last executing test programs: 2.22219708s ago: executing program 0 (id=146): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @loopback, 0x10000}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r1, 0x4}}, 0x48) 2.171828489s ago: executing program 0 (id=148): socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 1.255545919s ago: executing program 0 (id=163): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)) 1.171005503s ago: executing program 0 (id=168): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 1.122254563s ago: executing program 3 (id=170): setns(0xc9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000600)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 1.05207442s ago: executing program 3 (id=171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000500000000000000000000000000000000000000000000000400"], 0xfc}}, 0x0) 1.051821948s ago: executing program 0 (id=172): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 1.042191193s ago: executing program 3 (id=174): r0 = syz_open_dev$dri(&(0x7f0000001840), 0x1, 0xa0000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000001980)={0x8}) 983.579199ms ago: executing program 0 (id=177): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000300)={0x20, 0x13, 0x4, "0d718785"}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 965.033441ms ago: executing program 3 (id=178): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) 933.286958ms ago: executing program 3 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 849.091588ms ago: executing program 1 (id=182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@loopback, 0x4e20, 0x3, 0x4e23, 0x4, 0xa, 0x20, 0x0, 0x33}, {0x6, 0x81, 0x80000000, 0x7, 0x6, 0x2ada716d, 0x0, 0xd3}, {0xc, 0x0, 0x6, 0x10}, 0x9, 0x6e6bb8, 0x3, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d2, 0x32}, 0xa, @in6=@local, 0x3505, 0x2, 0x3, 0xa, 0x4, 0xfffffff0, 0x9}}, 0xe8) 804.108464ms ago: executing program 1 (id=185): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000)="28c657de", 0x4) 739.988757ms ago: executing program 3 (id=186): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 572.12808ms ago: executing program 2 (id=196): unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000013c0)=[@in={0x2, 0x4e1e, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 545.360761ms ago: executing program 2 (id=197): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x2}) 508.818377ms ago: executing program 2 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x90000915, &(0x7f0000000420)) 444.049105ms ago: executing program 2 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000001c0)="01", 0x36, 0x7ff) 401.925369ms ago: executing program 2 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x801, 0x70bd2a, 0x25df9b00, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {0x0, 0xfff1}, {0x3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) 300.871622ms ago: executing program 4 (id=201): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bf652bbd7000fbdbdf250d0000000c00060003000000000000000c000600020000000200000008000d0000000000080001000300000008000300", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4004801}, 0x48044) 232.072266ms ago: executing program 4 (id=202): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) 231.884427ms ago: executing program 1 (id=203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}}, 0x0) 229.174486ms ago: executing program 2 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902"], 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240), 0x6000) 209.905812ms ago: executing program 1 (id=205): getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000240012800b00010067656e65766500001400028005000d000200000005000c00fd00000008000a00", @ANYRES32, @ANYBLOB="ec6b578694d31a6fe5c8f14c1f04f1349aa7b53d7c0d2406cd3bcab3d9cfa27166853938bdca9d86243f202d49cb8fb8937737fb19e063bdbe65999df3c797b276a30ad78b572a4ee053f52a5987a7121b8683caa64b1b9ff5939341363e0af1cdc07b92209defc90285d22f426be5b5ba0b43597f4c69aeb5d402236f6f2601748715b09303d57a58460000001c1e081bb9ce059232611eb9683df08554816811b441e5c874d3762f4d58db60088eb109b12ce12b017df64f04f84e5c7d018e2c30a20661dbe011f90b43a5d45efb0e86a02845c0e44df6aac94d9e76adc114fd879df64802a5f03396ea788ca80e69b31577daf3e491876127df875cb4db03008e1735a4a96043b73ed8f0a3468c8d23ffd2cb4bbf452057790bfc60408c8478e366b880673281acb2169f84eddbb1b59d059e49614f0fc85ecc29308badcbebb98cf4c00fa09d4580ef5aef0e5d863b4b8cd2c6e39f0ed6e5dd65d77a9e137ce5f7b454e0915167d0a4a85e72db932455b4f06bfb13b6b012bd796ea746775771904038010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 182.705745ms ago: executing program 4 (id=206): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="0000000100", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0xfffc}}}}}}}, 0x0) 75.972115ms ago: executing program 1 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x1, 0x3, 0x9, 0x3}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0x70}}, 0x0) 75.664551ms ago: executing program 4 (id=208): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x6, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x250d17f4}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000002, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40806685, &(0x7f0000000000)) 75.456788ms ago: executing program 1 (id=209): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000010000)="000002000000000080", 0x9) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 25.506419ms ago: executing program 4 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x80) 0s ago: executing program 4 (id=211): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0xb0090199) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 28.603516][ T4700] cgroup: Unknown subsys name 'net' [ 28.734728][ T4700] cgroup: Unknown subsys name 'cpuset' [ 28.736942][ T4700] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.904139][ T4700] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.744950][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.746154][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.746323][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.746653][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.746870][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.753156][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.754633][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.758683][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.761981][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.764080][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.774062][ T4714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.777385][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.777756][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.778199][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.778732][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.779157][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.788046][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.789616][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.789830][ T4714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.791261][ T4723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.792838][ T4714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.795625][ T4714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.798555][ T4714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.798621][ T4714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.801988][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.118300][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.118577][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.118676][ T4717] bridge_slave_0: entered allmulticast mode [ 31.119277][ T4717] bridge_slave_0: entered promiscuous mode [ 31.128745][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.130303][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.131813][ T4717] bridge_slave_1: entered allmulticast mode [ 31.133682][ T4717] bridge_slave_1: entered promiscuous mode [ 31.147477][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.147563][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.147620][ T4715] bridge_slave_0: entered allmulticast mode [ 31.148080][ T4715] bridge_slave_0: entered promiscuous mode [ 31.150923][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.150946][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.151004][ T4715] bridge_slave_1: entered allmulticast mode [ 31.151405][ T4715] bridge_slave_1: entered promiscuous mode [ 31.160088][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.169106][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.180191][ T4717] team0: Port device team_slave_0 added [ 31.195453][ T4717] team0: Port device team_slave_1 added [ 31.200236][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.207860][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.224332][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.225699][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.230658][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.234093][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.234117][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.234132][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.234900][ T4715] team0: Port device team_slave_0 added [ 31.235880][ T4715] team0: Port device team_slave_1 added [ 31.269312][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.270663][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.270700][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.274398][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.274483][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.274536][ T4721] bridge_slave_0: entered allmulticast mode [ 31.274952][ T4721] bridge_slave_0: entered promiscuous mode [ 31.276057][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.276084][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.276137][ T4711] bridge_slave_0: entered allmulticast mode [ 31.276894][ T4711] bridge_slave_0: entered promiscuous mode [ 31.278017][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.278043][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.278125][ T4711] bridge_slave_1: entered allmulticast mode [ 31.278557][ T4711] bridge_slave_1: entered promiscuous mode [ 31.290800][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.290810][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.290823][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.293374][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.293444][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.293535][ T4721] bridge_slave_1: entered allmulticast mode [ 31.293952][ T4721] bridge_slave_1: entered promiscuous mode [ 31.303474][ T4717] hsr_slave_0: entered promiscuous mode [ 31.303838][ T4717] hsr_slave_1: entered promiscuous mode [ 31.313705][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.320872][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.323212][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.336902][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.350417][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.351933][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.353522][ T4722] bridge_slave_0: entered allmulticast mode [ 31.355081][ T4722] bridge_slave_0: entered promiscuous mode [ 31.360846][ T4711] team0: Port device team_slave_0 added [ 31.361636][ T4711] team0: Port device team_slave_1 added [ 31.370285][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.370365][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.370425][ T4722] bridge_slave_1: entered allmulticast mode [ 31.370833][ T4722] bridge_slave_1: entered promiscuous mode [ 31.378393][ T4715] hsr_slave_0: entered promiscuous mode [ 31.379986][ T4715] hsr_slave_1: entered promiscuous mode [ 31.381303][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 31.382169][ T4715] Cannot create hsr debugfs directory [ 