6065] ip_vti0: entered allmulticast mode [ 114.720606][ T6065] ip6_vti0: entered promiscuous mode [ 114.726442][ T6065] ip6_vti0: entered allmulticast mode [ 114.733870][ T6065] sit0: entered promiscuous mode [ 114.738904][ T6065] sit0: entered allmulticast mode [ 114.745152][ T6065] ip6tnl0: entered promiscuous mode [ 114.750401][ T6065] ip6tnl0: entered allmulticast mode [ 114.756627][ T6065] ip6gre0: entered promiscuous mode [ 114.762180][ T6065] ip6gre0: entered allmulticast mode [ 114.768337][ T6065] syz_tun: entered promiscuous mode [ 114.773666][ T6065] syz_tun: entered allmulticast mode [ 114.780318][ T6065] ip6gretap0: entered promiscuous mode [ 114.786025][ T6065] ip6gretap0: entered allmulticast mode [ 114.864504][ T6065] bridge0: entered promiscuous mode [ 114.869907][ T6065] bridge0: entered allmulticast mode [ 114.878162][ T6065] vcan0: entered promiscuous mode [ 114.884933][ T6065] vcan0: entered allmulticast mode [ 114.890709][ T6065] bond0: entered promiscuous mode [ 114.897266][ T6065] bond_slave_0: entered promiscuous mode [ 114.908561][ T6065] bond_slave_1: entered promiscuous mode [ 114.915387][ T6065] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 114.923752][ T6065] bond0: entered allmulticast mode [ 114.929163][ T6065] bond_slave_0: entered allmulticast mode [ 114.949901][ T6065] bond_slave_1: entered allmulticast mode [ 114.957329][ T6065] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 114.967241][ T6065] team0: entered promiscuous mode [ 114.972681][ T6065] team_slave_0: entered promiscuous mode [ 114.978717][ T6065] team_slave_1: entered promiscuous mode [ 114.985004][ T6065] team0: entered allmulticast mode [ 114.990454][ T6065] team_slave_0: entered allmulticast mode [ 114.996718][ T6065] team_slave_1: entered allmulticast mode [ 115.006104][ T6065] dummy0: entered promiscuous mode [ 115.011594][ T6065] dummy0: entered allmulticast mode [ 115.017926][ T6065] nlmon0: entered promiscuous mode [ 115.029330][ T6065] nlmon0: entered allmulticast mode [ 115.047129][ T6065] caif0: entered promiscuous mode [ 115.052524][ T6065] caif0: entered allmulticast mode [ 115.058793][ T6065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.074887][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 115.085162][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 118.592869][ T6111] fuse: Bad value for 'fd' [ 120.084915][ T6113] sched: RT throttling activated [ 120.840373][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 122.136879][ T8] libceph: connect (1)[c::]:6789 error -101 [ 122.145422][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 122.315207][ T6130] ceph: No mds server is up or the cluster is laggy [ 123.169961][ T6146] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 123.420464][ T6146] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 123.446206][ T6146] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 123.455018][ T6146] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 123.498392][ T6153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.253263][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 125.267960][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 125.397314][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 125.424349][ T6173] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.447219][ T9] libceph: connect (1)[c::]:6789 error -101 [ 125.453747][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 125.517698][ T5803] Bluetooth: hci0: unexpected event for opcode 0x200c [ 125.562526][ T6172] ceph: No mds server is up or the cluster is laggy [ 126.778612][ T6191] tipc: Enabling of bearer rejected, failed to enable media [ 127.915739][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 129.271657][ T6218] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.614573][ T23] libceph: connect (1)[c::]:6789 error -101 [ 129.637888][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 129.903671][ T27] libceph: connect (1)[c::]:6789 error -101 [ 129.919465][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 130.043735][ T6230] input: syz0 as /devices/virtual/input/input6 [ 130.073796][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 130.107855][ T6231] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.199508][ T5803] Bluetooth: hci1: unexpected event for opcode 0x200c [ 130.365841][ T6223] ceph: No mds server is up or the cluster is laggy [ 130.486594][ T6237] tipc: Enabling of bearer rejected, failed to enable media [ 133.024360][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 133.270714][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.293388][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.490589][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.551617][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.851762][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 133.868481][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 134.185981][ T6265] ceph: No mds server is up or the cluster is laggy [ 134.657647][ T6281] input: syz0 as /devices/virtual/input/input7 [ 134.917852][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 137.272496][ T23] libceph: connect (1)[c::]:6789 error -101 [ 137.278563][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 137.572732][ T27] libceph: connect (1)[c::]:6789 error -101 [ 137.579131][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 137.978188][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 