last executing test programs: 11m12.864076934s ago: executing program 3 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 11m11.723325765s ago: executing program 3 (id=220): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r4}, 0x10) close(r1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) close(r5) 11m9.713091955s ago: executing program 3 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r2, 0xffffffffffffffff, 0x0) 11m7.152981569s ago: executing program 3 (id=238): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x400, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 11m5.552923843s ago: executing program 3 (id=243): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001e00)={0x4, 0x0, [{0xeeef0000, 0x8e, &(0x7f0000000880)=""/142}, {0xeeee8000, 0x2a, &(0x7f00000001c0)=""/42}, {0x1000, 0xf7, &(0x7f0000000a40)=""/247}, {0x0, 0x105, &(0x7f0000001cc0)=""/261}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 11m0.963342847s ago: executing program 3 (id=260): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12202, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e08020d0c"], 0xb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11m0.31360132s ago: executing program 32 (id=260): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12202, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e08020d0c"], 0xb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10m45.810209305s ago: executing program 4 (id=304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 10m40.904751179s ago: executing program 4 (id=312): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 10m40.296868622s ago: executing program 4 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) tee(0xffffffffffffffff, r2, 0x9, 0x8) write$FUSE_ATTR(r2, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x1, 0x9, 0x0, {0x1, 0x0, 0x87ac, 0x1, 0xffffffff, 0x4, 0xfffffcd8, 0x4, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x6}}}, 0xfdef) close_range(r1, 0xffffffffffffffff, 0x0) 10m40.055330716s ago: executing program 4 (id=317): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400add4", 0x8}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3}) 10m39.971425735s ago: executing program 4 (id=318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x504b, 0x0, 0x0, 0x0, 0x0) 10m30.809762059s ago: executing program 4 (id=335): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) r2 = gettid() timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) clock_gettime(0x5, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000840)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) 10m30.279856641s ago: executing program 33 (id=335): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) r2 = gettid() timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) clock_gettime(0x5, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000840)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) 10m20.139682056s ago: executing program 1 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 10m19.116450859s ago: executing program 1 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 10m18.082965792s ago: executing program 1 (id=361): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xae, 0x0, 0x9a, &(0x7f0000000680), 0x1}}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m16.515045862s ago: executing program 1 (id=364): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) close(0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x80, 0x100000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) fchdir(r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) 10m16.306526221s ago: executing program 1 (id=365): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m13.438133211s ago: executing program 1 (id=372): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) getdents64(r2, 0x0, 0x22) 9.905198361s ago: executing program 2 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = fcntl$getown(r3, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7f, 0x8, 0x3, 0x0, 0x4, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 9.89993735s ago: executing program 0 (id=1213): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 8.848071926s ago: executing program 2 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) fcntl$getown(r3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) 7.428464456s ago: executing program 0 (id=1215): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000480)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x4f, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) tgkill(r3, r3, 0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000bfff000009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000001c0)) timer_delete(r6) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 7.060388938s ago: executing program 2 (id=1216): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 6.071205121s ago: executing program 0 (id=1217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x5e21, 0x100, @mcast1, 0x1000}, 0x1c) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x3c90, &(0x7f0000000640)={0x0, 0x97b, 0x8, 0xfffffffd, 0x15f}, 0x0, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a21", 0x1e, 0xfffffffffffffffb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r2) chmod(&(0x7f00000000c0)='./file1\x00', 0x186) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce0102829709021200"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 5.033914352s ago: executing program 2 (id=1218): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0xfffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.425273614s ago: executing program 0 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = fcntl$getown(r3, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7f, 0x8, 0x3, 0x0, 0x4, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) 3.274852332s ago: executing program 0 (id=1220): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) 1.773338003s ago: executing program 0 (id=1221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000680), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x8, 0x37, 0x200, 0x95a, 0x2, 0x2}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 1.379183852s ago: executing program 2 (id=1222): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000e8a200000000000000000000bbfc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x40}, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 2 (id=1223): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x18) syz_io_uring_submit(r3, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001840)}, {&(0x7f00000005c0)="a50dafd420eb8e3705e0a5d6796dc8d44b5b043fb599dbdb450d4c8af4f84e9aed36c1092e750a2f4937dc3b565b63a2eafddca1e023f482421f8a0d94f9b7", 0x3f}], 0x5, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x2000000002ffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfe}]}) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) kernel console output (not intermixed with test programs): scall=26 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 272.068754][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.095382][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.117103][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.118303][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.119109][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.398612][ T7223] team0: Port device team_slave_0 added [ 273.293381][ T7223] team0: Port device team_slave_1 added [ 274.403619][ T5118] Bluetooth: hci4: command tx timeout [ 275.228862][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.228873][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.228887][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.270266][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.270282][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.270305][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.351159][ T3503] bridge_slave_1: left allmulticast mode [ 275.351193][ T3503] bridge_slave_1: left promiscuous mode [ 275.351413][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.427508][ T3503] bridge_slave_0: left allmulticast mode [ 275.427528][ T3503] bridge_slave_0: left promiscuous mode [ 275.427787][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.777187][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.877257][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.947000][ T3503] bond0 (unregistering): Released all slaves [ 276.215300][ T7223] hsr_slave_0: entered promiscuous mode [ 276.216645][ T7223] hsr_slave_1: entered promiscuous mode [ 276.217593][ T7223] debugfs: 'hsr0' already exists in 'hsr' [ 276.217614][ T7223] Cannot create hsr debugfs directory [ 276.271450][ T7105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.387960][ T7105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.427488][ T7105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.506802][ T5118] Bluetooth: hci4: command tx timeout [ 276.537380][ T7105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.697285][ T7480] overlayfs: failed to clone upperpath [ 276.750663][ T3503] hsr_slave_0: left promiscuous mode [ 276.787446][ T3503] hsr_slave_1: left promiscuous mode [ 276.788452][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.999319][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.586363][ T5118] Bluetooth: hci4: command tx timeout [ 280.287327][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 280.417898][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 280.676614][ T5118] Bluetooth: hci4: command tx timeout [ 281.188431][ T7508] bridge1: entered promiscuous mode [ 281.188447][ T7508] bridge1: entered allmulticast mode [ 281.240026][ T7508] team0: Port device bridge1 added [ 281.256741][ T7509] bridge0: port 3(team0) entered blocking state [ 281.260402][ T7509] bridge0: port 3(team0) entered disabled state [ 281.260785][ T7509] team0: entered allmulticast mode [ 281.260796][ T7509] team_slave_0: entered allmulticast mode [ 281.260871][ T7509] team_slave_1: entered allmulticast mode [ 281.433967][ T7509] team0: entered promiscuous mode [ 281.433984][ T7509] team_slave_0: entered promiscuous mode [ 281.451662][ T7509] team_slave_1: entered promiscuous mode [ 282.197909][ T7521] tipc: Started in network mode [ 282.197930][ T7521] tipc: Node identity 4, cluster identity 4711 [ 282.197941][ T7521] tipc: Node number set to 4 [ 282.260327][ T7451] chnl_net:caif_netlink_parms(): no params data found [ 284.124679][ T7544] batman_adv: batadv0: Adding interface: dummy0 [ 284.124692][ T7544] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.124710][ T7544] batman_adv: batadv0: Interface activated: dummy0 [ 284.293483][ T7542] batadv0: mtu less than device minimum [ 284.319166][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.327971][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.336488][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.344832][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.353558][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.364118][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.374463][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.383199][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.394163][ T7542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.743986][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.744119][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.744356][ T7451] bridge_slave_0: entered allmulticast mode [ 285.745998][ T7451] bridge_slave_0: entered promiscuous mode [ 285.782061][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.782195][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.782327][ T7451] bridge_slave_1: entered allmulticast mode [ 285.783824][ T7451] bridge_slave_1: entered promiscuous mode [ 286.110189][ T7451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.142627][ T7451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.560857][ T7451] team0: Port device team_slave_0 added [ 286.595136][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.597392][ T7451] team0: Port device team_slave_1 added [ 288.432868][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.452030][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.453710][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.455495][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.482357][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.109189][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.109205][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.109229][ T7451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.789141][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.789156][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.789181][ T7451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.193389][ T7223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.240113][ T7223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.523378][ T7223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.586432][ T62] Bluetooth: hci1: command tx timeout [ 291.766803][ T7223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.887054][ T7451] hsr_slave_0: entered promiscuous mode [ 291.904775][ T7451] hsr_slave_1: entered promiscuous mode [ 291.905734][ T7451] debugfs: 'hsr0' already exists in 'hsr' [ 291.905756][ T7451] Cannot create hsr debugfs directory [ 293.207553][ T62] Bluetooth: hci1: command tx timeout [ 295.226280][ T62] Bluetooth: hci1: command tx timeout [ 295.690808][ T1013] bridge_slave_1: left allmulticast mode [ 295.690836][ T1013] bridge_slave_1: left promiscuous mode [ 295.691089][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.757393][ T1013] bridge_slave_0: left allmulticast mode [ 295.757413][ T1013] bridge_slave_0: left promiscuous mode [ 295.757577][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.277991][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 296.487742][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.600533][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.694198][ T1013] bond0 (unregistering): Released all slaves [ 296.765682][ T7624] bridge0: entered promiscuous mode [ 296.829974][ T7624] bridge0: left promiscuous mode [ 297.309754][ T62] Bluetooth: hci1: command tx timeout [ 297.461383][ T1013] hsr_slave_0: left promiscuous mode [ 297.476397][ T1013] hsr_slave_1: left promiscuous mode [ 297.477173][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.521259][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.702861][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 298.437093][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 298.577593][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 299.109842][ T7574] chnl_net:caif_netlink_parms(): no params data found [ 299.118351][ T7641] team0: left allmulticast mode [ 299.118370][ T7641] team_slave_0: left allmulticast mode [ 299.118388][ T7641] team_slave_1: left allmulticast mode [ 299.118409][ T7641] team0: left promiscuous mode [ 299.118420][ T7641] team_slave_0: left promiscuous mode [ 299.118644][ T7641] team_slave_1: left promiscuous mode [ 299.119208][ T7641] bridge0: port 3(team0) entered disabled state [ 299.218303][ T7641] bridge_slave_1: left allmulticast mode [ 299.218331][ T7641] bridge_slave_1: left promiscuous mode [ 299.218611][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.284352][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 299.284368][ T37] audit: type=1326 audit(1761467406.417:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73f740efc9 code=0x0 [ 299.337210][ T7641] bridge_slave_0: left allmulticast mode [ 299.337228][ T7641] bridge_slave_0: left promiscuous mode [ 299.337385][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.851186][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.937039][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.945136][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.969141][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.969867][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.027291][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.027511][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.027700][ T7574] bridge_slave_0: entered allmulticast mode [ 302.033469][ T7574] bridge_slave_0: entered promiscuous mode [ 302.035921][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.035993][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.036118][ T7574] bridge_slave_1: entered allmulticast mode [ 302.044618][ T7574] bridge_slave_1: entered promiscuous mode [ 304.447457][ T62] Bluetooth: hci0: command tx timeout [ 305.496413][ T62] Bluetooth: hci2: unexpected event for opcode 0x200a [ 305.824617][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.858462][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.555806][ T5118] Bluetooth: hci0: command tx timeout [ 307.400590][ T7574] team0: Port device team_slave_0 added [ 307.435370][ T7574] team0: Port device team_slave_1 added [ 307.814551][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.814562][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.814575][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.487350][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.487365][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.487388][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.489596][ T7451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.675261][ T7451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.861122][ T7451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.371503][ T5118] Bluetooth: hci0: command tx timeout [ 310.005189][ T7451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 311.293752][ T7574] hsr_slave_0: entered promiscuous mode [ 311.304393][ T7574] hsr_slave_1: entered promiscuous mode [ 311.312822][ T7574] debugfs: 'hsr0' already exists in 'hsr' [ 311.312840][ T7574] Cannot create hsr debugfs directory [ 311.386283][ T5118] Bluetooth: hci0: command tx timeout [ 312.708113][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 313.830048][ T7756] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 313.830089][ T7756] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 313.830106][ T7756] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 317.736075][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.736120][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.947895][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.947970][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.948156][ T7663] bridge_slave_0: entered allmulticast mode [ 318.949701][ T7663] bridge_slave_0: entered promiscuous mode [ 318.989136][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.989284][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.989490][ T7663] bridge_slave_1: entered allmulticast mode [ 318.998504][ T7663] bridge_slave_1: entered promiscuous mode [ 321.415608][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.091733][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.840430][ T7663] team0: Port device team_slave_0 added [ 323.033989][ T7663] team0: Port device team_slave_1 added [ 325.287300][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.287315][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.287336][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.294066][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.294081][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.294105][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.583068][ T1013] bridge_slave_1: left allmulticast mode [ 325.583101][ T1013] bridge_slave_1: left promiscuous mode [ 325.583364][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.810352][ T1013] bridge_slave_0: left allmulticast mode [ 325.810380][ T1013] bridge_slave_0: left promiscuous mode [ 325.815614][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.909180][ T1013] bridge_slave_1: left allmulticast mode [ 325.911284][ T1013] bridge_slave_1: left promiscuous mode [ 326.118388][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.037250][ T1013] bridge_slave_0: left allmulticast mode [ 327.037271][ T1013] bridge_slave_0: left promiscuous mode [ 327.037464][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.717139][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.796893][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.858388][ T1013] bond0 (unregistering): Released all slaves [ 331.481558][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.487046][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.491559][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.500381][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.501563][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.398975][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.546445][ T5118] Bluetooth: hci5: command tx timeout [ 333.664195][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.651598][ T1013] bond0 (unregistering): Released all slaves [ 334.710417][ T7663] hsr_slave_0: entered promiscuous mode [ 334.711814][ T7663] hsr_slave_1: entered promiscuous mode [ 334.712838][ T7663] debugfs: 'hsr0' already exists in 'hsr' [ 334.712860][ T7663] Cannot create hsr debugfs directory [ 335.813492][ T5118] Bluetooth: hci5: command tx timeout [ 336.177996][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 336.384647][ T37] audit: type=1326 audit(1761467443.517:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.385731][ T37] audit: type=1326 audit(1761467443.517:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.385776][ T37] audit: type=1326 audit(1761467443.517:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.386582][ T37] audit: type=1326 audit(1761467443.527:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.387122][ T37] audit: type=1326 audit(1761467443.527:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.387812][ T37] audit: type=1326 audit(1761467443.527:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.388929][ T37] audit: type=1326 audit(1761467443.527:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.390005][ T37] audit: type=1326 audit(1761467443.527:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 336.390283][ T37] audit: type=1326 audit(1761467443.527:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9cabdcd9dc code=0x7ffc0000 [ 336.390561][ T37] audit: type=1326 audit(1761467443.527:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 337.866266][ T5118] Bluetooth: hci5: command tx timeout [ 338.112832][ T1013] hsr_slave_0: left promiscuous mode [ 338.166283][ T1013] hsr_slave_1: left promiscuous mode [ 338.167238][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.207101][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.518968][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 338.518985][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 338.519008][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 338.521120][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 338.521134][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 339.440667][ T1013] hsr_slave_0: left promiscuous mode [ 339.606398][ T1013] hsr_slave_1: left promiscuous mode [ 339.607085][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.948693][ T5118] Bluetooth: hci5: command tx timeout [ 340.417072][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.130385][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 345.547157][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 348.237165][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 348.387650][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 348.433327][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.437494][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.440135][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.441398][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.445077][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.018071][ T62] Bluetooth: hci4: command tx timeout [ 353.835672][ T7954] netdevsim netdevsim0: Direct firmware load for d failed with error -2 [ 353.835698][ T7954] netdevsim netdevsim0: Falling back to sysfs fallback for: d [ 355.072611][ T62] Bluetooth: hci4: command tx timeout [ 356.709810][ T7850] chnl_net:caif_netlink_parms(): no params data found [ 357.197561][ T62] Bluetooth: hci4: command tx timeout [ 357.515856][ T7938] chnl_net:caif_netlink_parms(): no params data found [ 359.453816][ T62] Bluetooth: hci4: command tx timeout [ 359.583097][ T8003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.599'. [ 360.078507][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.078607][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.078748][ T7850] bridge_slave_0: entered allmulticast mode [ 360.080304][ T7850] bridge_slave_0: entered promiscuous mode [ 360.196662][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.196754][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.196934][ T7850] bridge_slave_1: entered allmulticast mode [ 360.198504][ T7850] bridge_slave_1: entered promiscuous mode [ 360.317859][ T7663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.448051][ T7663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.590572][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.593979][ T7663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.058480][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.066412][ T7663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.790403][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.790486][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.790657][ T7938] bridge_slave_0: entered allmulticast mode [ 361.792155][ T7938] bridge_slave_0: entered promiscuous mode [ 363.357817][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.374351][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.385215][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.402360][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.413328][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.467226][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.467356][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.467572][ T7938] bridge_slave_1: entered allmulticast mode [ 363.478357][ T7938] bridge_slave_1: entered promiscuous mode [ 363.809109][ T7850] team0: Port device team_slave_0 added [ 364.084394][ T7850] team0: Port device team_slave_1 added [ 364.190236][ T7938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.680654][ T62] Bluetooth: hci1: command tx timeout [ 366.740327][ T7938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.101397][ T62] Bluetooth: hci1: command tx timeout [ 370.106622][ T62] Bluetooth: hci1: command tx timeout [ 370.152793][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.152809][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.152831][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.512872][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.512883][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.512896][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.515169][ T7938] team0: Port device team_slave_0 added [ 370.544509][ T7938] team0: Port device team_slave_1 added [ 371.569157][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.569174][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.569196][ T7938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.198240][ T62] Bluetooth: hci1: command tx timeout [ 372.587318][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.587334][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.587358][ T7938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.024404][ T7850] hsr_slave_0: entered promiscuous mode [ 374.025823][ T7850] hsr_slave_1: entered promiscuous mode [ 374.026953][ T7850] debugfs: 'hsr0' already exists in 'hsr' [ 374.026976][ T7850] Cannot create hsr debugfs directory [ 375.816885][ T8100] ======================================================= [ 375.816885][ T8100] WARNING: The mand mount option has been deprecated and [ 375.816885][ T8100] and is ignored by this kernel. Remove the mand [ 375.816885][ T8100] option from the mount to silence this warning. [ 375.816885][ T8100] ======================================================= [ 378.100398][ T7938] hsr_slave_0: entered promiscuous mode [ 378.101757][ T7938] hsr_slave_1: entered promiscuous mode [ 378.102747][ T7938] debugfs: 'hsr0' already exists in 'hsr' [ 378.102770][ T7938] Cannot create hsr debugfs directory [ 378.840540][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.843058][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.274085][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 390.569722][ T8176] geneve2: entered promiscuous mode [ 390.569747][ T8176] geneve2: entered allmulticast mode [ 390.587649][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.587939][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.588193][ T8030] bridge_slave_0: entered allmulticast mode [ 390.598323][ T8030] bridge_slave_0: entered promiscuous mode [ 390.639072][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.639224][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.639479][ T8030] bridge_slave_1: entered allmulticast mode [ 390.642323][ T8030] bridge_slave_1: entered promiscuous mode [ 393.468845][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.202232][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.220798][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.239301][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.240364][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.637413][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.654298][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.939939][ T8030] team0: Port device team_slave_0 added [ 395.960202][ T8030] team0: Port device team_slave_1 added [ 396.385206][ T62] Bluetooth: hci0: command tx timeout [ 397.259923][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.259939][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.259964][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.337260][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.337292][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.337317][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.517650][ T62] Bluetooth: hci0: command tx timeout [ 398.735381][ T8230] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 398.982202][ T8030] hsr_slave_0: entered promiscuous mode [ 398.983635][ T8030] hsr_slave_1: entered promiscuous mode [ 398.984571][ T8030] debugfs: 'hsr0' already exists in 'hsr' [ 398.984595][ T8030] Cannot create hsr debugfs directory [ 399.397493][ T1013] bridge_slave_1: left allmulticast mode [ 399.418473][ T1013] bridge_slave_1: left promiscuous mode [ 399.421120][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.167873][ T1013] bridge_slave_0: left allmulticast mode [ 400.167901][ T1013] bridge_slave_0: left promiscuous mode [ 400.168145][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.919375][ T62] Bluetooth: hci0: command tx timeout [ 400.955980][ T1013] bridge_slave_1: left allmulticast mode [ 400.956008][ T1013] bridge_slave_1: left promiscuous mode [ 400.967858][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.279114][ T1013] bridge_slave_0: left allmulticast mode [ 401.279143][ T1013] bridge_slave_0: left promiscuous mode [ 401.279387][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.363024][ T62] Bluetooth: hci0: command tx timeout [ 403.477905][ T8271] netlink: 'syz.0.663': attribute type 4 has an invalid length. [ 403.540583][ T8272] netlink: 'syz.0.663': attribute type 4 has an invalid length. [ 403.857341][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.947025][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.012209][ T1013] bond0 (unregistering): Released all slaves [ 404.542710][ T8285] netlink: 'syz.2.665': attribute type 21 has an invalid length. [ 405.926740][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.006795][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.068191][ T1013] bond0 (unregistering): Released all slaves [ 407.781799][ T8298] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 408.066519][ T1013] hsr_slave_0: left promiscuous mode [ 408.087906][ T1013] hsr_slave_1: left promiscuous mode [ 408.088849][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.111408][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.221203][ T1013] hsr_slave_0: left promiscuous mode [ 408.256215][ T1013] hsr_slave_1: left promiscuous mode [ 408.257206][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.287174][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.142014][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.187622][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.188935][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.190332][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.191399][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.087270][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 410.989875][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 411.226499][ T62] Bluetooth: hci6: command tx timeout [ 413.401441][ T62] Bluetooth: hci6: command tx timeout [ 415.706351][ T5118] Bluetooth: hci6: command tx timeout [ 416.465244][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 417.166870][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 417.788684][ T5118] Bluetooth: hci6: command tx timeout [ 419.871168][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 421.616028][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.623401][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.623660][ T8205] bridge_slave_0: entered allmulticast mode [ 421.642589][ T8205] bridge_slave_0: entered promiscuous mode [ 421.821251][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.823807][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.824061][ T8205] bridge_slave_1: entered allmulticast mode [ 421.847429][ T8205] bridge_slave_1: entered promiscuous mode [ 424.235131][ T8366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.638385][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 425.642486][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 425.645419][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.677625][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.678401][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.798345][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.833606][ T8205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.950912][ T5118] Bluetooth: hci5: command tx timeout [ 428.289481][ T8205] team0: Port device team_slave_0 added [ 428.308819][ T8205] team0: Port device team_slave_1 added [ 428.778423][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.778435][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.778449][ T8205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.513231][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.513245][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.513260][ T8205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.039970][ T5118] Bluetooth: hci5: command tx timeout [ 430.197539][ T8410] Invalid source name [ 432.547171][ T5118] Bluetooth: hci5: command tx timeout [ 434.586230][ T62] Bluetooth: hci5: command tx timeout [ 437.523696][ T8205] hsr_slave_0: entered promiscuous mode [ 437.526991][ T8205] hsr_slave_1: entered promiscuous mode [ 437.532310][ T8205] debugfs: 'hsr0' already exists in 'hsr' [ 437.532336][ T8205] Cannot create hsr debugfs directory [ 437.896704][ T8310] chnl_net:caif_netlink_parms(): no params data found [ 440.373795][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.373953][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.662016][ T1013] bridge_slave_1: left allmulticast mode [ 447.662035][ T1013] bridge_slave_1: left promiscuous mode [ 447.662195][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.700056][ T1013] bridge_slave_0: left allmulticast mode [ 448.700081][ T1013] bridge_slave_0: left promiscuous mode [ 448.700327][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.784304][ T1013] bridge_slave_1: left allmulticast mode [ 448.784329][ T1013] bridge_slave_1: left promiscuous mode [ 448.784551][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.887803][ T1013] bridge_slave_0: left allmulticast mode [ 448.887829][ T1013] bridge_slave_0: left promiscuous mode [ 448.888087][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.963689][ T1013] bridge_slave_1: left allmulticast mode [ 448.963718][ T1013] bridge_slave_1: left promiscuous mode [ 448.963966][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.997992][ T1013] bridge_slave_0: left allmulticast mode [ 448.998021][ T1013] bridge_slave_0: left promiscuous mode [ 448.998262][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.512340][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.607918][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.846728][ T1013] bond0 (unregistering): Released all slaves [ 451.261181][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.653760][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.709523][ T1013] bond0 (unregistering): Released all slaves [ 452.127132][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.206918][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.514250][ T1013] bond0 (unregistering): Released all slaves [ 453.257331][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.277698][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.279563][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.281313][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.282204][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.896853][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.896997][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.897243][ T8310] bridge_slave_0: entered allmulticast mode [ 454.899467][ T8310] bridge_slave_0: entered promiscuous mode [ 454.959104][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.959199][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.959326][ T8310] bridge_slave_1: entered allmulticast mode [ 454.960935][ T8310] bridge_slave_1: entered promiscuous mode [ 455.414103][ T5118] Bluetooth: hci1: command tx timeout [ 455.808515][ T8310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.937592][ T1013] hsr_slave_0: left promiscuous mode [ 455.976417][ T1013] hsr_slave_1: left promiscuous mode [ 455.978320][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.297488][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.840100][ T5118] Bluetooth: hci1: command tx timeout [ 458.436693][ T1013] hsr_slave_0: left promiscuous mode [ 458.586215][ T1013] hsr_slave_1: left promiscuous mode [ 458.588063][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.694573][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.936356][ T1013] hsr_slave_0: left promiscuous mode [ 458.956331][ T1013] hsr_slave_1: left promiscuous mode [ 458.956961][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.996946][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.870652][ T5118] Bluetooth: hci1: command tx timeout [ 462.355467][ T5118] Bluetooth: hci1: command tx timeout [ 463.797080][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 464.089158][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 471.801293][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.814792][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.827832][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.844498][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.845436][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.107329][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 472.266817][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 473.911423][ T8656] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 474.548593][ T62] Bluetooth: hci0: command tx timeout [ 475.187701][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 475.306833][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 475.800394][ T8656] !: entered promiscuous mode [ 475.894180][ T8377] chnl_net:caif_netlink_parms(): no params data found [ 475.934793][ T8310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.586945][ T62] Bluetooth: hci0: command tx timeout [ 479.262045][ T62] Bluetooth: hci0: command tx timeout [ 480.476822][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.476960][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.477213][ T8377] bridge_slave_0: entered allmulticast mode [ 480.480275][ T8377] bridge_slave_0: entered promiscuous mode [ 482.269377][ T62] Bluetooth: hci0: command tx timeout [ 485.166769][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.166901][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.167150][ T8377] bridge_slave_1: entered allmulticast mode [ 485.170907][ T8377] bridge_slave_1: entered promiscuous mode [ 485.217910][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.500387][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.504348][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.505558][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.530203][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.699379][ T8533] chnl_net:caif_netlink_parms(): no params data found [ 488.089390][ T8640] chnl_net:caif_netlink_parms(): no params data found [ 488.506554][ T5118] Bluetooth: hci4: command tx timeout [ 488.537901][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.538025][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.538146][ T8533] bridge_slave_0: entered allmulticast mode [ 488.539865][ T8533] bridge_slave_0: entered promiscuous mode [ 488.639633][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.639713][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.639940][ T8533] bridge_slave_1: entered allmulticast mode [ 488.641508][ T8533] bridge_slave_1: entered promiscuous mode [ 490.493472][ T8533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.586225][ T5118] Bluetooth: hci4: command tx timeout [ 490.651626][ T8533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.651775][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.651845][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.652062][ T8640] bridge_slave_0: entered allmulticast mode [ 490.653752][ T8640] bridge_slave_0: entered promiscuous mode [ 490.847303][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.847428][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.847555][ T8640] bridge_slave_1: entered allmulticast mode [ 490.851855][ T8640] bridge_slave_1: entered promiscuous mode [ 491.558733][ T8533] team0: Port device team_slave_0 added [ 491.897657][ T8725] chnl_net:caif_netlink_parms(): no params data found [ 492.830236][ T5118] Bluetooth: hci4: command tx timeout [ 492.868169][ T8533] team0: Port device team_slave_1 added [ 492.887113][ T8640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.993722][ T8640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.207994][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.208006][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.208021][ T8533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.328782][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.328792][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.328808][ T8533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.339078][ T8640] team0: Port device team_slave_0 added [ 493.473893][ T8640] team0: Port device team_slave_1 added [ 494.906241][ T5118] Bluetooth: hci4: command tx timeout [ 498.490497][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.490513][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.490538][ T8640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.826807][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.826959][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.827205][ T8725] bridge_slave_0: entered allmulticast mode [ 498.829901][ T8725] bridge_slave_0: entered promiscuous mode [ 499.861481][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.861496][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.861520][ T8640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.059672][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.059815][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.060059][ T8725] bridge_slave_1: entered allmulticast mode [ 501.069796][ T8725] bridge_slave_1: entered promiscuous mode [ 501.080803][ T8533] hsr_slave_0: entered promiscuous mode [ 501.082121][ T8533] hsr_slave_1: entered promiscuous mode [ 501.083198][ T8533] debugfs: 'hsr0' already exists in 'hsr' [ 501.083221][ T8533] Cannot create hsr debugfs directory [ 501.202299][ T1013] bridge_slave_1: left allmulticast mode [ 501.202324][ T1013] bridge_slave_1: left promiscuous mode [ 501.202532][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.268559][ T1013] bridge_slave_0: left allmulticast mode [ 501.268587][ T1013] bridge_slave_0: left promiscuous mode [ 501.268848][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.341009][ T1013] bridge_slave_1: left allmulticast mode [ 501.341027][ T1013] bridge_slave_1: left promiscuous mode [ 501.341188][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.408213][ T1013] bridge_slave_0: left allmulticast mode [ 501.408241][ T1013] bridge_slave_0: left promiscuous mode [ 501.408502][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.718880][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.718951][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.710877][ T1013] bridge_slave_1: left allmulticast mode [ 503.710906][ T1013] bridge_slave_1: left promiscuous mode [ 503.711144][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.861805][ T1013] bridge_slave_0: left allmulticast mode [ 503.861835][ T1013] bridge_slave_0: left promiscuous mode [ 503.862084][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.947787][ T1013] bridge_slave_1: left allmulticast mode [ 503.947815][ T1013] bridge_slave_1: left promiscuous mode [ 503.948058][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.999517][ T1013] bridge_slave_0: left allmulticast mode [ 503.999546][ T1013] bridge_slave_0: left promiscuous mode [ 503.999787][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.201642][ T1013] bond0 (unregistering): Released all slaves [ 504.316998][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.436762][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.498056][ T1013] bond0 (unregistering): Released all slaves [ 504.697075][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.776926][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.823612][ T1013] bond0 (unregistering): Released all slaves [ 506.598499][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.896904][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.968242][ T1013] bond0 (unregistering): Released all slaves [ 508.673041][ T8725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.929128][ T8725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.571443][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 511.571468][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 512.456028][ T8640] hsr_slave_0: entered promiscuous mode [ 512.483206][ T8640] hsr_slave_1: entered promiscuous mode [ 512.484179][ T8640] debugfs: 'hsr0' already exists in 'hsr' [ 512.484201][ T8640] Cannot create hsr debugfs directory [ 512.749860][ T8725] team0: Port device team_slave_0 added [ 512.754952][ T8725] team0: Port device team_slave_1 added [ 517.366866][ T1013] hsr_slave_0: left promiscuous mode [ 517.379237][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.382337][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.393620][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.394834][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.396187][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 517.447966][ T1013] hsr_slave_1: left promiscuous mode [ 517.448941][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.506882][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.656277][ T1013] hsr_slave_0: left promiscuous mode [ 518.696422][ T1013] hsr_slave_1: left promiscuous mode [ 518.697151][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.734551][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.656247][ T5118] Bluetooth: hci1: command tx timeout [ 519.991175][ T8910] net_ratelimit: 10 callbacks suppressed [ 519.991216][ T8910] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.991401][ T8910] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 520.596997][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 520.726906][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 521.676868][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 521.708965][ T5118] Bluetooth: hci1: command tx timeout [ 521.787638][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 522.269265][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.269282][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.269307][ T8725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.564243][ T8917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.815'. [ 522.588479][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.588495][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.588520][ T8725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.928659][ T5118] Bluetooth: hci1: command tx timeout [ 524.167195][ T8725] hsr_slave_0: entered promiscuous mode [ 524.168054][ T8725] hsr_slave_1: entered promiscuous mode [ 524.168783][ T8725] debugfs: 'hsr0' already exists in 'hsr' [ 524.168798][ T8725] Cannot create hsr debugfs directory [ 524.633879][ T8930] batman_adv: batadv0: Interface deactivated: dummy0 [ 525.353090][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.364073][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.951061][ T5118] Bluetooth: hci1: command tx timeout [ 527.481620][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.393357][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.450718][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.536544][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.173978][ T8898] chnl_net:caif_netlink_parms(): no params data found [ 531.318640][ T8725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.598453][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.610616][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.612046][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 531.613783][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 531.614643][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 533.622681][ T8983] No control pipe specified [ 533.706386][ T5118] Bluetooth: hci0: command tx timeout [ 533.737141][ T8725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 533.861122][ T8725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 534.960682][ T8725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 536.086972][ T5118] Bluetooth: hci0: command tx timeout [ 536.307668][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.307885][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.308121][ T8898] bridge_slave_0: entered allmulticast mode [ 536.310482][ T8898] bridge_slave_0: entered promiscuous mode [ 536.355963][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.364209][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.364467][ T8898] bridge_slave_1: entered allmulticast mode [ 536.380300][ T8898] bridge_slave_1: entered promiscuous mode [ 537.591650][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 537.959790][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.995254][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.083210][ T9029] netlink: 165 bytes leftover after parsing attributes in process `syz.0.843'. [ 538.109241][ T5118] Bluetooth: hci0: command tx timeout [ 540.238377][ T5118] Bluetooth: hci0: command tx timeout [ 541.697235][ T8898] team0: Port device team_slave_0 added [ 541.714751][ T8898] team0: Port device team_slave_1 added [ 542.281484][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.281499][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.281524][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.283834][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.283846][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.283869][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.323644][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 546.449560][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 546.450927][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 546.453542][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 546.454449][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.703074][ T8898] hsr_slave_0: entered promiscuous mode [ 547.704018][ T8898] hsr_slave_1: entered promiscuous mode [ 547.704840][ T8898] debugfs: 'hsr0' already exists in 'hsr' [ 547.704870][ T8898] Cannot create hsr debugfs directory [ 548.898561][ T5118] Bluetooth: hci5: command tx timeout [ 550.972269][ T5118] Bluetooth: hci5: command tx timeout [ 551.040403][ T8973] chnl_net:caif_netlink_parms(): no params data found [ 552.391429][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.397300][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.397586][ T8973] bridge_slave_0: entered allmulticast mode [ 552.400266][ T8973] bridge_slave_0: entered promiscuous mode [ 552.547755][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.547933][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.548625][ T8973] bridge_slave_1: entered allmulticast mode [ 552.551871][ T8973] bridge_slave_1: entered promiscuous mode [ 553.596296][ T5118] Bluetooth: hci5: command tx timeout [ 554.085367][ T9119] overlayfs: missing 'lowerdir' [ 555.152183][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.208120][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.955651][ T5118] Bluetooth: hci5: command tx timeout [ 557.483897][ T8973] team0: Port device team_slave_0 added [ 557.889721][ T5869] IPVS: starting estimator thread 0... [ 557.921536][ T8973] team0: Port device team_slave_1 added [ 558.627053][ T9143] IPVS: using max 10 ests per chain, 24000 per kthread [ 559.715373][ T1013] bridge_slave_1: left allmulticast mode [ 559.715401][ T1013] bridge_slave_1: left promiscuous mode [ 559.715678][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.880329][ T1013] bridge_slave_0: left allmulticast mode [ 559.880353][ T1013] bridge_slave_0: left promiscuous mode [ 559.881655][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.991153][ T1013] bridge_slave_1: left allmulticast mode [ 559.991179][ T1013] bridge_slave_1: left promiscuous mode [ 559.991415][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.458516][ T1013] bridge_slave_0: left allmulticast mode [ 560.458546][ T1013] bridge_slave_0: left promiscuous mode [ 560.458817][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.207310][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.336910][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 564.443683][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.447558][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.447628][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.831842][ T1013] bond0 (unregistering): Released all slaves [ 568.006941][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.107268][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.159457][ T1013] bond0 (unregistering): Released all slaves [ 570.402420][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.402432][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.402446][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.417439][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.417454][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.417480][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.418378][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 570.636163][ T1013] hsr_slave_0: left promiscuous mode [ 570.827734][ T1013] hsr_slave_1: left promiscuous mode [ 570.846816][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.867220][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.946450][ T1013] hsr_slave_0: left promiscuous mode [ 570.986805][ T1013] hsr_slave_1: left promiscuous mode [ 570.987693][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.009395][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.406385][ T9247] capability: warning: `syz.2.891' uses deprecated v2 capabilities in a way that may be insecure [ 576.386086][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 577.071455][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 577.072777][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 577.125990][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 577.128557][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 577.186838][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 577.416933][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 579.376268][ T62] Bluetooth: hci4: command tx timeout [ 580.347074][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 581.878580][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 582.526146][ T62] Bluetooth: hci4: command tx timeout [ 584.974592][ T62] Bluetooth: hci4: command tx timeout [ 586.299478][ T8898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 586.986272][ T62] Bluetooth: hci4: command tx timeout [ 587.320799][ T8973] hsr_slave_0: entered promiscuous mode [ 587.323887][ T8973] hsr_slave_1: entered promiscuous mode [ 587.324872][ T8973] debugfs: 'hsr0' already exists in 'hsr' [ 587.324895][ T8973] Cannot create hsr debugfs directory [ 587.530539][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 587.531109][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 587.559860][ T9326] ceph: No mds server is up or the cluster is laggy [ 587.702055][ T9331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.913'. [ 590.141038][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.141215][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.141457][ T9069] bridge_slave_0: entered allmulticast mode [ 590.162062][ T9069] bridge_slave_0: entered promiscuous mode [ 590.206653][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.206772][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.206919][ T9069] bridge_slave_1: entered allmulticast mode [ 590.208677][ T9069] bridge_slave_1: entered promiscuous mode [ 591.716909][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.730707][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.972596][ T9069] team0: Port device team_slave_0 added [ 591.978185][ T9069] team0: Port device team_slave_1 added [ 592.584471][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.608244][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.642494][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.948732][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.013543][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.391725][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 593.580072][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.581453][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.581464][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.581479][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.648680][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.648696][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.648721][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.416168][ T62] Bluetooth: hci0: command tx timeout [ 596.538270][ T9069] hsr_slave_0: entered promiscuous mode [ 596.539714][ T9069] hsr_slave_1: entered promiscuous mode [ 596.540736][ T9069] debugfs: 'hsr0' already exists in 'hsr' [ 596.540759][ T9069] Cannot create hsr debugfs directory [ 596.549996][ T9263] chnl_net:caif_netlink_parms(): no params data found [ 597.246219][ T62] Bluetooth: hci3: Malformed HCI Event [ 598.616071][ T62] Bluetooth: hci0: command tx timeout [ 599.211245][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 599.215182][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 601.120048][ T62] Bluetooth: hci0: command tx timeout [ 603.177813][ T62] Bluetooth: hci0: command tx timeout [ 605.603006][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.603373][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.603564][ T9263] bridge_slave_0: entered allmulticast mode [ 605.606831][ T9263] bridge_slave_0: entered promiscuous mode [ 605.615691][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.615839][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.616958][ T9263] bridge_slave_1: entered allmulticast mode [ 605.620007][ T9263] bridge_slave_1: entered promiscuous mode [ 605.964275][ T9263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.982456][ T9263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.405564][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.420540][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 607.421967][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 607.423198][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 607.423965][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 607.798233][ T9442] netlink: 'syz.0.938': attribute type 32 has an invalid length. [ 609.466187][ T5118] Bluetooth: hci1: command tx timeout [ 610.914648][ T9263] team0: Port device team_slave_0 added [ 610.984017][ T9263] team0: Port device team_slave_1 added [ 611.264705][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.264716][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.264730][ T9263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.273767][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.273782][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.273806][ T9263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.446850][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 611.556202][ T5118] Bluetooth: hci1: command tx timeout [ 613.352293][ T9263] hsr_slave_0: entered promiscuous mode [ 613.353153][ T9263] hsr_slave_1: entered promiscuous mode [ 613.353792][ T9263] debugfs: 'hsr0' already exists in 'hsr' [ 613.353807][ T9263] Cannot create hsr debugfs directory [ 614.137969][ T5118] Bluetooth: hci1: command tx timeout [ 616.765321][ T5118] Bluetooth: hci1: command tx timeout [ 616.849285][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.849422][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.849925][ T9360] bridge_slave_0: entered allmulticast mode [ 616.863645][ T9360] bridge_slave_0: entered promiscuous mode [ 617.040161][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.040292][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.040546][ T9360] bridge_slave_1: entered allmulticast mode [ 617.046299][ T9360] bridge_slave_1: entered promiscuous mode [ 617.721215][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.747261][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.748340][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 618.839802][ T9360] team0: Port device team_slave_0 added [ 619.898560][ T9360] team0: Port device team_slave_1 added [ 620.216487][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.216533][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.216617][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.222825][ T9437] chnl_net:caif_netlink_parms(): no params data found [ 620.237054][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.237068][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.237093][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.761446][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 620.761464][ T37] audit: type=1326 audit(1761467727.855:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 620.761517][ T37] audit: type=1326 audit(1761467727.855:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 620.779598][ T37] audit: type=1326 audit(1761467727.915:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 620.780013][ T37] audit: type=1326 audit(1761467727.915:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 620.780378][ T37] audit: type=1326 audit(1761467727.915:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 620.781538][ T37] audit: type=1326 audit(1761467727.915:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73f740d810 code=0x7ffc0000 [ 620.782371][ T37] audit: type=1326 audit(1761467727.915:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73f740d810 code=0x7ffc0000 [ 620.783165][ T37] audit: type=1326 audit(1761467727.915:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 620.783629][ T37] audit: type=1326 audit(1761467727.915:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 620.784694][ T37] audit: type=1326 audit(1761467727.915:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9538 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 622.133966][ T9360] hsr_slave_0: entered promiscuous mode [ 622.134858][ T9360] hsr_slave_1: entered promiscuous mode [ 622.135747][ T9360] debugfs: 'hsr0' already exists in 'hsr' [ 622.135769][ T9360] Cannot create hsr debugfs directory [ 622.481146][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.481321][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.481482][ T9437] bridge_slave_0: entered allmulticast mode [ 622.483687][ T9437] bridge_slave_0: entered promiscuous mode [ 622.623949][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.624096][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.624344][ T9437] bridge_slave_1: entered allmulticast mode [ 622.647600][ T9437] bridge_slave_1: entered promiscuous mode [ 624.850756][ T1013] bridge_slave_1: left allmulticast mode [ 624.850793][ T1013] bridge_slave_1: left promiscuous mode [ 624.851048][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.912128][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.912295][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.040026][ T1013] bridge_slave_0: left allmulticast mode [ 625.040053][ T1013] bridge_slave_0: left promiscuous mode [ 625.040412][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.474458][ T1013] bridge_slave_1: left allmulticast mode [ 627.474486][ T1013] bridge_slave_1: left promiscuous mode [ 627.474729][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.778246][ T1013] bridge_slave_0: left allmulticast mode [ 627.778265][ T1013] bridge_slave_0: left promiscuous mode [ 627.778423][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.868942][ T1013] bridge_slave_1: left allmulticast mode [ 627.868962][ T1013] bridge_slave_1: left promiscuous mode [ 627.869520][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.957825][ T1013] bridge_slave_0: left allmulticast mode [ 627.957854][ T1013] bridge_slave_0: left promiscuous mode [ 627.958107][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.397104][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.507617][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.580325][ T1013] bond0 (unregistering): Released all slaves [ 628.787083][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.946920][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.030997][ T1013] bond0 (unregistering): Released all slaves [ 630.270719][ T9598] tmpfs: Unknown parameter './file0' [ 630.446993][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.526913][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.589845][ T1013] bond0 (unregistering): Released all slaves [ 630.750628][ T9437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.832605][ T9437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.991209][ T9604] fuse: Bad value for 'fd' [ 630.998277][ T9604] netlink: 56 bytes leftover after parsing attributes in process `syz.0.981'. [ 631.187063][ T9609] 9pnet_fd: Insufficient options for proto=fd [ 631.570326][ T9437] team0: Port device team_slave_0 added [ 631.623948][ T9437] team0: Port device team_slave_1 added [ 633.394641][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.394657][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.394681][ T9437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.601719][ T1013] hsr_slave_0: left promiscuous mode [ 634.636222][ T1013] hsr_slave_1: left promiscuous mode [ 634.637272][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.677073][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.856192][ T1013] hsr_slave_0: left promiscuous mode [ 634.896159][ T1013] hsr_slave_1: left promiscuous mode [ 634.897223][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.917061][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.207693][ T1013] hsr_slave_0: left promiscuous mode [ 637.279842][ T1013] hsr_slave_1: left promiscuous mode [ 637.280864][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.343847][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.227380][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.249250][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.416124][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.439850][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.440450][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.853591][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 642.336832][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 642.380504][ T62] Bluetooth: hci5: command tx timeout [ 644.116885][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 644.459023][ T62] Bluetooth: hci5: command tx timeout [ 645.637440][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 645.786714][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 646.526138][ T62] Bluetooth: hci5: command tx timeout [ 646.806926][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 647.027599][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 649.465227][ T62] Bluetooth: hci5: command tx timeout [ 649.669122][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.669138][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.669164][ T9437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.430890][ T9437] hsr_slave_0: entered promiscuous mode [ 651.433261][ T9437] hsr_slave_1: entered promiscuous mode [ 651.442754][ T9437] debugfs: 'hsr0' already exists in 'hsr' [ 651.442780][ T9437] Cannot create hsr debugfs directory [ 653.053571][ T9651] chnl_net:caif_netlink_parms(): no params data found [ 654.706391][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 654.712525][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 654.715875][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.718760][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 654.719521][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 656.599448][ T9736] 9pnet_fd: Insufficient options for proto=fd [ 656.678897][ T9736] 9pnet: Unknown protocol version 9p200 [ 656.829893][ T62] Bluetooth: hci4: command tx timeout [ 658.906218][ T62] Bluetooth: hci4: command tx timeout [ 661.341196][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.341322][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.341546][ T9651] bridge_slave_0: entered allmulticast mode [ 661.344100][ T9651] bridge_slave_0: entered promiscuous mode [ 662.240792][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.241061][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.241654][ T9651] bridge_slave_1: entered allmulticast mode [ 662.250624][ T9651] bridge_slave_1: entered promiscuous mode [ 662.731791][ T62] Bluetooth: hci4: command tx timeout [ 663.191143][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.293264][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.591074][ T9651] team0: Port device team_slave_0 added [ 663.660494][ T9651] team0: Port device team_slave_1 added [ 665.011368][ T62] Bluetooth: hci4: command tx timeout [ 666.372845][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.372861][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.372885][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.475074][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.475087][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.475102][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.395269][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 669.412237][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 669.413597][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 669.435198][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 669.443797][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 672.371646][ T62] Bluetooth: hci0: command tx timeout [ 674.378115][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 674.426104][ T5118] Bluetooth: hci0: command tx timeout [ 674.545827][ T9651] hsr_slave_0: entered promiscuous mode [ 674.555110][ T9651] hsr_slave_1: entered promiscuous mode [ 674.563023][ T9651] debugfs: 'hsr0' already exists in 'hsr' [ 674.563049][ T9651] Cannot create hsr debugfs directory [ 674.789620][ T9718] chnl_net:caif_netlink_parms(): no params data found [ 676.777455][ T5118] Bluetooth: hci0: command tx timeout [ 677.027853][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.028026][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.028228][ T9718] bridge_slave_0: entered allmulticast mode [ 677.029955][ T9718] bridge_slave_0: entered promiscuous mode [ 677.086678][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.086809][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.087023][ T9718] bridge_slave_1: entered allmulticast mode [ 677.089829][ T9718] bridge_slave_1: entered promiscuous mode [ 680.831599][ T5118] Bluetooth: hci0: command tx timeout [ 682.480093][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.481701][ T9847] sctp: [Deprecated]: syz.2.1037 (pid 9847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.481701][ T9847] Use struct sctp_sack_info instead [ 682.531337][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.720560][ T9718] team0: Port device team_slave_0 added [ 684.735396][ T9718] team0: Port device team_slave_1 added [ 687.409851][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.409921][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.793624][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.793635][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.793650][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.800966][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.800981][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.801006][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.801861][ T9796] chnl_net:caif_netlink_parms(): no params data found [ 688.824083][ T1013] bridge_slave_1: left allmulticast mode [ 688.824110][ T1013] bridge_slave_1: left promiscuous mode [ 688.824332][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.897551][ T1013] bridge_slave_0: left allmulticast mode [ 688.897572][ T1013] bridge_slave_0: left promiscuous mode [ 688.897752][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.937258][ T1013] bridge_slave_1: left allmulticast mode [ 688.937278][ T1013] bridge_slave_1: left promiscuous mode [ 688.937444][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.001947][ T1013] bridge_slave_0: left allmulticast mode [ 689.001968][ T1013] bridge_slave_0: left promiscuous mode [ 689.002152][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.070029][ T1013] bridge_slave_1: left allmulticast mode [ 689.070049][ T1013] bridge_slave_1: left promiscuous mode [ 689.070198][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.126094][ T1013] bridge_slave_0: left allmulticast mode [ 689.126122][ T1013] bridge_slave_0: left promiscuous mode [ 689.126316][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.623550][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.696902][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.757021][ T1013] bond0 (unregistering): Released all slaves [ 691.430597][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.516763][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.592428][ T1013] bond0 (unregistering): Released all slaves [ 694.267713][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.208376][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.245479][ T1013] bond0 (unregistering): Released all slaves [ 696.328903][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 696.328919][ T37] audit: type=1326 audit(1761468572.203:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.329648][ T37] audit: type=1326 audit(1761468572.203:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.330019][ T37] audit: type=1326 audit(1761468572.203:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.330366][ T37] audit: type=1326 audit(1761468572.203:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.330931][ T37] audit: type=1326 audit(1761468572.203:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.331280][ T37] audit: type=1326 audit(1761468572.203:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.331760][ T37] audit: type=1326 audit(1761468572.203:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.332433][ T37] audit: type=1326 audit(1761468572.203:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.332748][ T37] audit: type=1326 audit(1761468572.203:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 696.342924][ T37] audit: type=1326 audit(1761468572.213:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7ffc0000 [ 697.272479][ T9718] hsr_slave_0: entered promiscuous mode [ 697.274963][ T9718] hsr_slave_1: entered promiscuous mode [ 697.275915][ T9718] debugfs: 'hsr0' already exists in 'hsr' [ 697.275937][ T9718] Cannot create hsr debugfs directory [ 698.630308][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.780581][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.783709][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.788101][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.788811][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.919756][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.919952][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.920159][ T9796] bridge_slave_0: entered allmulticast mode [ 698.923085][ T9796] bridge_slave_0: entered promiscuous mode [ 699.991830][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.991971][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.992205][ T9796] bridge_slave_1: entered allmulticast mode [ 699.994866][ T9796] bridge_slave_1: entered promiscuous mode [ 700.146307][ T1013] hsr_slave_0: left promiscuous mode [ 700.177443][ T1013] hsr_slave_1: left promiscuous mode [ 700.178448][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.213432][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.429488][ T1013] hsr_slave_0: left promiscuous mode [ 701.438873][ T62] Bluetooth: hci1: command tx timeout [ 701.575483][ T1013] hsr_slave_1: left promiscuous mode [ 701.576495][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.624046][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.739326][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 702.740551][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 702.740923][ T1013] hsr_slave_0: left promiscuous mode [ 702.775310][ T1013] hsr_slave_1: left promiscuous mode [ 702.775943][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.879957][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.944859][ T9969] 9pnet_virtio: no channels available for device syz [ 703.349391][ T5118] Bluetooth: hci1: command tx timeout [ 703.566291][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 703.708973][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 705.328087][ T5118] Bluetooth: hci1: command tx timeout [ 707.281689][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 707.328531][ T5118] Bluetooth: hci1: command tx timeout [ 707.330893][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 707.330908][ T37] audit: type=1326 audit(1761468583.751:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.330950][ T37] audit: type=1326 audit(1761468583.751:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.332749][ T37] audit: type=1326 audit(1761468583.751:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.332793][ T37] audit: type=1326 audit(1761468583.751:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.332833][ T37] audit: type=1326 audit(1761468583.751:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.332873][ T37] audit: type=1326 audit(1761468583.751:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.332911][ T37] audit: type=1326 audit(1761468583.751:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.332950][ T37] audit: type=1326 audit(1761468583.751:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 707.332990][ T37] audit: type=1326 audit(1761468583.751:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cabdcefc9 code=0x7fc00000 [ 708.607103][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 710.853281][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 711.977832][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 