31.385449][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.385479][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.385493][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.394396][ T4721] team0: Port device team_slave_0 added [ 31.395398][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.396549][ T4721] team0: Port device team_slave_1 added [ 31.405515][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.405537][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.405551][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.413406][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.417267][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.417288][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.417524][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.418177][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.418183][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.418196][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.444025][ T4722] team0: Port device team_slave_0 added [ 31.445080][ T4722] team0: Port device team_slave_1 added [ 31.465548][ T4711] hsr_slave_0: entered promiscuous mode [ 31.466987][ T4711] hsr_slave_1: entered promiscuous mode [ 31.467197][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 31.467214][ T4711] Cannot create hsr debugfs directory [ 31.470281][ T4721] hsr_slave_0: entered promiscuous mode [ 31.470600][ T4721] hsr_slave_1: entered promiscuous mode [ 31.470805][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 31.470813][ T4721] Cannot create hsr debugfs directory [ 31.483164][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.483191][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.483206][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.493576][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.495023][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.499782][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.540008][ T4722] hsr_slave_0: entered promiscuous mode [ 31.541464][ T4722] hsr_slave_1: entered promiscuous mode [ 31.542510][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 31.542522][ T4722] Cannot create hsr debugfs directory [ 31.592460][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.595090][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.604479][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.607044][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.608702][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.611180][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.614036][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.616365][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.634518][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.634566][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.634712][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.634748][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.640501][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.643303][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.644921][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.647078][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.648022][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.649318][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.651009][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.653778][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.670706][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.670765][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.670833][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.670859][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.688371][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.688931][ T4721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.690605][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.691405][ T4721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.693886][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.703485][ T4721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.705950][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.708053][ T4721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.710255][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.719503][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.721347][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.723244][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.723593][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.738973][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.745505][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.745556][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.751829][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.754436][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.754785][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.756483][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.762909][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.764190][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.765462][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.765485][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.771511][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.775245][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.777766][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.779937][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.780257][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.782389][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.789943][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.790931][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.793620][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.793916][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.795756][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.824295][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.840111][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.841233][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.841273][