138.055073][ T6308] ceph: No mds server is up or the cluster is laggy [ 138.091706][ T27] libceph: connect (1)[c::]:6789 error -101 [ 138.097907][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 138.670846][ T27] libceph: connect (1)[c::]:6789 error -101 [ 138.681353][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 138.713493][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 138.752353][ T6330] input: syz0 as /devices/virtual/input/input8 [ 138.862885][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 138.961879][ T23] libceph: connect (1)[c::]:6789 error -101 [ 138.977236][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 139.343258][ T5803] ------------[ cut here ]------------ [ 139.348969][ T5803] WARNING: CPU: 1 PID: 5803 at net/bluetooth/hci_conn.c:569 hci_conn_timeout+0xf9/0x290 [ 139.358877][ T5803] Modules linked in: [ 139.362905][ T5803] CPU: 1 PID: 5803 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 139.370490][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.380756][ T5803] Workqueue: hci1 hci_conn_timeout [ 139.386000][ T5803] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 139.391693][ T5803] Code: f8 48 89 df e8 18 ba 08 00 eb 07 e8 01 60 14 f8 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ec e0 fe ff e8 e7 5f 14 f8 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 139.412249][ T5803] RSP: 0018:ffffc9000461fb90 EFLAGS: 00010293 [ 139.418660][ T5803] RAX: ffffffff89712fb9 RBX: ffff888079a34000 RCX: ffff88802fa98000 [ 139.427406][ T5803] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 [ 139.435504][ T5803] RBP: 00000000fffffffe R08: ffff888079a34013 R09: 1ffff1100f346802 [ 139.443781][ T5803] R10: dffffc0000000000 R11: ffffed100f346803 R12: dffffc0000000000 [ 139.452013][ T5803] R13: dffffc0000000000 R14: ffff888079a34350 R15: ffff888079a34010 [ 139.460024][ T5803] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 139.469240][ T5803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.476264][ T5803] CR2: 00007fc291bd4f98 CR3: 0000000063286000 CR4: 00000000003506e0 [ 139.483355][ T6323] ceph: No mds server is up or the cluster is laggy [ 139.484354][ T5803] Call Trace: [ 139.494371][ T5803] [ 139.497357][ T5803] ? process_scheduled_works+0x957/0x15b0 [ 139.503280][ T5803] process_scheduled_works+0xa45/0x15b0 [ 139.508959][ T5803] ? assign_work+0x400/0x400 [ 139.514445][ T5803] ? assign_work+0x39e/0x400 [ 139.519149][ T5803] worker_thread+0xa55/0xfc0 [ 139.524111][ T5803] kthread+0x2fa/0x390 [ 139.528299][ T5803] ? pr_cont_work+0x560/0x560 [ 139.533156][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 139.537806][ T5803] ret_from_fork+0x48/0x80 [ 139.542351][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 139.546998][ T5803] ret_from_fork_asm+0x11/0x20 [ 139.551946][ T5803] [ 139.555002][ T5803] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.562318][ T5803] CPU: 1 PID: 5803 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 139.569896][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.580006][ T5803] Workqueue: hci1 hci_conn_timeout [ 139.585175][ T5803] Call Trace: [ 139.588469][ T5803] [ 139.591429][ T5803] dump_stack_lvl+0x16c/0x230 [ 139.596148][ T5803] ? show_regs_print_info+0x20/0x20 [ 139.601362][ T5803] ? load_image+0x3b0/0x3b0 [ 139.605882][ T5803] panic+0x2c0/0x710 [ 139.609799][ T5803] ? bpf_jit_dump+0xd0/0xd0 [ 139.614335][ T5803] ? ret_from_fork_asm+0x11/0x20 [ 139.619409][ T5803] __warn+0x2e0/0x470 [ 139.623428][ T5803] ? hci_conn_timeout+0xf9/0x290 [ 139.628398][ T5803] ? hci_conn_timeout+0xf9/0x290 [ 139.633467][ T5803] report_bug+0x2be/0x4f0 [ 139.637820][ T5803] ? hci_conn_timeout+0xf9/0x290 [ 139.642976][ T5803] ? hci_conn_timeout+0xf9/0x290 [ 139.648043][ T5803] ? hci_conn_timeout+0xfb/0x290 [ 139.653019][ T5803] handle_bug+0xcf/0x120 [ 139.657284][ T5803] exc_invalid_op+0x1a/0x50 [ 139.661811][ T5803] asm_exc_invalid_op+0x1a/0x20 [ 139.666694][ T5803] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 139.672263][ T5803] Code: f8 48 89 df e8 18 ba 08 00 eb 07 e8 01 60 14 f8 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ec e0 fe ff e8 e7 5f 14 f8 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 139.691911][ T5803] RSP: 0018:ffffc9000461fb90 EFLAGS: 00010293 [ 139.697997][ T5803] RAX: ffffffff89712fb9 RBX: ffff888079a34000 RCX: ffff88802fa98000 [ 139.706006][ T5803] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 [ 139.714171][ T5803] RBP: 00000000fffffffe R08: ffff888079a34013 R09: 1ffff1100f346802 [ 139.722160][ T5803] R10: dffffc0000000000 R11: ffffed100f346803 R12: dffffc0000000000 [ 139.730589][ T5803] R13: dffffc0000000000 R14: ffff888079a34350 R15: ffff888079a34010 [ 139.738799][ T5803] ? hci_conn_timeout+0xf9/0x290 [ 139.743777][ T5803] ? process_scheduled_works+0x957/0x15b0 [ 139.749613][ T5803] process_scheduled_works+0xa45/0x15b0 [ 139.755308][ T5803] ? assign_work+0x400/0x400 [ 139.760019][ T5803] ? assign_work+0x39e/0x400 [ 139.764644][ T5803] worker_thread+0xa55/0xfc0 [ 139.769290][ T5803] kthread+0x2fa/0x390 [ 139.773380][ T5803] ? pr_cont_work+0x560/0x560 [ 139.778075][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 139.782684][ T5803] ret_from_fork+0x48/0x80 [ 139.787120][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 139.791720][ T5803] ret_from_fork_asm+0x11/0x20 [ 139.796604][ T5803] [ 139.799993][ T5803] Kernel Offset: disabled [ 139.804390][ T5803] Rebooting in 86400 seconds..