712.795722][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.814442][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.132065][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 719.147615][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 719.149019][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 719.150528][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 719.153410][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 721.107629][ T62] Bluetooth: hci4: command tx timeout [ 721.392304][ T9796] team0: Port device team_slave_0 added [ 722.639767][ T9796] team0: Port device team_slave_1 added [ 723.874334][ T62] Bluetooth: hci4: command tx timeout [ 724.460646][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.460657][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.460671][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.495261][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.495278][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.495303][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.986247][ T9796] hsr_slave_0: entered promiscuous mode [ 724.988134][ T9796] hsr_slave_1: entered promiscuous mode [ 724.992176][ T9796] debugfs: 'hsr0' already exists in 'hsr' [ 724.992201][ T9796] Cannot create hsr debugfs directory [ 725.828767][ T62] Bluetooth: hci4: command tx timeout [ 725.829003][ T9936] chnl_net:caif_netlink_parms(): no params data found [ 726.474027][T10018] chnl_net:caif_netlink_parms(): no params data found [ 726.629427][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 726.667593][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 726.677563][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 726.710075][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 726.738652][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 728.483960][ T5118] Bluetooth: hci4: command tx timeout [ 728.799294][ T62] Bluetooth: hci0: command tx timeout [ 730.282795][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.283116][ T9936] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.283260][ T9936] bridge_slave_0: entered allmulticast mode [ 730.851837][ T62] Bluetooth: hci0: command tx timeout [ 730.896571][ T9936] bridge_slave_0: entered promiscuous mode [ 731.069319][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.069699][ T9936] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.069975][ T9936] bridge_slave_1: entered allmulticast mode [ 731.072992][ T9936] bridge_slave_1: entered promiscuous mode [ 733.009357][ T62] Bluetooth: hci0: command tx timeout [ 733.159997][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 733.401150][T10018] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.401228][T10018] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.401359][T10018] bridge_slave_0: entered allmulticast mode [ 733.419033][T10018] bridge_slave_0: entered promiscuous mode [ 733.513474][ T9936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.525459][T10018] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.525762][T10018] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.526013][T10018] bridge_slave_1: entered allmulticast mode [ 733.539130][T10018] bridge_slave_1: entered promiscuous mode [ 733.622037][ T9936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.972923][ T62] Bluetooth: hci0: command tx timeout [ 735.022047][ T37] audit: type=1800 audit(1761468612.820:928): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1105" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 735.074119][T10018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.125868][ T9936] team0: Port device team_slave_0 added [ 736.129637][T10018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.160519][ T9936] team0: Port device team_slave_1 added [ 737.832221][T10018] team0: Port device team_slave_0 added [ 737.834740][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.834755][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.834780][ T9936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.898251][T10018] team0: Port device team_slave_1 added [ 737.899997][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.900010][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.900035][ T9936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.213437][T10018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.213452][T10018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.213486][T10018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.230746][T10018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.230762][T10018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.230787][T10018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.226324][ T9936] hsr_slave_0: entered promiscuous mode [ 739.227759][ T9936] hsr_slave_1: entered promiscuous mode [ 739.228775][ T9936] debugfs: 'hsr0' already exists in 'hsr' [ 739.228797][ T9936] Cannot create hsr debugfs directory [ 740.574076][T10166] overlayfs: failed to clone lowerpath [ 744.132030][T10018] hsr_slave_0: entered promiscuous mode [ 744.133591][T10018] hsr_slave_1: entered promiscuous mode [ 744.134706][T10018] debugfs: 'hsr0' already exists in 'hsr' [ 744.134728][T10018] Cannot create hsr debugfs directory [ 744.670334][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.670401][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.236208][T10069] chnl_net:caif_netlink_parms(): no params data found [ 748.945959][ T1013] bridge_slave_1: left allmulticast mode [ 748.945978][ T1013] bridge_slave_1: left promiscuous mode [ 748.946138][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.028905][ T1013] bridge_slave_0: left allmulticast mode [ 749.028926][ T1013] bridge_slave_0: left promiscuous mode [ 749.029098][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.104578][ T1013] bridge_slave_1: left allmulticast mode [ 749.104607][ T1013] bridge_slave_1: left promiscuous mode [ 749.104856][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.124311][T10208] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 749.204629][ T1013] bridge_slave_0: left allmulticast mode [ 749.204656][ T1013] bridge_slave_0: left promiscuous mode [ 749.204964][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.293314][ T1013] bridge_slave_1: left allmulticast mode [ 749.293344][ T1013] bridge_slave_1: left promiscuous mode [ 749.293581][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.024025][ T1013] bridge_slave_0: left allmulticast mode [ 750.024053][ T1013] bridge_slave_0: left promiscuous mode [ 750.029136][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.538602][ T1013] bridge_slave_1: left allmulticast mode [ 750.538629][ T1013] bridge_slave_1: left promiscuous mode [ 750.538875][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.209594][ T1013] bridge_slave_0: left allmulticast mode [ 753.209624][ T1013] bridge_slave_0: left promiscuous mode [ 753.209895][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.576627][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.680820][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.749661][ T1013] bond0 (unregistering): Released all slaves [ 755.976780][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.052665][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.120967][ T1013] bond0 (unregistering): Released all slaves [ 756.405583][T10249] overlayfs: missing 'lowerdir' [ 757.274886][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 757.288414][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 757.291799][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 757.293087][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 757.293956][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 757.659017][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.008623][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.356119][ T1013] bond0 (unregistering): Released all slaves [ 759.283901][ T5118] Bluetooth: hci5: command tx timeout [ 760.163360][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.537773][ T5118] Bluetooth: hci5: command tx timeout [ 764.522783][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.582800][ T1013] bond0 (unregistering): Released all slaves [ 765.222103][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.222240][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.222371][T10069] bridge_slave_0: entered allmulticast mode [ 765.224073][T10069] bridge_slave_0: entered promiscuous mode [ 765.237897][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.238032][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.238202][T10069] bridge_slave_1: entered allmulticast mode [ 765.241088][T10069] bridge_slave_1: entered promiscuous mode [ 765.462485][ T5118] Bluetooth: hci5: command tx timeout [ 765.842946][T10069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.041069][T10069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.703797][ T5118] Bluetooth: hci5: command tx timeout [ 767.911933][ T1013] hsr_slave_0: left promiscuous mode [ 768.102405][ T1013] hsr_slave_1: left promiscuous mode [ 768.103503][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.130970][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.692734][ T1013] hsr_slave_0: left promiscuous mode [ 769.892936][ T1013] hsr_slave_1: left promiscuous mode [ 769.894054][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.901044][T10320] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1145'. [ 770.986446][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.093328][ T1013] hsr_slave_0: left promiscuous mode [ 771.112323][ T1013] hsr_slave_1: left promiscuous mode [ 771.113011][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.150924][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.293309][ T1013] hsr_slave_0: left promiscuous mode [ 771.312385][ T1013] hsr_slave_1: left promiscuous mode [ 771.313265][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.351033][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.855265][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 773.196878][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 773.209057][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 773.210467][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 773.212137][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 773.212916][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 773.855951][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 775.229638][ T62] Bluetooth: hci1: command tx timeout [ 777.170964][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 777.209009][ T62] Bluetooth: hci1: command tx timeout [ 778.285048][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 779.291911][ T62] Bluetooth: hci1: command tx timeout [ 781.528568][ T62] Bluetooth: hci1: command tx timeout [ 783.829912][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 783.991727][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 786.195559][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 786.227444][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 786.228797][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 786.232980][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 786.233721][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 786.572424][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 786.715629][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 787.252325][T10069] team0: Port device team_slave_0 added [ 787.286642][T10383] tipc: Enabling of bearer rejected, failed to enable media [ 788.698869][ T5118] Bluetooth: hci6: command tx timeout [ 791.065483][ T5118] Bluetooth: hci6: command tx timeout [ 793.717808][ T5118] Bluetooth: hci6: command tx timeout [ 794.164854][T10420] overlayfs: failed to clone upperpath [ 795.686759][ T5118] Bluetooth: hci6: command tx timeout [ 796.537731][T10259] chnl_net:caif_netlink_parms(): no params data found [ 796.841823][T10439] bond0: option xmit_hash_policy: invalid value (9) [ 796.964410][T10381] chnl_net:caif_netlink_parms(): no params data found [ 796.972267][T10328] chnl_net:caif_netlink_parms(): no params data found [ 796.993713][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 796.994056][T10440] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 798.385756][ T37] audit: type=1326 audit(1761468679.335:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.386238][ T37] audit: type=1326 audit(1761468679.335:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.386369][ T37] audit: type=1326 audit(1761468679.335:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.386781][ T37] audit: type=1326 audit(1761468679.335:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.386919][ T37] audit: type=1326 audit(1761468679.335:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.387237][ T37] audit: type=1326 audit(1761468679.335:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.387634][ T37] audit: type=1326 audit(1761468679.335:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.388037][ T37] audit: type=1326 audit(1761468679.335:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.388239][ T37] audit: type=1326 audit(1761468679.335:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 798.388657][ T37] audit: type=1326 audit(1761468679.335:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f73f740efc9 code=0x7ffc0000 [ 799.972572][T10259] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.972714][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.972957][T10259] bridge_slave_0: entered allmulticast mode [ 800.012306][T10259] bridge_slave_0: entered