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.841863][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.841893][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.861284][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.861318][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.874516][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.880014][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.887184][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.911172][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.911214][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.915090][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.915126][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.931391][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.931434][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.951719][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.951765][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.962719][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.977614][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.999310][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.008961][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.009004][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.014510][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.014549][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.066090][ T4717] veth0_vlan: entered promiscuous mode [ 32.085163][ T4717] veth1_vlan: entered promiscuous mode [ 32.093367][ T4717] veth0_macvtap: entered promiscuous mode [ 32.097705][ T4717] veth1_macvtap: entered promiscuous mode [ 32.103245][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.105806][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.109401][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.109569][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.109629][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.109689][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.166778][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.181473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.181502][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.209264][ T928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.209300][ T928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.229947][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.251657][ T4721] veth0_vlan: entered promiscuous mode [ 32.258203][ T4721] veth1_vlan: entered promiscuous mode [ 32.286143][ T4721] veth0_macvtap: entered promiscuous mode [ 32.288491][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.301784][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.305376][ T4721] veth1_macvtap: entered promiscuous mode [ 32.308495][ T4715] veth0_vlan: entered promiscuous mode [ 32.313685][ T4717] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.315755][ T4715] veth1_vlan: entered promiscuous mode [ 32.334122][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.335166][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.341469][ T4722] veth0_vlan: entered promiscuous mode [ 32.345210][ T4711] veth0_vlan: entered promiscuous mode [ 32.351588][ T4711] veth1_vlan: entered promiscuous mode [ 32.354881][ T4715] veth0_macvtap: entered promiscuous mode [ 32.356053][ T4715] veth1_macvtap: entered promiscuous mode [ 32.371739][ T4889] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 32.374145][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.374189][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.374217][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.374238][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381958][ T4722] veth1_vlan: entered promiscuous mode [ 32.403324][ T4864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.403356][ T4864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.409062][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.410282][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.416380][ T4864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.419093][ T4711] veth0_macvtap: entered promiscuous mode [ 32.428756][ T4864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.429818][ T4711] veth1_macvtap: entered promiscuous mode [ 32.431431][ T4864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.436560][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.459016][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.489214][ T4722] veth0_macvtap: entered promiscuous mode [ 32.491324][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.491347][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.492813][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.492901][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493231][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493314][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493340][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493366][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493387][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.499645][ T4722] veth1_macvtap: entered promiscuous mode [ 32.524906][ T4895] loop1: detected capacity change from 0 to 1024 [ 32.527907][ T4895] EXT4-fs: Ignoring removed bh option [ 32.541515][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.541550][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.556303][ T4895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 32.562747][ T4864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.562781][ T4864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.568568][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.577287][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.582356][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.582383][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.585833][ T4864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587186][ T4864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.643065][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.643520][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.691959][ T4907] loop4: detected capacity change from 0 to 1024 [ 32.695419][ T4907] EXT4-fs: Ignoring removed bh option [ 32.709082][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.709111][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.903530][ T4913] trusted_key: encrypted_key: insufficient parameters specified [ 32.921128][ T4723] Bluetooth: hci3: command tx timeout [ 32.921331][ T4723] Bluetooth: hci1: command tx timeout [ 32.921479][ T4723] Bluetooth: hci0: command tx timeout [ 32.921626][ T4723] Bluetooth: hci4: command tx timeout [ 32.922963][ T4713] Bluetooth: hci2: command tx timeout [ 33.014606][ T1215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.014635][ T1215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.022481][ T4907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 33.047581][ T4918] bridge0: port 3(syz_tun) entered blocking state [ 33.050074][ T4918] bridge0: port 3(syz_tun) entered disabled state [ 33.051630][ T4918] syz_tun: entered allmulticast mode [ 33.054761][ T4918] syz_tun: entered promiscuous mode [ 33.057400][ T4918] bridge0: port 3(syz_tun) entered blocking state [ 33.057469][ T4918] bridge0: port 3(syz_tun) entered forwarding state [ 33.179768][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.447427][ T4721] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 33.593952][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 33.981044][ T4943] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 34.026159][ T4943] bond1 (unregistering): Released all slaves [ 34.156744][ T4972] overlayfs: failed to resolve './bus': -2 [ 34.166663][ T4977] fuse: Bad value for 'fd' [ 34.190716][ T4968] overlayfs: failed to resolve './bus': -2 [ 34.198574][ T4968] overlayfs: failed to resolve './bus': -2 [ 34.199944][ T4968] overlayfs: failed to resolve './bus': -2 [ 34.283621][ T4983] process 'syz.3.12' launched '/dev/fd/3' with NULL argv: empty string added [ 34.364557][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.364778][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.385416][ T4999] loop2: detected capacity change from 0 to 512 [ 34.752404][ T4811] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 34.923678][ T4811] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 34.924570][ T4811] usb 1-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.924601][ T4811] usb 1-1: config 1 interface 0 has no altsetting 0 [ 34.927482][ T4811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.927495][ T4811] usb 1-1: Product: syz [ 34.927502][ T4811] usb 1-1: Manufacturer: syz [ 34.927509][ T4811] usb 1-1: SerialNumber: syz [ 34.972182][ T4723] Bluetooth: hci4: command tx timeout [ 34.972217][ T4723] Bluetooth: hci0: command tx timeout [ 34.972243][ T4723] Bluetooth: hci1: command tx timeout [ 34.972262][ T4723] Bluetooth: hci3: command tx timeout [ 34.976844][ T4713] Bluetooth: hci2: command tx timeout [ 34.993033][ T5020] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 34.999712][ T5020] syz_tun: entered promiscuous mode [ 35.005519][ T5020] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 35.089557][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.091671][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.350872][ T4811] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 36.252189][ T4718] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 36.402897][ T5052] Bluetooth: MGMT ver 1.23 [ 36.462768][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 36.677829][ T5065] fuse: root generation should be zero [ 36.699668][ T1025] IPVS: starting estimator thread 0... [ 36.792126][ T5069] IPVS: using max 61 ests per chain, 146400 per kthread [ 37.052389][ T4718] Bluetooth: hci2: command tx timeout [ 37.052430][ T4718] Bluetooth: hci3: command tx timeout [ 37.052459][ T4718] Bluetooth: hci1: command tx timeout [ 37.052478][ T4718] Bluetooth: hci0: command tx timeout [ 37.052497][ T4718] Bluetooth: hci4: command tx timeout [ 37.456819][ T5002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.510670][ T1025] usb 1-1: USB disconnect, device number 2 [ 37.525106][ T1025] usblp0: removed [ 37.546625][ T5087] rdma_op 00000000c3ae07dd conn xmit_rdma 0000000000000000 [ 37.649537][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.649736][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.982086][ T1025] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.152089][ T1025] usb 1-1: Using ep0 maxpacket: 8 [ 38.152919][ T1025] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 38.153712][ T1025] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 38.153728][ T1025] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 38.153738][ T1025] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 38.153748][ T1025] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 38.153758][ T1025] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 38.153773][ T1025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.225326][ T5112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 38.361133][ T1025] usb 1-1: usb_control_msg returned -32 [ 38.361168][ T1025] usbtmc 1-1:16.0: can't read capabilities [ 39.070371][ T5124] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 39.132095][ T4718] Bluetooth: hci3: command tx timeout [ 39.132133][ T4718] Bluetooth: hci4: command tx timeout [ 39.132164][ T4718] Bluetooth: hci1: command tx timeout [ 39.132191][ T4713] Bluetooth: hci0: command tx timeout [ 39.272594][ T26] usb 1-1: USB disconnect, device number 3 [ 40.142090][ T4796] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.292466][ T4796] usb 1-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 40.293229][ T4796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.294700][ T4796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.294709][ T4796] usb 1-1: Product: syz [ 40.294716][ T4796] usb 1-1: Manufacturer: syz [ 40.294722][ T4796] usb 1-1: SerialNumber: syz [ 40.297970][ T4796] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 40.499022][ T4796] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 40.501328][ T4796] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 40.501432][ T4796] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 40.501446][ T4796] usb 1-1: media controller created [ 40.504297][ T4796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 40.535669][ T5082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.575819][ T5146] faux_driver vgem: [drm] Unknown color mode 52; guessing buffer size. [ 40.593778][ T5144] batman_adv: batadv0: Adding interface: veth0 [ 40.593803][ T5144] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.593832][ T5144] batman_adv: batadv0: Interface activated: veth0 [ 40.602454][ T5144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.603994][ T5144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.610609][ T5144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.610642][ T5144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.614156][ T5144] batman_adv: batadv0: Interface deactivated: veth0 [ 40.614177][ T5144] batman_adv: batadv0: Removing interface: veth0 [ 40.703434][ T4796] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 40.716143][ T5162] 9p: Unknown access argument 18446744073709551615: -34 [ 40.861496][ T5172] use of bytesused == 0 is deprecated and will be removed in the future, [ 40.861523][ T5172] use the actual size instead. [ 40.918786][ T4796] usb 1-1: USB disconnect, device number 4 [ 40.933156][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.933348][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.028408][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.028605][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.035807][ T5191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.035998][ T5191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.136474][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.136683][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.253620][ T5205] syzkaller0: entered promiscuous mode [ 41.254924][ T5205] syzkaller0: entered allmulticast mode [ 41.526680][ T5219] Format for deleting device is "id" (uint). [ 41.680495][ T5235] 9pnet_virtio: no channels available for device syz [ 41.898110][ T4713] Bluetooth: hci1: unexpected subevent 0x03 length: 12 > 9 [ 41.919313][ T5255] 0x000000000006-0x000000020000 : "" [ 41.924916][ T5255] ftl_cs: FTL header corrupt! [ 41.985490][ T5261] Zero length message leads to an empty skb [ 42.022420][ T5265] syz.3.130 uses obsolete (PF_INET,SOCK_PACKET) [ 42.106082][ T5276] 9pnet_virtio: no channels available for device syz [ 42.155643][ T5280] gadgetfs: bound to dummy_udc driver [ 42.235377][ T5286] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 42.235436][ T5286] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 42.392110][ T1025] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.392297][ C0] gadgetfs: connected [ 42.393362][ T5279] gadgetfs: suspended from state 3 [ 42.393399][ T5279] gadgetfs: disconnected [ 42.582530][ T5312] binder: 5310:5312 tried to acquire reference to desc 0, got 1 instead [ 42.583159][ T5312] binder: 5310:5312 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.583172][ T5312] binder: 5312 RLIMIT_NICE not set [ 42.583208][ T5312] binder: 5312 RLIMIT_NICE not set [ 42.590668][ T4361] binder: release 5310:5312 transaction 5 out, still active [ 42.590713][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 42.590729][ T4361] binder: send failed reply for transaction 12 to 5310:5312 [ 42.590858][ T4361] binder: release 5310:5312 transaction 5 in, still active [ 42.590866][ T4361] binder: send failed reply for transaction 5, target dead [ 42.590877][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 42.590885][ T4361] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.616158][ T5314] Config c/1 of g1 needs at least one function. [ 42.616274][ T5314] udc usbip-vudc.0: failed to start g1: -22 [ 42.616289][ T5314] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 42.618100][ T5314] UDC core: g1: couldn't find an available UDC or it's busy [ 43.046006][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 43.206552][ T5338] fuse: Bad value for 'fd' [ 43.357854][ T5307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 43.360120][ T5307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 43.364848][ T5307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 43.369080][ T5307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.370619][ T5307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.385140][ T5307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.389928][ T5307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 43.390008][ T5307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 43.393523][ T5307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 43.394793][ T5307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.394816][ T5307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.395696][ T5307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.398092][ T5307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 43.398113][ T5307] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 43.400751][ T5307] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 43.490468][ T5350] i2c i2c-0: delete_device: Can't find device in list [ 43.495185][ T5348] loop0: detected capacity change from 0 to 3904 [ 43.555866][ T5348] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 43.555898][ T5348] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 43.555935][ T5348] loop0: [ 43.562597][ T5356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 43.593064][ T5353] syzkaller0: entered promiscuous mode [ 43.593104][ T5353] syzkaller0: entered allmulticast mode [ 43.666229][ T5368] vxcan0: tx address claim with different name [ 43.727402][ T5372] batman_adv: batadv0: Adding interface: veth0 [ 43.727430][ T5372] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.727462][ T5372] batman_adv: batadv0: Interface