promiscuous mode [ 800.146380][T10259] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.146523][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.146754][T10259] bridge_slave_1: entered allmulticast mode [ 800.149678][T10259] bridge_slave_1: entered promiscuous mode [ 801.504511][T10474] netlink: 'syz.0.1178': attribute type 21 has an invalid length. [ 801.504529][T10474] IPv6: NLM_F_CREATE should be specified when creating new route [ 801.504600][T10474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.504606][T10474] IPv6: NLM_F_CREATE should be set when creating new route [ 801.504825][T10474] IPv6: NLM_F_CREATE should be set when creating new route [ 801.504844][T10474] IPv6: NLM_F_CREATE should be set when creating new route [ 802.713511][T10259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.797957][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.798001][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 802.867351][T10259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.984795][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.984942][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.985129][T10381] bridge_slave_0: entered allmulticast mode [ 803.042215][T10381] bridge_slave_0: entered promiscuous mode [ 803.128663][T10328] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.128789][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.129001][T10328] bridge_slave_0: entered allmulticast mode [ 803.131800][T10328] bridge_slave_0: entered promiscuous mode [ 803.261395][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.277734][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.277923][T10381] bridge_slave_1: entered allmulticast mode [ 803.279524][T10381] bridge_slave_1: entered promiscuous mode [ 803.310964][T10328] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.311100][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.311330][T10328] bridge_slave_1: entered allmulticast mode [ 803.324912][T10328] bridge_slave_1: entered promiscuous mode [ 806.330586][T10259] team0: Port device team_slave_0 added [ 807.565013][T10259] team0: Port device team_slave_1 added [ 807.753642][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.930247][T10328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.932695][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.363730][T10328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.364245][T10259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.364253][T10259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.364267][T10259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.550669][T10259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.550686][T10259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.550709][T10259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.774037][T10381] team0: Port device team_slave_0 added [ 808.902219][T10381] team0: Port device team_slave_1 added [ 808.905053][T10328] team0: Port device team_slave_0 added [ 809.236412][T10328] team0: Port device team_slave_1 added [ 812.702801][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.702817][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.702842][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.763817][T10259] hsr_slave_0: entered promiscuous mode [ 812.765253][T10259] hsr_slave_1: entered promiscuous mode [ 812.766098][T10259] debugfs: 'hsr0' already exists in 'hsr' [ 812.766121][T10259] Cannot create hsr debugfs directory [ 812.767240][T10328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.767252][T10328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.767275][T10328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.769931][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.769950][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.769975][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.788858][T10328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.788874][T10328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.788897][T10328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.268251][T10381] hsr_slave_0: entered promiscuous mode [ 814.269833][T10381] hsr_slave_1: entered promiscuous mode [ 814.271162][T10381] debugfs: 'hsr0' already exists in 'hsr' [ 814.271186][T10381] Cannot create hsr debugfs directory [ 814.368330][T10328] hsr_slave_0: entered promiscuous mode [ 814.369648][T10328] hsr_slave_1: entered promiscuous mode [ 814.370266][T10328] debugfs: 'hsr0' already exists in 'hsr' [ 814.370288][T10328] Cannot create hsr debugfs directory [ 816.283322][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.295865][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.297254][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.333179][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.360549][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 818.553351][ T5118] Bluetooth: hci0: command tx timeout [ 819.882563][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 819.882581][ T37] audit: type=1326 audit(1761468701.895:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.2.1197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73f740efc9 code=0x0 [ 821.188437][ T5118] Bluetooth: hci0: command tx timeout [ 823.141221][ T5118] Bluetooth: hci0: command tx timeout [ 824.457594][T10593] overlayfs: failed to clone lowerpath [ 825.336138][ T5118] Bluetooth: hci0: command tx timeout [ 825.446019][T10531] chnl_net:caif_netlink_parms(): no params data found [ 827.176637][ T1013] bridge_slave_1: left allmulticast mode [ 827.176666][ T1013] bridge_slave_1: left promiscuous mode [ 827.176968][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.390149][ T1013] bridge_slave_0: left allmulticast mode [ 827.390169][ T1013] bridge_slave_0: left promiscuous mode [ 827.390350][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.476977][ T1013] bridge_slave_1: left allmulticast mode [ 828.477005][ T1013] bridge_slave_1: left promiscuous mode [ 828.477280][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.553262][ T1013] bridge_slave_0: left allmulticast mode [ 828.553289][ T1013] bridge_slave_0: left promiscuous mode [ 828.553537][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.640928][ T1013] bridge_slave_1: left allmulticast mode [ 828.640949][ T1013] bridge_slave_1: left promiscuous mode [ 828.641101][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.714422][ T1013] bridge_slave_0: left allmulticast mode [ 828.714442][ T1013] bridge_slave_0: left promiscuous mode [ 828.714597][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.999864][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.165660][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.243626][ T1013] bond0 (unregistering): Released all slaves [ 829.400190][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.504957][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.563621][ T1013] bond0 (unregistering): Released all slaves [ 829.743039][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.838441][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.897411][ T1013] bond0 (unregistering): Released all slaves [ 831.367306][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.368361][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.377576][T10531] bridge_slave_0: entered allmulticast mode [ 831.557664][T10531] bridge_slave_0: entered promiscuous mode [ 832.766764][T10635] 9pnet_fd: Insufficient options for proto=fd [ 833.980751][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 834.017060][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 834.092239][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 834.288752][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 834.453050][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 834.527480][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.527920][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.529186][T10531] bridge_slave_1: entered allmulticast mode [ 834.563704][T10531] bridge_slave_1: entered promiscuous mode [ 835.363978][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.368588][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.533874][ T1013] hsr_slave_0: left promiscuous mode [ 835.629889][ T1013] hsr_slave_1: left promiscuous mode [ 835.630921][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.668705][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.895975][ T1013] hsr_slave_0: left promiscuous mode [ 837.122427][ T62] Bluetooth: hci4: command tx timeout [ 837.123282][ T1013] hsr_slave_1: left promiscuous mode [ 837.123897][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.064010][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.039206][ T62] Bluetooth: hci4: command tx timeout [ 840.259121][ T26] ================================================================== [ 840.259137][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 840.259167][ T26] Read of size 8 at addr ffffc9000c7d9090 by task irq_work/1/26 [ 840.259182][ T26] [ 840.259205][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 840.259224][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 840.259237][ T26] Call Trace: [ 840.259247][ T26] [ 840.259254][ T26] dump_stack_lvl+0x189/0x250 [ 840.259276][ T26] ? run_irq_workd+0x116/0x190 [ 840.259296][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.259318][ T26] ? __pfx__printk+0x10/0x10 [ 840.259338][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 840.259359][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 840.259381][ T26] print_report+0xca/0x240 [ 840.259402][ T26] ? run_irq_workd+0x116/0x190 [ 840.259427][ T26] kasan_report+0x118/0x150 [ 840.259448][ T26] ? run_irq_workd+0x116/0x190 [ 840.259473][ T26] run_irq_workd+0x116/0x190 [ 840.259491][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 840.259511][ T26] ? schedule+0x91/0x360 [ 840.259532][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 840.259552][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 840.259570][ T26] smpboot_thread_fn+0x542/0xa60 [ 840.259591][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 840.259613][ T26] kthread+0x711/0x8a0 [ 840.259636][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 840.259655][ T26] ? __pfx_kthread+0x10/0x10 [ 840.259674][ T26] ? rt_spin_unlock+0x150/0x200 [ 840.259693][ T26] ? rt_spin_unlock+0x161/0x200 [ 840.259708][ T26] ? __pfx_kthread+0x10/0x10 [ 840.259728][ T26] ret_from_fork+0x4bc/0x870 [ 840.259747][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 840.259769][ T26] ? __switch_to_asm+0x39/0x70 [ 840.259785][ T26] ? __switch_to_asm+0x33/0x70 [ 840.259801][ T26] ? __pfx_kthread+0x10/0x10 [ 840.259821][ T26] ret_from_fork_asm+0x1a/0x30 [ 840.259841][ T26] [ 840.259847][ T26] [ 840.259851][ T26] The buggy address belongs to a vmalloc virtual mapping [ 840.259876][ T26] Memory state around the buggy address: [ 840.259886][ T26] ffffc9000c7d8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 840.259897][ T26] ffffc9000c7d9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 840.259909][ T26] >ffffc9000c7d9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 840.259920][ T26] ^ [ 840.259929][ T26] ffffc9000c7d9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 840.259940][ T26] ffffc9000c7d9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 840.259948][ T26] ================================================================== [ 840.259969][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 840.259981][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 840.260000][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 840.260010][ T26] Call Trace: [ 840.260016][ T26] [ 840.260023][ T26] dump_stack_lvl+0x99/0x250 [ 840.260044][ T26] ? __asan_memcpy+0x40/0x70 [ 840.260061][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.260082][ T26] ? __pfx__printk+0x10/0x10 [ 840.260106][ T26] vpanic+0x237/0x6d0 [ 840.260121][ T26] ? __pfx_vpanic+0x10/0x10 [ 840.260141][ T26] panic+0xb9/0xc0 [ 840.260154][ T26] ? __pfx_panic+0x10/0x10 [ 840.260168][ T26] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 840.260190][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 840.260214][ T26] ? run_irq_workd+0x116/0x190 [ 840.260233][ T26] check_panic_on_warn+0x89/0xb0 [ 840.260250][ T26] ? run_irq_workd+0x116/0x190 [ 840.260270][ T26] end_report+0x78/0x160 [ 840.260290][ T26] kasan_report+0x129/0x150 [ 840.260312][ T26] ? run_irq_workd+0x116/0x190 [ 840.260334][ T26] run_irq_workd+0x116/0x190 [ 840.260353][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 840.260372][ T26] ? schedule+0x91/0x360 [ 840.260390][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 840.260410][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 840.260436][ T26] smpboot_thread_fn+0x542/0xa60 [ 840.260455][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 840.260477][ T26] kthread+0x711/0x8a0 [ 840.260499][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 840.260517][ T26] ? __pfx_kthread+0x10/0x10 [ 840.260536][ T26] ? rt_spin_unlock+0x150/0x200 [ 840.260553][ T26] ? rt_spin_unlock+0x161/0x200 [ 840.260567][ T26] ? __pfx_kthread+0x10/0x10 [ 840.260588][ T26] ret_from_fork+0x4bc/0x870 [ 840.260606][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 840.260627][ T26] ? __switch_to_asm+0x39/0x70 [ 840.260641][ T26] ? __switch_to_asm+0x33/0x70 [ 840.260655][ T26] ? __pfx_kthread+0x10/0x10 [ 840.260676][ T26] ret_from_fork_asm+0x1a/0x30 [ 840.260701][ T26] [ 840.260976][ T26] Kernel Offset: disabled