activated: veth0 [ 43.727929][ T5379] batman_adv: batadv0: Interface deactivated: veth0 [ 43.778286][ T5379] batman_adv: batadv0: Removing interface: veth0 [ 43.806721][ T5387] tipc: Started in network mode [ 43.806763][ T5387] tipc: Node identity b2059648ff4d, cluster identity 4711 [ 43.809768][ T5387] tipc: Enabled bearer , priority 0 [ 43.814003][ T5387] syzkaller0: MTU too low for tipc bearer [ 43.814036][ T5387] tipc: Disabling bearer [ 43.901180][ T5404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.906109][ T5404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.953202][ T1025] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.017356][ T4713] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 44.102136][ T1025] usb 1-1: Using ep0 maxpacket: 32 [ 44.105185][ T1025] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.105231][ T1025] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 44.106087][ T1025] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 44.106099][ T1025] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 44.106108][ T1025] usb 1-1: config 14 has no interface number 0 [ 44.106116][ T1025] usb 1-1: config 14 has no interface number 1 [ 44.106130][ T1025] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 44.106139][ T1025] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 44.106150][ T1025] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 44.106160][ T1025] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 44.106170][ T1025] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 44.106180][ T1025] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 44.106191][ T1025] usb 1-1: config 14 interface 57 has no altsetting 0 [ 44.106198][ T1025] usb 1-1: config 14 interface 228 has no altsetting 0 [ 44.107504][ T1025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.107516][ T1025] usb 1-1: Product: syz [ 44.107524][ T1025] usb 1-1: Manufacturer: syz [ 44.107530][ T1025] usb 1-1: SerialNumber: syz [ 44.318887][ T5432] syzkaller1: entered promiscuous mode [ 44.320147][ T5432] syzkaller1: entered allmulticast mode [ 44.483581][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.483792][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.525691][ T1025] legousbtower 1-1:14.57: interrupt endpoints not found [ 44.572341][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout [ ** replaying previous printk message ** [ 44.727730][ T5460] ------------[ cut here ]------------ [ 44.727757][ T5460] do not call blocking ops when !TASK_RUNNING; state=2 set at [<00000000845855df>] prepare_to_wait_event+0x2e4/0x3ac [ 44.727812][ T5460] WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc, CPU#0: syz.4.211/5460 [ 44.733437][ T5460] Modules linked in: [ 44.734154][ T5460] CPU: 0 UID: 0 PID: 5460 Comm: syz.4.211 Not tainted syzkaller #0 PREEMPT [ 44.735666][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.737489][ T5460] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 44.738907][ T5460] pc : __might_sleep+0xc0/0xdc [ 44.739759][ T5460] lr : __might_sleep+0xc0/0xdc [ 44.740646][ T5460] sp : ffff80009b2b7930 [ 44.741379][ T5460] x29: ffff80009b2b7930 x28: ffff8000805a793c x27: ffff80009b2b7a00 [ 44.742814][ T5460] x26: 0000000000000000 x25: ffff80009b2b7a08 x24: 0000000000000000 [ 44.744228][ T5460] x23: ffff700013656f3c x22: ffff0001037196d0 x21: 0000000000000002 [ 44.745687][ T5460] x20: ffff8000869ca160 x19: 000000000000026f x18: 00000000ffffffff [ 44.747077][ T5460] x17: ffff8000801672c8 x16: ffff80008016750c x15: ffff800080348f2c [ 44.748533][ T5460] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 44.749916][ T5460] x11: 0000000000000000 x10: 0000000000080000 x9 : d30514a1eb835f00 [ 44.751300][ T5460] x8 : d30514a1eb835f00 x7 : ffff80008048c60c x6 : 0000000000000000 [ 44.752860][ T5460] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 44.754345][ T5460] x2 : 0000000100000000 x1 : ffff000103718000 x0 : 0000000000000001 [ 44.755848][ T5460] Call trace: [ 44.756443][ T5460] __might_sleep+0xc0/0xdc (P) [ 44.757316][ T5460] __mutex_lock+0xf8/0xf14 [ 44.758090][ T5460] mutex_lock_nested+0x24/0x30 [ 44.758939][ T5460] futex_pivot_pending+0x30/0xa4 [ 44.759786][ T5460] futex_hash_allocate+0x73c/0xc20 [ 44.760673][ T5460] futex_hash_prctl+0xd0/0x324 [ 44.761517][ T5460] __arm64_sys_prctl+0x8d0/0x13d0 [ 44.762390][ T5460] invoke_syscall+0x98/0x244 [ 44.763199][ T5460] el0_svc_common+0xec/0x23c [ 44.764053][ T5460] do_el0_svc+0x4c/0x5c [ 44.764796][ T5460] el0_svc+0x64/0x260 [ 44.765518][ T5460] el0t_64_sync_handler+0x44/0x104 [ 44.766407][ T5460] el0t_64_sync+0x198/0x19c [ 44.767195][ T5460] irq event stamp: 148 [ 44.767860][ T5460] hardirqs last enabled at (147): [] vprintk_store+0x924/0xb94 [ 44.769467][ T5460] hardirqs last disabled at (148): [] el1_brk64+0x20/0x54 [ 44.770925][ T5460] softirqs last enabled at (138): [] handle_softirqs+0xc28/0xd98 [ 44.772520][ T5460] softirqs last disabled at (129): [] __do_softirq+0x14/0x20 [ 44.774113][ T5460] ---[ end trace 0000000000000000 ]--- [ 44.925997][ T1025] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 44.926853][ T1025] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 45.372068][ T4713] Bluetooth: hci1: command 0x0c1a tx timeout [ 45.452860][ T4713] Bluetooth: hci4: command 0x0c1a tx timeout [ 45.452882][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 45.683396][ T4796] usb 1-1: USB disconnect, device number 6 [ 45.688333][ T4796] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 46.652161][ T4718] Bluetooth: hci0: command 0x0c1a tx timeout [ 47.452062][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 47.532077][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 47.542101][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout [ 48.732128][ T4718] Bluetooth: hci0: command 0x0c1a tx timeout [ 49.532074][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 49.612125][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout [ 49.622087][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout