last executing test programs: 22m36.103551927s ago: executing program 1 (id=2575): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 22m35.598231136s ago: executing program 1 (id=2579): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000001d000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080) 22m35.139600988s ago: executing program 1 (id=2584): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 22m34.559540566s ago: executing program 1 (id=2590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x2080000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x17081, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 22m34.194434411s ago: executing program 1 (id=2595): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ptrace$setsig(0x4203, 0x0, 0x81, &(0x7f00000000c0)={0x8, 0x401, 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m33.423535494s ago: executing program 1 (id=2600): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01002a00000000000000100000001000180004000000010000000000000e01"], 0x0, 0x2c, 0x0, 0x1, 0x2}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) 22m18.283248842s ago: executing program 32 (id=2600): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01002a00000000000000100000001000180004000000010000000000000e01"], 0x0, 0x2c, 0x0, 0x1, 0x2}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) 15m27.924617399s ago: executing program 2 (id=5233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f757000000800"], 0xd4}}, 0x0) 15m25.445489585s ago: executing program 2 (id=5245): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15m25.268014041s ago: executing program 2 (id=5247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xca, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 15m19.250622825s ago: executing program 2 (id=5255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f757000000800"], 0xd4}}, 0x0) 15m17.024365124s ago: executing program 2 (id=5263): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) 15m16.925610705s ago: executing program 2 (id=5264): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040044) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) 15m0.456735664s ago: executing program 33 (id=5264): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040044) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) 11m47.634524815s ago: executing program 4 (id=5610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xb6) 11m46.999835392s ago: executing program 4 (id=5611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000004afadc81f25fe4be000000e5ff94000800c81199a051e1e8a9a36a750e7c5d6f095d1bdca176ac045e8c523feeeecae8c9abe2703e29f372665cab185bb681e6fe88b20f73a93492d3eb8f8f8fafb9a0ac41ad34"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 11m44.450751034s ago: executing program 4 (id=5612): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040044) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) writev(r0, &(0x7f0000000940)=[{0x0}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x7) 11m38.716530981s ago: executing program 4 (id=5627): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000230900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280280001800b00010074756e6e656c00000400028008000340000001"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) 11m38.517364307s ago: executing program 4 (id=5629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x400000000000247, 0x0) 11m36.94922087s ago: executing program 4 (id=5635): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040044) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) writev(0xffffffffffffffff, &(0x7f0000000940)=[{0x0}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x7) 11m21.710867749s ago: executing program 34 (id=5635): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040044) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) writev(0xffffffffffffffff, &(0x7f0000000940)=[{0x0}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x7) 4m41.541138062s ago: executing program 5 (id=6403): r0 = syz_open_dev$usbfs(0x0, 0x555d1ea8, 0x4426c3) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f00000031c0)) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x87, 0x80}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x80108907, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m40.150853846s ago: executing program 5 (id=6406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) 4m39.907741491s ago: executing program 5 (id=6409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400050000002008001e0002"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004a044}, 0x4010) 4m38.551372985s ago: executing program 5 (id=6410): mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') 4m38.35655303s ago: executing program 5 (id=6411): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x38}, 0x20) 4m37.063485935s ago: executing program 5 (id=6413): r0 = syz_open_dev$usbfs(0x0, 0x555d1ea8, 0x4426c3) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f00000031c0)) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x87, 0x80}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x80108907, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m36.626829109s ago: executing program 35 (id=6413): r0 = syz_open_dev$usbfs(0x0, 0x555d1ea8, 0x4426c3) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f00000031c0)) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x87, 0x80}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x80108907, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m44.792604869s ago: executing program 6 (id=6977): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m43.707592213s ago: executing program 6 (id=6986): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) 1m43.387542717s ago: executing program 6 (id=6989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 1m43.162720755s ago: executing program 6 (id=6991): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8d3, 0x0, 0x31d, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x40008, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0xd7ed, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x8000000000000000, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m42.903506585s ago: executing program 6 (id=6994): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, 0x0, 0x5) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x400, 0x80000001) 1m42.663578891s ago: executing program 6 (id=6997): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setresuid(0xee01, 0x0, 0x0) fchown(r0, 0x0, 0x0) 1m27.504306722s ago: executing program 36 (id=6997): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setresuid(0xee01, 0x0, 0x0) fchown(r0, 0x0, 0x0) 9.341601342s ago: executing program 3 (id=7406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = io_uring_setup(0x3ead, &(0x7f0000000000)={0x0, 0x8b5c7, 0x400, 0x2, 0x30b}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) 8.762348265s ago: executing program 3 (id=7409): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0x40044145, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000980)={0x5, [[0x9, 0x6c8, 0x3, 0xd7, 0xe5, 0x2, 0x4, 0xffffffff], [0xfffffffc, 0x1, 0x80, 0x1, 0x6, 0x8, 0x9, 0xffffff33], [0x67, 0x8cb4, 0x0, 0xc, 0x6a, 0x7, 0x3b, 0xffffffff]], '\x00', [{0x9, 0xffffff1d, 0x0, 0x1, 0x0, 0x1}, {0x10, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x1}, {0x4c511534, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x5, 0x1}, {0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1ff, 0x8, 0x0, 0x1, 0x0, 0x1}, {0xffffff00, 0x8, 0x0, 0x1, 0x1, 0x1}, {0xf0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {0x101, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xfffffff8, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x9}) 4.971461115s ago: executing program 9 (id=7431): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972"], 0x40}}, 0x0) 4.594017295s ago: executing program 9 (id=7435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0x2, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 4.379513967s ago: executing program 9 (id=7437): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000200)=0x1) 4.111469618s ago: executing program 9 (id=7439): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) pselect6(0x40, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x896, 0x3, 0x2, 0x9, 0xdfa}, 0x0, &(0x7f0000000240)={0x9, 0xbd, 0xf76, 0xfffffffffffffff9, 0x3, 0xfa15, 0xb, 0x1000}, &(0x7f00000002c0), 0x0) 3.673676887s ago: executing program 0 (id=7443): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd701006000100070000000800090002"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.366367184s ago: executing program 0 (id=7446): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa0800, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xff000000, 'veth1_virt_wifi\x00', 'ip6gre0\x00', {}, {}, 0x21, 0x1, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x4, 0x5, 0xc, 0x5, 0x4], 0x3, 0x1}, {0x0, [0x0, 0x5, 0x5, 0x4, 0x4], 0x6, 0x8}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip_vti0\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.043516477s ago: executing program 9 (id=7449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = io_uring_setup(0x3ead, &(0x7f0000000000)={0x0, 0x8b5c7, 0x400, 0x2, 0x30b}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) 3.013241568s ago: executing program 7 (id=7450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 2.746531496s ago: executing program 3 (id=7451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.556316039s ago: executing program 3 (id=7452): socket(0x40000000015, 0x805, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.400371074s ago: executing program 0 (id=7454): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0}) write$tun(r1, 0x0, 0xa2) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001480)=""/4082, 0xff2}, {0x0}], 0x2) 2.295052259s ago: executing program 3 (id=7455): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2.187758526s ago: executing program 8 (id=7456): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.004897036s ago: executing program 8 (id=7457): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0xfffffffe, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.82062813s ago: executing program 8 (id=7458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0x2, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1.801527373s ago: executing program 7 (id=7459): socket$inet6(0xa, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x1fb}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.791852197s ago: executing program 9 (id=7460): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) pselect6(0x40, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x896, 0x3, 0x2, 0x9, 0xdfa}, 0x0, &(0x7f0000000240)={0x9, 0xbd, 0xf76, 0xfffffffffffffff9, 0x3, 0xfa15, 0xb, 0x1000}, &(0x7f00000002c0), 0x0) 1.619525781s ago: executing program 8 (id=7461): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 1.589337146s ago: executing program 7 (id=7462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.361408835s ago: executing program 8 (id=7463): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x20) 1.316835934s ago: executing program 0 (id=7464): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=""/139, 0x0, 0x8b, 0x1, 0x7}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.315243955s ago: executing program 7 (id=7465): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$kvm(0xffffffffffffff9c, 0x0, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) 1.314831359s ago: executing program 3 (id=7466): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0xa}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 679.361242ms ago: executing program 7 (id=7467): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x3, &(0x7f0000000440)={0x2a, 0x3, 0x80000000}) 541.983807ms ago: executing program 0 (id=7468): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e"], 0x0, 0x35, 0x0, 0x1}, 0x28) 491.733984ms ago: executing program 7 (id=7469): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 335.685348ms ago: executing program 0 (id=7470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = io_uring_setup(0x3ead, &(0x7f0000000000)={0x0, 0x8b5c7, 0x400, 0x2, 0x30b}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) 0s ago: executing program 8 (id=7471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0x2, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) kernel console output (not intermixed with test programs): th: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1133.572705][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1133.582763][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1133.608228][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1133.609042][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1133.842007][T22726] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5917'. [ 1134.919587][T22414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1135.021722][T22414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1135.103140][T22414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1135.149525][T22414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1135.548524][ T5800] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1135.642149][T22749] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5924'. [ 1136.591400][T22752] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5925'. [ 1137.187298][ T5800] Bluetooth: hci4: command tx timeout [ 1137.332888][T22656] chnl_net:caif_netlink_parms(): no params data found [ 1137.687510][T22656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.687783][T22656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.688112][T22656] bridge_slave_0: entered allmulticast mode [ 1137.691217][T22656] bridge_slave_0: entered promiscuous mode [ 1137.743138][T22656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.743290][T22656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.743527][T22656] bridge_slave_1: entered allmulticast mode [ 1137.771016][T22656] bridge_slave_1: entered promiscuous mode [ 1138.233638][T22656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.261343][T22656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.636723][T22784] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.5932'. [ 1139.236441][T22796] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5933'. [ 1139.239016][ T5800] Bluetooth: hci4: command tx timeout [ 1140.108792][T22656] team0: Port device team_slave_0 added [ 1140.110178][T22721] chnl_net:caif_netlink_parms(): no params data found [ 1140.149781][T22656] team0: Port device team_slave_1 added [ 1140.394220][T22813] netlink: 'syz.5.5939': attribute type 22 has an invalid length. [ 1140.830149][T22825] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1141.025819][T22656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.025839][T22656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.025872][T22656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.255492][T22656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.255506][T22656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.255528][T22656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.316651][ T5800] Bluetooth: hci4: command tx timeout [ 1141.489445][T22837] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5942'. [ 1143.400591][ T5800] Bluetooth: hci4: command tx timeout [ 1143.944968][T22721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.945057][T22721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.945200][T22721] bridge_slave_0: entered allmulticast mode [ 1143.946992][T22721] bridge_slave_0: entered promiscuous mode [ 1143.998565][T22656] hsr_slave_0: entered promiscuous mode [ 1144.000149][T22656] hsr_slave_1: entered promiscuous mode [ 1144.001346][T22656] debugfs: 'hsr0' already exists in 'hsr' [ 1144.001371][T22656] Cannot create hsr debugfs directory [ 1144.017143][T22721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.017483][T22721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.018249][T22721] bridge_slave_1: entered allmulticast mode [ 1144.036823][T22721] bridge_slave_1: entered promiscuous mode [ 1144.223937][T22721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.307888][T22721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.446567][T22721] team0: Port device team_slave_0 added [ 1144.499237][T22721] team0: Port device team_slave_1 added [ 1144.576027][T22414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.683688][T22866] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.5949'. [ 1145.232740][T22874] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5951'. [ 1145.835649][T22721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.835667][T22721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.835697][T22721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.233617][T22721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.233632][T22721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.233652][T22721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.408321][T22891] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.5958'. [ 1146.748129][T22721] hsr_slave_0: entered promiscuous mode [ 1146.749101][T22721] hsr_slave_1: entered promiscuous mode [ 1146.749806][T22721] debugfs: 'hsr0' already exists in 'hsr' [ 1146.749823][T22721] Cannot create hsr debugfs directory [ 1146.751845][T22414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.037541][T12101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.037724][T12101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.485072][T22901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5961'. [ 1148.310096][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.321969][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.798227][ T988] bridge_slave_1: left allmulticast mode [ 1148.798258][ T988] bridge_slave_1: left promiscuous mode [ 1148.798525][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.894389][ T988] bridge_slave_0: left allmulticast mode [ 1148.894420][ T988] bridge_slave_0: left promiscuous mode [ 1148.898959][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.038857][ T988] bridge_slave_1: left allmulticast mode [ 1149.038889][ T988] bridge_slave_1: left promiscuous mode [ 1149.039158][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.167473][T20004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1149.175948][ T988] bridge_slave_0: left allmulticast mode [ 1149.175975][ T988] bridge_slave_0: left promiscuous mode [ 1149.176186][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.214348][T20004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1149.223430][T20004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1149.234115][T20004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1149.251051][T20004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1151.340784][T20004] Bluetooth: hci0: command tx timeout [ 1151.589215][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.705342][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.770062][ T988] bond0 (unregistering): Released all slaves [ 1152.905423][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.966357][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.027573][ T988] bond0 (unregistering): Released all slaves [ 1153.395714][T20004] Bluetooth: hci0: command tx timeout [ 1154.784760][ T988] hsr_slave_0: left promiscuous mode [ 1154.824959][ T988] hsr_slave_1: left promiscuous mode [ 1154.825716][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.867463][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.045126][ T988] hsr_slave_0: left promiscuous mode [ 1155.086270][ T988] hsr_slave_1: left promiscuous mode [ 1155.087071][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.127461][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.474655][T20004] Bluetooth: hci0: command tx timeout [ 1155.908401][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1156.060401][T22990] fuse: Bad value for 'fd' [ 1156.075535][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1157.554684][T20004] Bluetooth: hci0: command tx timeout [ 1160.485310][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1160.655948][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1161.114857][T20004] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1161.185794][T23014] fuse: Bad value for 'fd' [ 1166.133530][T22928] chnl_net:caif_netlink_parms(): no params data found [ 1166.517652][T20004] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1169.060520][T22928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.060723][T22928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.060941][T22928] bridge_slave_0: entered allmulticast mode [ 1169.062850][T22928] bridge_slave_0: entered promiscuous mode [ 1169.125928][T22928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.126083][T22928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.126353][T22928] bridge_slave_1: entered allmulticast mode [ 1169.129404][T22928] bridge_slave_1: entered promiscuous mode [ 1169.232798][T22928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.239794][T22928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.347536][T22928] team0: Port device team_slave_0 added [ 1169.372152][T22928] team0: Port device team_slave_1 added [ 1169.467283][T20004] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1170.035677][T22928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.035697][T22928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.035729][T22928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.041771][T22928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.041788][T22928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.041819][T22928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.313696][T22928] hsr_slave_0: entered promiscuous mode [ 1172.321021][T22928] hsr_slave_1: entered promiscuous mode [ 1172.322226][T22928] debugfs: 'hsr0' already exists in 'hsr' [ 1172.322251][T22928] Cannot create hsr debugfs directory [ 1172.542757][T22656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1172.636287][T22656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1172.712616][T22656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1174.438253][T22656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1175.039984][T22721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1175.214694][T22721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1175.338952][T22721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1175.390142][T22721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1175.595652][ T988] bridge_slave_1: left allmulticast mode [ 1175.595696][ T988] bridge_slave_1: left promiscuous mode [ 1175.595953][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.655880][ T988] bridge_slave_0: left allmulticast mode [ 1175.655905][ T988] bridge_slave_0: left promiscuous mode [ 1175.656085][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.045472][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.185492][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.268000][ T988] bond0 (unregistering): Released all slaves [ 1181.964694][ T988] hsr_slave_0: left promiscuous mode [ 1182.174845][ T988] hsr_slave_1: left promiscuous mode [ 1182.177273][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.198878][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.183551][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1184.202091][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1184.212157][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1184.226072][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1184.227351][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1185.785514][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1186.202881][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1186.892085][T20004] Bluetooth: hci5: command tx timeout [ 1187.720541][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.720590][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.642193][T20004] Bluetooth: hci5: command tx timeout [ 1191.336168][T22721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.504026][T22928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1191.592954][T22928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1191.676969][T22928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1191.715305][T20004] Bluetooth: hci5: command tx timeout [ 1191.743374][T23174] chnl_net:caif_netlink_parms(): no params data found [ 1191.767594][T22928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1192.320757][T22721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.566944][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.582686][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.031706][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.031859][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.034263][T23174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.034370][T23174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.045760][T23174] bridge_slave_0: entered allmulticast mode [ 1193.071913][T23174] bridge_slave_0: entered promiscuous mode [ 1193.277992][T23174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.278120][T23174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.278371][T23174] bridge_slave_1: entered allmulticast mode [ 1193.281457][T23174] bridge_slave_1: entered promiscuous mode [ 1193.794759][T20004] Bluetooth: hci5: command tx timeout [ 1194.160640][T23174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.236738][T23174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.672488][T23174] team0: Port device team_slave_0 added [ 1194.709737][T23174] team0: Port device team_slave_1 added [ 1194.832947][T23174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.832967][T23174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.833023][T23174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.915564][T23174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.915584][T23174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.915610][T23174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.174156][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1195.205719][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1195.222442][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1195.265640][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1195.304880][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1195.822051][T23174] hsr_slave_0: entered promiscuous mode [ 1195.826699][T23174] hsr_slave_1: entered promiscuous mode [ 1195.829309][T23174] debugfs: 'hsr0' already exists in 'hsr' [ 1195.829374][T23174] Cannot create hsr debugfs directory [ 1196.109038][ T988] bridge_slave_1: left allmulticast mode [ 1196.109063][ T988] bridge_slave_1: left promiscuous mode [ 1196.109248][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.186184][ T988] bridge_slave_0: left allmulticast mode [ 1196.186214][ T988] bridge_slave_0: left promiscuous mode [ 1196.186564][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.804362][ T5800] Bluetooth: hci2: command tx timeout [ 1199.136558][T23270] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6063'. [ 1199.874724][ T5800] Bluetooth: hci2: command tx timeout [ 1200.175624][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.306835][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.367603][ T988] bond0 (unregistering): Released all slaves [ 1200.915581][ T988] hsr_slave_0: left promiscuous mode [ 1200.964590][ T988] hsr_slave_1: left promiscuous mode [ 1200.965597][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.005655][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.954603][ T5800] Bluetooth: hci2: command tx timeout [ 1201.960879][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1202.132075][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1203.020389][T22928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.341024][T22928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.574699][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.574846][T12088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.764007][T12095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.764257][T12095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.816423][T23304] netlink: 'syz.5.6075': attribute type 12 has an invalid length. [ 1203.945167][T23246] chnl_net:caif_netlink_parms(): no params data found [ 1204.054998][ T5800] Bluetooth: hci2: command tx timeout [ 1204.757155][T23246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.757289][T23246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.757612][T23246] bridge_slave_0: entered allmulticast mode [ 1204.761279][T23246] bridge_slave_0: entered promiscuous mode [ 1204.824827][T23246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.825028][T23246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.825601][T23246] bridge_slave_1: entered allmulticast mode [ 1204.831928][T23246] bridge_slave_1: entered promiscuous mode [ 1205.158294][T23246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.179404][T23246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.587108][T23246] team0: Port device team_slave_0 added [ 1205.872811][T23246] team0: Port device team_slave_1 added [ 1206.221887][T23246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.221907][T23246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.221938][T23246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.245761][T23246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.245813][T23246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.245889][T23246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.713411][T23174] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1207.740745][T23174] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1207.766791][T23174] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1209.554763][T23174] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1209.718224][T23246] hsr_slave_0: entered promiscuous mode [ 1209.735360][T23246] hsr_slave_1: entered promiscuous mode [ 1209.736441][T23246] debugfs: 'hsr0' already exists in 'hsr' [ 1209.736923][T23246] Cannot create hsr debugfs directory [ 1211.472879][T23355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6085'. [ 1211.473070][ T988] bridge_slave_1: left allmulticast mode [ 1211.473115][ T988] bridge_slave_1: left promiscuous mode [ 1211.473359][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.537897][T20004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1211.551442][T20004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1211.565108][T20004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1211.568230][T20004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1211.569565][T20004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1211.676271][ T988] bridge_slave_0: left allmulticast mode [ 1211.676299][ T988] bridge_slave_0: left promiscuous mode [ 1211.676571][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.714694][ T5800] Bluetooth: hci4: command tx timeout [ 1215.455217][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.806843][ T5800] Bluetooth: hci4: command tx timeout [ 1216.396930][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.438284][ T988] bond0 (unregistering): Released all slaves [ 1216.994902][ T988] hsr_slave_0: left promiscuous mode [ 1217.036831][ T988] hsr_slave_1: left promiscuous mode [ 1217.037516][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.060452][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.052160][ T5800] Bluetooth: hci4: command tx timeout [ 1219.425256][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1219.625244][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1221.250056][ T5800] Bluetooth: hci4: command tx timeout [ 1224.618527][T23174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.887390][T23174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.031448][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.031598][T12088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.034265][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.034393][T12088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.352299][T23357] chnl_net:caif_netlink_parms(): no params data found [ 1226.199996][ T5800] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1229.102455][T23246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1229.197323][T23246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1229.270586][T23357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.270786][T23357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.271008][T23357] bridge_slave_0: entered allmulticast mode [ 1229.273748][T23357] bridge_slave_0: entered promiscuous mode [ 1229.535071][T23246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1229.612135][T23357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.612282][T23357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.612545][T23357] bridge_slave_1: entered allmulticast mode [ 1229.636687][T23357] bridge_slave_1: entered promiscuous mode [ 1229.650556][T23246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1230.674417][T23357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.690978][T23487] netlink: 'syz.3.6110': attribute type 22 has an invalid length. [ 1230.722674][T23357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.883613][ T5800] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1233.257376][T23357] team0: Port device team_slave_0 added [ 1233.338199][T23357] team0: Port device team_slave_1 added [ 1233.487622][T23357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.487637][T23357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.487657][T23357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.579944][T23357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.579957][T23357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.579978][T23357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.052044][T23357] hsr_slave_0: entered promiscuous mode [ 1234.053573][T23357] hsr_slave_1: entered promiscuous mode [ 1234.066623][T23357] debugfs: 'hsr0' already exists in 'hsr' [ 1234.066649][T23357] Cannot create hsr debugfs directory [ 1234.098708][T23174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.661395][ T988] bridge_slave_1: left allmulticast mode [ 1234.661428][ T988] bridge_slave_1: left promiscuous mode [ 1234.687838][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.906213][ T988] bridge_slave_0: left allmulticast mode [ 1234.906246][ T988] bridge_slave_0: left promiscuous mode [ 1234.906548][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.309894][T23533] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.6118'. [ 1238.325324][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.444680][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.548306][ T988] bond0 (unregistering): Released all slaves [ 1238.967326][T23552] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.6126'. [ 1239.211065][ T988] hsr_slave_0: left promiscuous mode [ 1239.228461][ T988] hsr_slave_1: left promiscuous mode [ 1239.240302][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.265535][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.955640][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1244.242647][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1244.427557][T23577] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6133'. [ 1244.427648][T23577] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6133'. [ 1244.427668][T23577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6133'. [ 1244.559772][T23579] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.6134'. [ 1244.652295][T20004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1244.658045][T20004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1244.697453][T20004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1244.713929][T20004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1244.724441][T20004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1246.834833][ T5800] Bluetooth: hci0: command tx timeout [ 1248.914766][ T5800] Bluetooth: hci0: command tx timeout [ 1248.969226][T23246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.166465][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.166542][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.692387][T23612] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.6142'. [ 1249.748637][T23246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.309554][ T5800] Bluetooth: hci0: command tx timeout [ 1252.037087][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.037724][ T6731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.607480][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.607789][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.256444][ T5800] Bluetooth: hci0: command tx timeout [ 1255.455415][T23581] chnl_net:caif_netlink_parms(): no params data found [ 1256.317853][T23357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1256.407258][T23357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1256.752023][T20004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1256.753886][T23652] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1256.777587][T20004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1256.780992][T20004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1256.784346][T20004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1256.790150][T20004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1256.871083][T23357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1257.928522][T23661] overlay: Unknown parameter '/' [ 1259.217512][T20004] Bluetooth: hci2: command tx timeout [ 1259.471014][T23357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1259.604846][T23581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.604936][T23581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.605096][T23581] bridge_slave_0: entered allmulticast mode [ 1259.606917][T23581] bridge_slave_0: entered promiscuous mode [ 1259.977558][T23581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.977710][T23581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.977964][T23581] bridge_slave_1: entered allmulticast mode [ 1259.980912][T23581] bridge_slave_1: entered promiscuous mode [ 1260.128365][T23581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.185989][T23581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.347535][T23581] team0: Port device team_slave_0 added [ 1261.482459][T20004] Bluetooth: hci2: command tx timeout [ 1261.523552][T23581] team0: Port device team_slave_1 added [ 1263.318109][T23581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.318125][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.318145][T23581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.387013][T23581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.387033][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.387065][T23581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.554840][ T5800] Bluetooth: hci2: command tx timeout [ 1263.589216][ T988] bridge_slave_1: left allmulticast mode [ 1263.589248][ T988] bridge_slave_1: left promiscuous mode [ 1263.589505][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.659290][ T988] bridge_slave_0: left allmulticast mode [ 1263.659324][ T988] bridge_slave_0: left promiscuous mode [ 1263.659607][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.939972][T23687] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1264.057115][T23689] 9pnet_virtio: no channels available for device syz [ 1265.644819][ T5800] Bluetooth: hci2: command tx timeout [ 1266.815524][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.895949][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.918320][ T988] bond0 (unregistering): Released all slaves [ 1266.993707][T23581] hsr_slave_0: entered promiscuous mode [ 1267.001111][T23581] hsr_slave_1: entered promiscuous mode [ 1267.002256][T23581] debugfs: 'hsr0' already exists in 'hsr' [ 1267.002281][T23581] Cannot create hsr debugfs directory [ 1269.954676][ T988] hsr_slave_0: left promiscuous mode [ 1269.999414][ T988] hsr_slave_1: left promiscuous mode [ 1270.000507][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.035612][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.528129][T23716] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1271.297288][T20004] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1271.324999][T20004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1271.343601][T20004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1271.386694][T20004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1271.387648][T20004] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1271.525617][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1271.778324][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1273.494946][ T5800] Bluetooth: hci5: command tx timeout [ 1273.993345][T23650] chnl_net:caif_netlink_parms(): no params data found [ 1275.561395][ T5800] Bluetooth: hci5: command tx timeout [ 1277.797053][ T5800] Bluetooth: hci5: command tx timeout [ 1279.516927][T23650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.517174][T23650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.517449][T23650] bridge_slave_0: entered allmulticast mode [ 1279.520234][T23650] bridge_slave_0: entered promiscuous mode [ 1279.591382][T23650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.591546][T23650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.591766][T23650] bridge_slave_1: entered allmulticast mode [ 1279.594391][T23650] bridge_slave_1: entered promiscuous mode [ 1279.862742][T23650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.876196][ T5800] Bluetooth: hci5: command tx timeout [ 1279.980495][T23650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.347467][T23650] team0: Port device team_slave_0 added [ 1280.492760][T23650] team0: Port device team_slave_1 added [ 1283.912456][T23650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.912477][T23650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.912507][T23650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.030758][T23650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.030777][T23650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.030809][T23650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.032083][T23723] chnl_net:caif_netlink_parms(): no params data found [ 1286.183290][T23650] hsr_slave_0: entered promiscuous mode [ 1286.185802][T23650] hsr_slave_1: entered promiscuous mode [ 1286.188561][T23650] debugfs: 'hsr0' already exists in 'hsr' [ 1286.188636][T23650] Cannot create hsr debugfs directory [ 1286.207674][T23581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1286.615230][T23581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1286.815143][T23581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1286.918936][T23581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1286.988396][T23723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.988596][T23723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.988847][T23723] bridge_slave_0: entered allmulticast mode [ 1286.995274][T23723] bridge_slave_0: entered promiscuous mode [ 1287.061159][T23723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.063319][T23723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.085692][T23723] bridge_slave_1: entered allmulticast mode [ 1287.126031][T23723] bridge_slave_1: entered promiscuous mode [ 1287.408909][T23723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.483685][T23723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.896548][T23723] team0: Port device team_slave_0 added [ 1289.028086][T23723] team0: Port device team_slave_1 added [ 1289.271318][T23723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.271334][T23723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.271354][T23723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.330587][T23723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.330601][T23723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.330621][T23723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.340410][T23723] hsr_slave_0: entered promiscuous mode [ 1293.351203][T23723] hsr_slave_1: entered promiscuous mode [ 1293.352241][T23723] debugfs: 'hsr0' already exists in 'hsr' [ 1293.352267][T23723] Cannot create hsr debugfs directory [ 1299.451987][ T988] bridge_slave_1: left allmulticast mode [ 1299.452020][ T988] bridge_slave_1: left promiscuous mode [ 1299.452274][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.577759][ T988] bridge_slave_0: left allmulticast mode [ 1299.577789][ T988] bridge_slave_0: left promiscuous mode [ 1299.578058][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.392456][ T988] macvlan2: left promiscuous mode [ 1302.392739][ T988] bridge0: port 3(macvlan2) entered disabled state [ 1302.486151][ T988] bridge_slave_1: left allmulticast mode [ 1302.486182][ T988] bridge_slave_1: left promiscuous mode [ 1302.505003][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.577963][ T988] bridge_slave_0: left allmulticast mode [ 1302.577995][ T988] bridge_slave_0: left promiscuous mode [ 1302.578252][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.715097][ T988] bridge_slave_1: left allmulticast mode [ 1302.715130][ T988] bridge_slave_1: left promiscuous mode [ 1302.715385][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.786066][ T988] bridge_slave_0: left allmulticast mode [ 1302.786098][ T988] bridge_slave_0: left promiscuous mode [ 1302.786354][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.077693][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.155313][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.227885][ T988] bond0 (unregistering): Released all slaves [ 1306.883617][T20004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1306.936872][T20004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1306.945543][T20004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1306.962785][T20004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1306.964125][T20004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1309.423635][T20004] Bluetooth: hci4: command tx timeout [ 1311.088177][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.088338][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.574556][T20004] Bluetooth: hci4: command tx timeout [ 1313.215327][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.634831][T20004] Bluetooth: hci4: command tx timeout [ 1313.665305][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.685634][ T988] bond0 (unregistering): Released all slaves [ 1314.355237][T20004] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1315.779396][T20004] Bluetooth: hci4: command tx timeout [ 1317.837800][ T988] bond1 (unregistering): Released all slaves [ 1318.529486][ T988] bond2 (unregistering): Released all slaves [ 1321.599933][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1321.628395][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1321.630048][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1321.631315][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1321.632209][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1323.527782][ T988] bond3 (unregistering): Released all slaves [ 1323.714741][ T5800] Bluetooth: hci6: command tx timeout [ 1326.607532][ T5800] Bluetooth: hci6: command tx timeout [ 1326.927635][ T988] bond4 (unregistering): Released all slaves [ 1328.475335][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.528956][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.583710][ T988] bond0 (unregistering): Released all slaves [ 1328.675117][ T5800] Bluetooth: hci6: command tx timeout [ 1330.552144][ T988] tipc: Left network mode [ 1330.767947][ T5800] Bluetooth: hci6: command tx timeout [ 1332.484970][ T988] hsr_slave_0: left promiscuous mode [ 1332.504891][ T988] hsr_slave_1: left promiscuous mode [ 1332.505753][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.555426][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.730965][T20004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1332.734305][T20004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1332.751771][T20004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1332.762061][ T988] hsr_slave_0: left promiscuous mode [ 1332.774995][T20004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1332.776746][T20004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1332.814605][ T988] hsr_slave_1: left promiscuous mode [ 1332.815658][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.866283][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.024742][ T988] hsr_slave_0: left promiscuous mode [ 1333.044745][ T988] hsr_slave_1: left promiscuous mode [ 1333.045478][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.095337][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.169632][ T988] veth0_vlan: left promiscuous mode [ 1333.996069][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1334.157199][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1334.834668][ T5800] Bluetooth: hci0: command tx timeout [ 1336.943614][ T5800] Bluetooth: hci0: command tx timeout [ 1338.665264][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1338.915295][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1338.994723][ T5800] Bluetooth: hci0: command tx timeout [ 1341.074620][ T5800] Bluetooth: hci0: command tx timeout [ 1341.635213][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1341.905233][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1343.984415][T23899] chnl_net:caif_netlink_parms(): no params data found [ 1344.189794][T23972] chnl_net:caif_netlink_parms(): no params data found [ 1346.432363][T23899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.432599][T23899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.432800][T23899] bridge_slave_0: entered allmulticast mode [ 1346.470709][T23899] bridge_slave_0: entered promiscuous mode [ 1346.578903][T23899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.580103][T23899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.580290][T23899] bridge_slave_1: entered allmulticast mode [ 1346.582143][T23899] bridge_slave_1: entered promiscuous mode [ 1346.749211][T23972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.749341][T23972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.749552][T23972] bridge_slave_0: entered allmulticast mode [ 1346.752281][T23972] bridge_slave_0: entered promiscuous mode [ 1346.904120][T23972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.904258][T23972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.910243][T23972] bridge_slave_1: entered allmulticast mode [ 1346.933367][T23972] bridge_slave_1: entered promiscuous mode [ 1347.028687][T23899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.178226][T23899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.363440][T23972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.016365][T23972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.980144][T23899] team0: Port device team_slave_0 added [ 1349.035756][T23899] team0: Port device team_slave_1 added [ 1349.085851][T24062] chnl_net:caif_netlink_parms(): no params data found [ 1349.249454][T23899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.249473][T23899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.249505][T23899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.360969][T23899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.360989][T23899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.361018][T23899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.364128][T23972] team0: Port device team_slave_0 added [ 1349.477062][T23972] team0: Port device team_slave_1 added [ 1349.714112][T23972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.714126][T23972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.714146][T23972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.878569][T23972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.878588][T23972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.878619][T23972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.946344][T23899] hsr_slave_0: entered promiscuous mode [ 1349.983221][T23899] hsr_slave_1: entered promiscuous mode [ 1350.283069][T24062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.283223][T24062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.283430][T24062] bridge_slave_0: entered allmulticast mode [ 1350.298935][T24062] bridge_slave_0: entered promiscuous mode [ 1350.403699][T24062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.403840][T24062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.404056][T24062] bridge_slave_1: entered allmulticast mode [ 1350.440656][T24062] bridge_slave_1: entered promiscuous mode [ 1350.743419][T23972] hsr_slave_0: entered promiscuous mode [ 1350.750797][T23972] hsr_slave_1: entered promiscuous mode [ 1350.751798][T23972] debugfs: 'hsr0' already exists in 'hsr' [ 1350.751821][T23972] Cannot create hsr debugfs directory [ 1350.872321][T24062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.949431][T24062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.388885][T24062] team0: Port device team_slave_0 added [ 1351.525303][T24062] team0: Port device team_slave_1 added [ 1352.055744][T24062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.055764][T24062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.055794][T24062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.151861][T24062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.151879][T24062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.151911][T24062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.222305][T24062] hsr_slave_0: entered promiscuous mode [ 1355.223360][T24062] hsr_slave_1: entered promiscuous mode [ 1355.224079][T24062] debugfs: 'hsr0' already exists in 'hsr' [ 1355.224097][T24062] Cannot create hsr debugfs directory [ 1358.901222][ T988] bridge_slave_1: left allmulticast mode [ 1358.901257][ T988] bridge_slave_1: left promiscuous mode [ 1358.901471][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.976157][ T988] bridge_slave_0: left allmulticast mode [ 1358.976190][ T988] bridge_slave_0: left promiscuous mode [ 1358.976610][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.098807][ T988] bridge_slave_1: left allmulticast mode [ 1359.098841][ T988] bridge_slave_1: left promiscuous mode [ 1359.099080][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.175589][ T988] bridge_slave_0: left allmulticast mode [ 1359.175612][ T988] bridge_slave_0: left promiscuous mode [ 1359.175794][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.268778][ T988] bridge_slave_1: left allmulticast mode [ 1359.268810][ T988] bridge_slave_1: left promiscuous mode [ 1359.269057][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.356249][ T988] bridge_slave_0: left allmulticast mode [ 1359.356280][ T988] bridge_slave_0: left promiscuous mode [ 1359.356523][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.275348][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.605566][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.667269][ T988] bond0 (unregistering): Released all slaves [ 1365.225408][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.460530][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.537605][ T988] bond0 (unregistering): Released all slaves [ 1366.995427][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.115491][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.217289][ T988] bond0 (unregistering): Released all slaves [ 1367.275704][T20004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1367.294028][T20004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1367.306085][T20004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1367.349274][T20004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1367.366360][T20004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1369.979649][ T5800] Bluetooth: hci2: command tx timeout [ 1370.015139][ T988] hsr_slave_0: left promiscuous mode [ 1370.036400][ T988] hsr_slave_1: left promiscuous mode [ 1370.037410][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.068453][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.564875][ T988] hsr_slave_0: left promiscuous mode [ 1371.617710][ T988] hsr_slave_1: left promiscuous mode [ 1371.619806][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.665528][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.914628][ T988] hsr_slave_0: left promiscuous mode [ 1371.954665][ T988] hsr_slave_1: left promiscuous mode [ 1371.955642][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.005498][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.044328][ T5800] Bluetooth: hci2: command tx timeout [ 1372.055555][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.055616][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.877293][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1373.045249][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1374.114604][ T5800] Bluetooth: hci2: command tx timeout [ 1374.245316][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1374.475835][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1376.194538][ T5800] Bluetooth: hci2: command tx timeout [ 1377.037427][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1377.175298][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1377.852202][T24310] chnl_net:caif_netlink_parms(): no params data found [ 1378.232565][T24310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.232731][T24310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.232883][T24310] bridge_slave_0: entered allmulticast mode [ 1378.235337][T24310] bridge_slave_0: entered promiscuous mode [ 1378.238787][T24310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.238964][T24310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.239124][T24310] bridge_slave_1: entered allmulticast mode [ 1378.241829][T24310] bridge_slave_1: entered promiscuous mode [ 1378.562299][T24310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.641916][T24310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.990235][T24310] team0: Port device team_slave_0 added [ 1379.266861][T24310] team0: Port device team_slave_1 added [ 1379.365457][T24310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.365476][T24310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.365507][T24310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.367964][T24310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.367981][T24310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.368012][T24310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.587026][T24310] hsr_slave_0: entered promiscuous mode [ 1379.588484][T24310] hsr_slave_1: entered promiscuous mode [ 1379.589474][T24310] debugfs: 'hsr0' already exists in 'hsr' [ 1379.589499][T24310] Cannot create hsr debugfs directory [ 1379.672857][T24062] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1379.734097][T24062] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1379.848835][T24062] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1379.965577][T20004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1380.008498][T20004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1380.010027][T20004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1380.011917][T20004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1380.012817][T20004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1380.098279][T24062] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1381.808213][T24062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.810909][T24396] chnl_net:caif_netlink_parms(): no params data found [ 1381.880563][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6356'. [ 1382.114674][T20004] Bluetooth: hci4: command tx timeout [ 1384.030042][T24464] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1384.066942][T24062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.194590][T20004] Bluetooth: hci4: command tx timeout [ 1385.318182][T24396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.318403][T24396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.318669][T24396] bridge_slave_0: entered allmulticast mode [ 1385.321322][T24396] bridge_slave_0: entered promiscuous mode [ 1385.380543][T24396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.380689][T24396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.380894][T24396] bridge_slave_1: entered allmulticast mode [ 1385.383726][T24396] bridge_slave_1: entered promiscuous mode [ 1385.461035][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.461179][ T6731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.595968][T24396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.598520][T24310] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1385.657711][T24396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.657795][T24310] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1385.776924][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.777027][T12088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.854502][T24310] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1386.033964][T24484] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6371'. [ 1386.062921][T24310] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1386.168177][T24396] team0: Port device team_slave_0 added [ 1386.254959][T24396] team0: Port device team_slave_1 added [ 1386.274847][T20004] Bluetooth: hci4: command tx timeout [ 1386.556100][T24396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.556120][T24396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.556150][T24396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.626971][T24396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.626990][T24396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.627022][T24396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.161617][T24396] hsr_slave_0: entered promiscuous mode [ 1387.163156][T24396] hsr_slave_1: entered promiscuous mode [ 1387.164192][T24396] debugfs: 'hsr0' already exists in 'hsr' [ 1387.164217][T24396] Cannot create hsr debugfs directory [ 1388.138904][ T988] bridge_slave_1: left allmulticast mode [ 1388.138935][ T988] bridge_slave_1: left promiscuous mode [ 1388.139182][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.364465][T20004] Bluetooth: hci4: command tx timeout [ 1388.426271][ T988] bridge_slave_0: left allmulticast mode [ 1388.426303][ T988] bridge_slave_0: left promiscuous mode [ 1388.426576][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.539538][ T988] bridge_slave_1: left allmulticast mode [ 1388.539570][ T988] bridge_slave_1: left promiscuous mode [ 1388.539827][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.636288][ T988] bridge_slave_0: left allmulticast mode [ 1388.636322][ T988] bridge_slave_0: left promiscuous mode [ 1388.636594][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.938938][T24533] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.6379'. [ 1390.195921][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.275594][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.346802][ T988] bond0 (unregistering): Released all slaves [ 1391.265263][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.386610][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.467561][ T988] bond0 (unregistering): Released all slaves [ 1393.304679][ T988] hsr_slave_0: left promiscuous mode [ 1393.344689][ T988] hsr_slave_1: left promiscuous mode [ 1393.348629][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.388054][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.614830][ T988] hsr_slave_0: left promiscuous mode [ 1393.654590][ T988] hsr_slave_1: left promiscuous mode [ 1393.655624][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.695636][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.935019][T24582] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1395.533314][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1395.549001][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1395.560592][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1395.598604][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1395.599448][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1396.889172][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1397.305298][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1398.204546][T20004] Bluetooth: hci0: command tx timeout [ 1398.231327][T24617] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6396'. [ 1400.274551][T20004] Bluetooth: hci0: command tx timeout [ 1400.675381][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1400.875272][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1401.819567][T24310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.596206][T20004] Bluetooth: hci0: command tx timeout [ 1402.836319][T24310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.301862][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.302015][T12088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.344111][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.344259][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.606101][T24650] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6405'. [ 1404.851056][T20004] Bluetooth: hci0: command tx timeout [ 1405.791466][T24596] chnl_net:caif_netlink_parms(): no params data found [ 1405.984984][T20826] usb 6-1: USB disconnect, device number 7 [ 1406.234724][T24396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1406.621465][T24396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1406.770234][T24396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1406.919747][T24396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1407.037617][T24596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.037754][T24596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.037992][T24596] bridge_slave_0: entered allmulticast mode [ 1407.044666][T24596] bridge_slave_0: entered promiscuous mode [ 1407.134027][T24596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.134218][T24596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.135904][T24596] bridge_slave_1: entered allmulticast mode [ 1407.172121][T24596] bridge_slave_1: entered promiscuous mode [ 1407.362434][T24596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.409556][T24596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.441650][T24310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.549964][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1407.553126][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1407.568669][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1407.570863][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1407.571630][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1407.740968][T24596] team0: Port device team_slave_0 added [ 1407.756634][T24596] team0: Port device team_slave_1 added [ 1407.976811][T24596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.976831][T24596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.976861][T24596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.151531][T24596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.151550][T24596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.151581][T24596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.342945][ T988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1409.016897][ T988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1409.200168][T24596] hsr_slave_0: entered promiscuous mode [ 1409.206731][T24596] hsr_slave_1: entered promiscuous mode [ 1409.413773][ T988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1409.641986][T20004] Bluetooth: hci3: command tx timeout [ 1409.826596][ T988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1410.989986][T24310] veth0_vlan: entered promiscuous mode [ 1411.496436][T24396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.497571][T24706] chnl_net:caif_netlink_parms(): no params data found [ 1411.714691][T20004] Bluetooth: hci3: command tx timeout [ 1411.812039][T24310] veth1_vlan: entered promiscuous mode [ 1412.339858][T24745] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6423'. [ 1412.359955][T24396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.362110][T24706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.362250][T24706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.362382][T24706] bridge_slave_0: entered allmulticast mode [ 1412.364309][T24706] bridge_slave_0: entered promiscuous mode [ 1412.576247][T24706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.576350][T24706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.576527][T24706] bridge_slave_1: entered allmulticast mode [ 1412.578442][T24706] bridge_slave_1: entered promiscuous mode [ 1412.623506][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.624200][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.672263][T24706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.690622][T24706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.770221][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.770346][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.822202][T24706] team0: Port device team_slave_0 added [ 1412.873832][T24706] team0: Port device team_slave_1 added [ 1412.923831][ T988] bridge_slave_0: left promiscuous mode [ 1412.924065][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.115028][ T988] bridge_slave_1: left allmulticast mode [ 1413.115052][ T988] bridge_slave_1: left promiscuous mode [ 1413.115238][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.195644][ T988] bridge_slave_0: left allmulticast mode [ 1413.195669][ T988] bridge_slave_0: left promiscuous mode [ 1413.195848][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.815101][T20004] Bluetooth: hci3: command tx timeout [ 1414.745379][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.788063][ T988] bond0 (unregistering): Released all slaves [ 1415.529277][ T988] bond1 (unregistering): Released all slaves [ 1415.874654][T20004] Bluetooth: hci3: command tx timeout [ 1416.277652][ T988] bond2 (unregistering): Released all slaves [ 1416.971409][ T988] bond3 (unregistering): Released all slaves [ 1418.015378][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.086911][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.107148][ T988] bond0 (unregistering): Released all slaves [ 1418.146295][T24310] veth0_macvtap: entered promiscuous mode [ 1418.284976][T24706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.284995][T24706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.285020][T24706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.292830][T24706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.292845][T24706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.292866][T24706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.442158][T24310] veth1_macvtap: entered promiscuous mode [ 1420.079694][T24706] hsr_slave_0: entered promiscuous mode [ 1420.080724][T24706] hsr_slave_1: entered promiscuous mode [ 1420.081419][T24706] debugfs: 'hsr0' already exists in 'hsr' [ 1420.081438][T24706] Cannot create hsr debugfs directory [ 1420.254150][T24596] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1420.313443][T24310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.366945][T24596] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1420.546904][T24596] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1420.608895][T24596] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1420.660592][T24310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.824588][ T988] hsr_slave_0: left promiscuous mode [ 1420.864566][ T988] hsr_slave_1: left promiscuous mode [ 1420.866636][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.945399][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.124793][ T988] hsr_slave_0: left promiscuous mode [ 1421.164657][ T988] hsr_slave_1: left promiscuous mode [ 1421.166517][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.195783][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.261791][T24770] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1424.187582][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1424.408055][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1427.145451][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1427.365258][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1428.432719][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1428.448657][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1428.449997][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1428.451229][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1428.451968][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1430.442131][T24396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.492196][T24706] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1430.524758][T20004] Bluetooth: hci5: command tx timeout [ 1430.599129][T24706] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1430.660812][T24706] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1430.722998][T24706] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1430.790713][T24822] macvlan4: entered allmulticast mode [ 1430.921280][T24596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.989675][T24778] chnl_net:caif_netlink_parms(): no params data found [ 1431.204275][T24596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.481430][T24843] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6437'. [ 1431.552695][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.552975][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.683468][T12095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.693919][T12095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.709304][T24778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.709452][T24778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.709644][T24778] bridge_slave_0: entered allmulticast mode [ 1431.712352][T24778] bridge_slave_0: entered promiscuous mode [ 1431.775673][T24778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.775833][T24778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.776036][T24778] bridge_slave_1: entered allmulticast mode [ 1431.804913][T24778] bridge_slave_1: entered promiscuous mode [ 1431.806966][T24396] veth0_vlan: entered promiscuous mode [ 1431.892887][T24778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.953165][T24778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.964920][T24396] veth1_vlan: entered promiscuous mode [ 1432.300275][T24778] team0: Port device team_slave_0 added [ 1432.353223][T24778] team0: Port device team_slave_1 added [ 1432.599056][T24778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.599075][T24778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.599106][T24778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.604930][T20004] Bluetooth: hci5: command tx timeout [ 1432.626536][T24778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.626593][T24778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.626660][T24778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.957544][T24778] hsr_slave_0: entered promiscuous mode [ 1432.968624][T24778] hsr_slave_1: entered promiscuous mode [ 1432.971046][T24778] debugfs: 'hsr0' already exists in 'hsr' [ 1432.971071][T24778] Cannot create hsr debugfs directory [ 1433.007643][T24396] veth0_macvtap: entered promiscuous mode [ 1433.099584][T24706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.103583][T24396] veth1_macvtap: entered promiscuous mode [ 1433.478779][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.478872][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.786559][T24882] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6443'. [ 1434.203617][T24886] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6444'. [ 1434.572202][T24706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.576504][T24396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.672360][T24396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.675436][T20004] Bluetooth: hci5: command tx timeout [ 1434.706599][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.706950][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.972938][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.973065][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.976592][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.998373][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.017055][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.021511][T24596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.044097][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.062320][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.062345][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.270183][ T6731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.270205][ T6731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.301545][ T988] bridge_slave_1: left allmulticast mode [ 1436.301575][ T988] bridge_slave_1: left promiscuous mode [ 1436.301824][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.394156][ T988] bridge_slave_0: left allmulticast mode [ 1436.394185][ T988] bridge_slave_0: left promiscuous mode [ 1436.410183][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.583784][T24924] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1436.754595][T20004] Bluetooth: hci5: command tx timeout [ 1436.984643][T24928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1438.426653][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.495260][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.517930][ T988] bond0 (unregistering): Released all slaves [ 1439.104566][ T988] hsr_slave_0: left promiscuous mode [ 1439.144615][ T988] hsr_slave_1: left promiscuous mode [ 1439.146439][ T988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.146470][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.195644][ T988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.195666][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.308357][ T988] veth1_macvtap: left promiscuous mode [ 1439.308467][ T988] veth0_macvtap: left promiscuous mode [ 1439.308721][ T988] veth1_vlan: left promiscuous mode [ 1439.308902][ T988] veth0_vlan: left promiscuous mode [ 1440.288577][T24948] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1441.240503][T24951] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6458'. [ 1443.105106][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1443.355357][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1445.242100][T24596] veth0_vlan: entered promiscuous mode [ 1445.377123][T24596] veth1_vlan: entered promiscuous mode [ 1445.411013][T24706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.697047][T24596] veth0_macvtap: entered promiscuous mode [ 1445.799168][T24596] veth1_macvtap: entered promiscuous mode [ 1445.947321][T24596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.983534][T24596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.079722][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.093593][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.106443][T22587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.108906][T22587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.599222][T24977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6466'. [ 1447.218673][T24706] veth0_vlan: entered promiscuous mode [ 1447.259915][T24778] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1447.332097][T24778] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1447.400868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.400891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.427964][T24778] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1447.519910][T24778] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1447.827883][T24706] veth1_vlan: entered promiscuous mode [ 1448.531615][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.531640][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.828063][T24706] veth0_macvtap: entered promiscuous mode [ 1448.886056][T24706] veth1_macvtap: entered promiscuous mode [ 1449.081926][T24706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.137971][T24706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.216372][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.220223][ T42] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.242964][ T42] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.287784][ T42] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.313826][T24778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.752058][T24778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.776324][T22587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.776427][T22587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.891180][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.891346][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.295248][T12101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.295270][T12101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.716636][T22587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.716656][T22587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.372119][T25071] netlink: 16211 bytes leftover after parsing attributes in process `syz.8.6414'. [ 1452.694146][ T36] audit: type=1326 audit(1770743519.121:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25091 comm="syz.6.6490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e1294bf79 code=0x0 [ 1452.729385][ T988] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.911537][T24778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.354055][T25147] binder: 25143:25147 ioctl c0306201 0 returned -14 [ 1455.769915][T24778] veth0_vlan: entered promiscuous mode [ 1456.241277][T24778] veth1_vlan: entered promiscuous mode [ 1456.789533][T24778] veth0_macvtap: entered promiscuous mode [ 1456.835533][T24778] veth1_macvtap: entered promiscuous mode [ 1456.939590][T24778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.050496][T24778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.120882][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.121536][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.121991][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.122035][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.727494][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.727517][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.042470][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.042493][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.433947][T25203] netlink: 388 bytes leftover after parsing attributes in process `syz.8.6522'. [ 1458.594943][T25206] wireguard0: entered promiscuous mode [ 1458.594971][T25206] wireguard0: entered allmulticast mode [ 1460.736963][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6529'. [ 1460.957885][ T994] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1461.129115][ T994] usb 8-1: Using ep0 maxpacket: 16 [ 1461.131218][ T994] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.131243][ T994] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1461.133774][ T994] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1461.133802][ T994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.133824][ T994] usb 8-1: Product: syz [ 1461.133839][ T994] usb 8-1: Manufacturer: syz [ 1461.133855][ T994] usb 8-1: SerialNumber: syz [ 1461.451829][ T994] usb 8-1: 0:2 : does not exist [ 1461.471886][ T994] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1461.646033][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1461.668925][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1461.671231][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1461.672378][ T994] usb 8-1: USB disconnect, device number 2 [ 1461.706479][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1461.714128][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1461.916200][T25240] udevd[25240]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.064665][T25250] netlink: 260 bytes leftover after parsing attributes in process `syz.8.6535'. [ 1462.064813][T25250] netlink: 124 bytes leftover after parsing attributes in process `syz.8.6535'. [ 1462.473496][T25241] chnl_net:caif_netlink_parms(): no params data found [ 1463.818489][ T5800] Bluetooth: hci2: command tx timeout [ 1463.900759][T25283] fuse: Bad value for 'fd' [ 1463.959777][T25284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6543'. [ 1464.671510][T25241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.690481][T25241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.690744][T25241] bridge_slave_0: entered allmulticast mode [ 1464.693441][T25241] bridge_slave_0: entered promiscuous mode [ 1464.765774][T25241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.770134][T25241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.770407][T25241] bridge_slave_1: entered allmulticast mode [ 1464.808571][T25241] bridge_slave_1: entered promiscuous mode [ 1466.931224][ T5800] Bluetooth: hci2: command tx timeout [ 1466.982389][T25241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.095951][T25241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.416382][T25319] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6551'. [ 1467.564031][T25241] team0: Port device team_slave_0 added [ 1467.593845][T25241] team0: Port device team_slave_1 added [ 1468.332651][T25241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.332670][T25241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.332701][T25241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.404759][T25241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.404777][T25241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.404808][T25241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.511667][T25337] autofs4:pid:25337:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189376) [ 1468.511700][T25337] autofs4:pid:25337:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189376) [ 1468.821973][T25343] veth0: entered promiscuous mode [ 1468.850802][T25241] hsr_slave_0: entered promiscuous mode [ 1468.851805][T25241] hsr_slave_1: entered promiscuous mode [ 1468.852587][T25241] debugfs: 'hsr0' already exists in 'hsr' [ 1468.852611][T25241] Cannot create hsr debugfs directory [ 1468.997696][ T5800] Bluetooth: hci2: command tx timeout [ 1469.010720][T25342] veth0: left promiscuous mode [ 1469.852175][T25367] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1469.852236][T25367] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1470.117686][T25373] netlink: 16211 bytes leftover after parsing attributes in process `syz.6.6570'. [ 1470.636953][ T36] audit: type=1326 audit(1770743537.061:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25381 comm="syz.6.6574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e1294bf79 code=0x0 [ 1471.248106][ T5800] Bluetooth: hci2: command tx timeout [ 1471.811942][T25396] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6579'. [ 1471.812390][T25396] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6579'. [ 1475.408907][T25426] netlink: 260 bytes leftover after parsing attributes in process `syz.8.6589'. [ 1475.409036][T25426] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6589'. [ 1476.937342][T25241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1477.079085][T25241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1477.186551][T25241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1477.214498][T23849] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1477.280653][T25241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1477.378389][T23849] usb 8-1: Using ep0 maxpacket: 16 [ 1477.391992][T23849] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.392019][T23849] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.433262][T23849] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1477.433290][T23849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.433305][T23849] usb 8-1: Product: syz [ 1477.433315][T23849] usb 8-1: Manufacturer: syz [ 1477.433325][T23849] usb 8-1: SerialNumber: syz [ 1477.586938][T25452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6595'. [ 1478.846311][T23849] usb 8-1: 0:2 : does not exist [ 1478.885806][T23849] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1479.095224][T23849] usb 8-1: USB disconnect, device number 3 [ 1479.250628][T25240] udevd[25240]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1479.465707][T25241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.641597][T25241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.728532][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.728706][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.962807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.962902][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.314641][T25498] fuse: Bad value for 'fd' [ 1481.865953][T25507] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6611'. [ 1482.000526][T25504] wireguard0: entered promiscuous mode [ 1482.000555][T25504] wireguard0: entered allmulticast mode [ 1483.450096][T25241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.042106][T25241] veth0_vlan: entered promiscuous mode [ 1485.141569][T25241] veth1_vlan: entered promiscuous mode [ 1485.674755][T20004] Bluetooth: hci2: command 0x0405 tx timeout [ 1485.813325][T25241] veth0_macvtap: entered promiscuous mode [ 1485.951671][T25241] veth1_macvtap: entered promiscuous mode [ 1486.097667][T25241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.156794][T25241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.371136][ T5800] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1486.827665][T12088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.827745][T12088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.827803][T12088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.827849][T12088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.234176][T25574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6628'. [ 1488.839437][T25584] overlayfs: overlapping lowerdir path [ 1490.931186][T12088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.931206][T12088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.214509][T25124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.214531][T25124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.293790][T25606] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6642'. [ 1491.904566][T25616] overlayfs: overlapping lowerdir path [ 1494.920306][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.920382][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1500.124484][ T5800] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1501.924807][T25756] overlayfs: overlapping lowerdir path [ 1504.863468][ T5800] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1505.632771][T25798] macvtap1: entered promiscuous mode [ 1505.632801][T25798] macvtap1: entered allmulticast mode [ 1505.677560][T25798] syz_tun: entered promiscuous mode [ 1505.677603][T25798] syz_tun: entered allmulticast mode [ 1505.698435][T25798] team0: Device macvtap1 failed to register rx_handler [ 1507.557276][T25798] syz_tun: left allmulticast mode [ 1507.558191][T25798] syz_tun: left promiscuous mode [ 1508.251007][T25818] syzkaller0: entered promiscuous mode [ 1508.251034][T25818] syzkaller0: entered allmulticast mode [ 1508.855255][ T5800] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1510.677518][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 1513.213591][T20004] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1518.384492][T20004] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1518.574731][T25916] netlink: 'syz.8.6734': attribute type 24 has an invalid length. [ 1522.345834][T25974] netlink: 'syz.6.6753': attribute type 24 has an invalid length. [ 1522.594754][T22268] Bluetooth: hci0: command 0x0406 tx timeout [ 1523.154580][T24311] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1523.306819][T24311] usb 7-1: Using ep0 maxpacket: 16 [ 1523.310236][T24311] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.310263][T24311] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1523.314169][T24311] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1523.314200][T24311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.314222][T24311] usb 7-1: Product: syz [ 1523.314238][T24311] usb 7-1: Manufacturer: syz [ 1523.314254][T24311] usb 7-1: SerialNumber: syz [ 1523.661982][T24311] usb 7-1: 0:2 : does not exist [ 1523.679719][T24311] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1523.806669][T24311] usb 7-1: USB disconnect, device number 2 [ 1523.969187][T25964] udevd[25964]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1526.001147][T22268] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1529.945871][T22268] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1531.884532][T24878] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1532.035057][T24878] usb 1-1: Using ep0 maxpacket: 32 [ 1532.118358][T24878] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1532.118387][T24878] usb 1-1: config 0 has no interface number 0 [ 1532.118448][T24878] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1532.123852][T24878] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1532.123884][T24878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.123900][T24878] usb 1-1: Product: syz [ 1532.123910][T24878] usb 1-1: Manufacturer: syz [ 1532.123920][T24878] usb 1-1: SerialNumber: syz [ 1532.206799][T24878] usb 1-1: config 0 descriptor?? [ 1532.250790][T26071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1532.508011][T26071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1532.922199][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 1532.944474][T22103] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1533.114559][T22103] usb 4-1: Using ep0 maxpacket: 16 [ 1533.143652][T22103] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.143672][T22103] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1533.143699][T22103] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1533.143715][T22103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.204033][T22103] usb 4-1: config 0 descriptor?? [ 1533.516804][T24878] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1533.517175][T24878] asix 1-1:0.188: probe with driver asix failed with error -32 [ 1533.575471][T24878] usb 1-1: USB disconnect, device number 15 [ 1536.326202][T22103] usb 4-1: USB disconnect, device number 16 [ 1538.615645][T22103] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1538.828943][T22103] usb 7-1: Using ep0 maxpacket: 32 [ 1538.847029][T22103] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1538.847058][T22103] usb 7-1: config 0 has no interface number 0 [ 1538.847112][T22103] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1538.852456][T22103] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1538.852486][T22103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.852508][T22103] usb 7-1: Product: syz [ 1538.852524][T22103] usb 7-1: Manufacturer: syz [ 1538.852540][T22103] usb 7-1: SerialNumber: syz [ 1538.924222][T22103] usb 7-1: config 0 descriptor?? [ 1538.973474][T26139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1539.239296][T26139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1540.259158][T22103] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1540.259462][T22103] asix 7-1:0.188: probe with driver asix failed with error -32 [ 1540.298720][T22103] usb 7-1: USB disconnect, device number 3 [ 1547.074527][ T5800] Bluetooth: hci2: command 0x0405 tx timeout [ 1552.106991][T26318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6857'. [ 1552.859060][ T5853] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1553.284743][ T5853] usb 8-1: Using ep0 maxpacket: 16 [ 1553.391319][ T5853] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.391347][ T5853] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1553.391382][ T5853] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1553.391406][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.439431][ T5853] usb 8-1: config 0 descriptor?? [ 1553.954469][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 1556.565181][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.565253][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.673730][T14465] usb 8-1: USB disconnect, device number 4 [ 1556.990347][T26365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.644575][T26453] netlink: 'syz.0.6888': attribute type 25 has an invalid length. [ 1564.954441][T20826] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1565.116337][T20826] usb 7-1: Using ep0 maxpacket: 16 [ 1565.148577][T20826] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.148607][T20826] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1565.148647][T20826] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1565.148671][T20826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.206949][T20826] usb 7-1: config 0 descriptor?? [ 1565.414467][T24878] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1565.604922][T24878] usb 1-1: Using ep0 maxpacket: 16 [ 1565.609216][T24878] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.609243][T24878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1565.613392][T24878] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1565.613420][T24878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.613440][T24878] usb 1-1: Product: syz [ 1565.613455][T24878] usb 1-1: Manufacturer: syz [ 1565.613469][T24878] usb 1-1: SerialNumber: syz [ 1566.036651][T24878] usb 1-1: 0:2 : does not exist [ 1566.058400][T24878] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1566.773051][T24878] usb 1-1: USB disconnect, device number 16 [ 1567.049902][T26499] usb 7-1: USB disconnect, device number 4 [ 1567.053479][T25964] udevd[25964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1567.309513][T26508] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6897'. [ 1567.741304][T26519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1568.409366][T26534] netlink: 'syz.3.6906': attribute type 25 has an invalid length. [ 1570.433867][T26562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1571.004514][ T5860] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1571.803774][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 1571.812413][ T5860] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1571.812442][ T5860] usb 1-1: config 0 has no interface number 0 [ 1571.812498][ T5860] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1571.842531][ T5860] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1571.842564][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.842586][ T5860] usb 1-1: Product: syz [ 1571.842601][ T5860] usb 1-1: Manufacturer: syz [ 1571.842616][ T5860] usb 1-1: SerialNumber: syz [ 1571.887745][ T5860] usb 1-1: config 0 descriptor?? [ 1571.900619][T26577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1572.114694][T26577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1572.917869][T26599] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6921'. [ 1573.248844][ T5860] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1573.249141][ T5860] asix 1-1:0.188: probe with driver asix failed with error -61 [ 1573.504579][ T5860] usb 1-1: USB disconnect, device number 17 [ 1575.291895][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6943'. [ 1575.309381][T26643] wireguard0: entered promiscuous mode [ 1575.309417][T26643] wireguard0: entered allmulticast mode [ 1576.484039][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6954'. [ 1576.587737][T26702] netlink: 'syz.6.6956': attribute type 25 has an invalid length. [ 1577.451809][T26720] wireguard0: entered promiscuous mode [ 1577.451837][T26720] wireguard0: entered allmulticast mode [ 1578.651338][T26747] netlink: 'syz.7.6972': attribute type 25 has an invalid length. [ 1580.262191][T26787] netlink: 'syz.3.6985': attribute type 25 has an invalid length. [ 1581.470073][T26817] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7000'. [ 1584.170655][T22268] Bluetooth: hci2: command 0x0405 tx timeout [ 1585.087785][T26853] netlink: 'syz.0.7010': attribute type 25 has an invalid length. [ 1589.781910][T26896] netlink: 'syz.3.7023': attribute type 25 has an invalid length. [ 1593.554492][T26100] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1593.690347][T26100] usb 4-1: device descriptor read/64, error -71 [ 1593.978136][T26100] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1594.104475][T26100] usb 4-1: device descriptor read/64, error -71 [ 1594.214853][T26100] usb usb4-port1: attempt power cycle [ 1594.568749][T26951] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7035'. [ 1594.574569][T26100] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1594.595244][T26100] usb 4-1: device descriptor read/8, error -71 [ 1594.834614][T26100] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1594.855240][T26100] usb 4-1: device descriptor read/8, error -71 [ 1594.901799][T26955] netlink: 'syz.8.7036': attribute type 25 has an invalid length. [ 1594.978691][T26100] usb usb4-port1: unable to enumerate USB device [ 1595.407483][T26969] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7039'. [ 1596.505651][T26996] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7046'. [ 1598.156139][T22268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1598.386354][T22268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1598.627423][T22268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1598.738456][T22268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1598.834413][T22268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1598.882742][T27017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7050'. [ 1599.856054][T27037] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1600.917894][ T5800] Bluetooth: hci1: command tx timeout [ 1603.004658][ T5800] Bluetooth: hci1: command tx timeout [ 1603.890890][T27082] netlink: 80 bytes leftover after parsing attributes in process `syz.8.7069'. [ 1603.890916][T27082] netlink: 80 bytes leftover after parsing attributes in process `syz.8.7069'. [ 1604.180197][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.275126][T27081] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7068'. [ 1604.437186][T27010] chnl_net:caif_netlink_parms(): no params data found [ 1604.714439][ T5960] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1604.844476][ T5960] usb 1-1: device descriptor read/64, error -71 [ 1604.881359][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.074819][ T5800] Bluetooth: hci1: command tx timeout [ 1605.084438][ T5960] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1605.214491][ T5960] usb 1-1: device descriptor read/64, error -71 [ 1605.324829][ T5960] usb usb1-port1: attempt power cycle [ 1605.444537][T27108] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7079'. [ 1605.479788][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.794500][ T5960] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1606.821446][ T5960] usb 1-1: device descriptor read/8, error -71 [ 1607.154943][ T5800] Bluetooth: hci1: command tx timeout [ 1607.329838][T27114] 9p: Bad value for 'rfdno' [ 1607.404793][ T5960] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1607.615928][ T5960] usb 1-1: device not accepting address 21, error -71 [ 1607.616342][ T5960] usb usb1-port1: unable to enumerate USB device [ 1607.744242][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.886122][T27010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.886303][T27010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.886521][T27010] bridge_slave_0: entered allmulticast mode [ 1607.893831][T27010] bridge_slave_0: entered promiscuous mode [ 1607.946420][T27010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.946626][T27010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.946847][T27010] bridge_slave_1: entered allmulticast mode [ 1607.949678][T27010] bridge_slave_1: entered promiscuous mode [ 1608.043580][T27010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.059666][T27010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.506534][T27010] team0: Port device team_slave_0 added [ 1608.512173][T27010] team0: Port device team_slave_1 added [ 1612.007354][T27010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.007375][T27010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.007405][T27010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.009861][T27010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.009876][T27010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.009905][T27010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.299095][T27010] hsr_slave_0: entered promiscuous mode [ 1612.300537][T27010] hsr_slave_1: entered promiscuous mode [ 1612.301535][T27010] debugfs: 'hsr0' already exists in 'hsr' [ 1612.301559][T27010] Cannot create hsr debugfs directory [ 1612.538856][ T13] bridge_slave_1: left allmulticast mode [ 1612.538894][ T13] bridge_slave_1: left promiscuous mode [ 1612.539162][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.697418][ T13] bridge_slave_0: left allmulticast mode [ 1612.697452][ T13] bridge_slave_0: left promiscuous mode [ 1612.697723][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.728585][T27155] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7097'. [ 1614.505042][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.577347][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.600651][ T13] bond0 (unregistering): Released all slaves [ 1615.788573][T27157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1616.239324][ T13] hsr_slave_0: left promiscuous mode [ 1616.395096][ T13] hsr_slave_1: left promiscuous mode [ 1616.406585][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.409596][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.254808][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1617.254839][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.338606][ T13] veth1_macvtap: left promiscuous mode [ 1617.338678][ T13] veth0_macvtap: left promiscuous mode [ 1617.338859][ T13] veth1_vlan: left promiscuous mode [ 1617.338977][ T13] veth0_vlan: left promiscuous mode [ 1617.831435][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.831527][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.075270][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1620.325490][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1622.685535][T27196] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1623.353293][T27010] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1623.433034][T27010] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1624.762382][T27010] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1624.766940][T27233] netlink: 'syz.0.7119': attribute type 4 has an invalid length. [ 1627.245370][T27010] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1629.436641][T27010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.613595][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7137'. [ 1629.672557][T27291] bridge_slave_1: left allmulticast mode [ 1629.672603][T27291] bridge_slave_1: left promiscuous mode [ 1629.673168][T27291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.815128][T27010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.841546][T25808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.843828][T25808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.919970][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.920687][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.099974][ T36] audit: type=1326 audit(2000000030.900:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.100318][ T36] audit: type=1326 audit(2000000030.900:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.101184][ T36] audit: type=1326 audit(2000000030.900:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.101996][ T36] audit: type=1326 audit(2000000030.900:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.102285][ T36] audit: type=1326 audit(2000000030.900:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.103700][ T36] audit: type=1326 audit(2000000030.900:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.103751][ T36] audit: type=1326 audit(2000000030.900:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.104753][ T36] audit: type=1326 audit(2000000030.900:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.108412][ T36] audit: type=1326 audit(2000000030.910:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1631.109154][ T36] audit: type=1326 audit(2000000030.910:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27318 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b06b3bf79 code=0x7ffc0000 [ 1632.734048][T27010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.536221][T27010] veth0_vlan: entered promiscuous mode [ 1634.577834][T27010] veth1_vlan: entered promiscuous mode [ 1634.888353][T27010] veth0_macvtap: entered promiscuous mode [ 1634.930881][T27010] veth1_macvtap: entered promiscuous mode [ 1635.147495][T27010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.270302][T27010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.304258][ T6731] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.306222][ T6731] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.306476][ T6731] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.306678][ T6731] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.774434][ T5960] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1635.906722][ T5960] usb 8-1: device descriptor read/64, error -71 [ 1636.144433][ T5960] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1636.249258][T12095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.249281][T12095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.304787][ T5960] usb 8-1: device descriptor read/64, error -71 [ 1636.421343][ T5960] usb usb8-port1: attempt power cycle [ 1636.600441][T25736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.600465][T25736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.714410][T27426] netlink: 'syz.3.7184': attribute type 13 has an invalid length. [ 1636.824474][ T5960] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1636.865440][ T5960] usb 8-1: device descriptor read/8, error -71 [ 1637.104425][ T5960] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1637.125297][ T5960] usb 8-1: device descriptor read/8, error -71 [ 1637.244619][ T5960] usb usb8-port1: unable to enumerate USB device [ 1637.345218][T27426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.346040][T27426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.012538][T27426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.030574][T27426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1638.774603][T23504] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1638.944437][T23504] usb 8-1: Using ep0 maxpacket: 16 [ 1638.946814][T23504] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.946839][T23504] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1638.950741][T23504] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1638.950773][T23504] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.950788][T23504] usb 8-1: Product: syz [ 1638.950799][T23504] usb 8-1: Manufacturer: syz [ 1638.950809][T23504] usb 8-1: SerialNumber: syz [ 1639.225942][T23504] usb 8-1: 0:2 : does not exist [ 1639.241053][T27444] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1639.247893][T23504] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1639.294487][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.314350][T22587] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.343964][T22587] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.348675][T22587] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.497170][T23504] usb 8-1: USB disconnect, device number 9 [ 1643.688175][T27491] netlink: 488 bytes leftover after parsing attributes in process `syz.8.7202'. [ 1645.029629][T27503] team0: No ports can be present during mode change [ 1645.667282][T27523] netlink: 'syz.7.7214': attribute type 25 has an invalid length. [ 1647.407423][ T994] IPVS: starting estimator thread 0... [ 1647.524776][T27543] IPVS: using max 12 ests per chain, 28800 per kthread [ 1649.737715][T27593] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7240'. [ 1650.030639][T27600] netlink: 488 bytes leftover after parsing attributes in process `syz.3.7241'. [ 1650.308085][T27593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.419471][T27593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.532230][T27593] bond0 (unregistering): Released all slaves [ 1656.122726][T27682] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7272'. [ 1656.535230][T27700] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7275'. [ 1659.222357][T27743] netlink: 488 bytes leftover after parsing attributes in process `syz.3.7287'. [ 1660.404478][T27755] netlink: 'syz.0.7292': attribute type 25 has an invalid length. [ 1664.770363][ T5800] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1666.864795][T27872] netlink: 'syz.3.7332': attribute type 24 has an invalid length. [ 1669.532239][T27947] loop7: detected capacity change from 0 to 8 [ 1669.593475][ T101] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.593647][ T101] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.616415][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.616452][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.616591][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.616619][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.616663][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.616690][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.616738][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.616765][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.616878][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.616904][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.616972][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.616998][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.617049][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.617076][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.617103][T27947] ldm_validate_partition_table(): Disk read failed. [ 1669.617145][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.617171][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.617218][T27947] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1669.617244][T27947] Buffer I/O error on dev loop7, logical block 0, async page read [ 1669.617330][T27947] Dev loop7: unable to read RDB block 0 [ 1669.617475][T27947] loop7: unable to read partition table [ 1669.617728][T27947] loop7: partition table beyond EOD, truncated [ 1669.617788][T27947] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 1674.577701][T28075] netlink: 196 bytes leftover after parsing attributes in process `syz.8.7405'. [ 1675.356806][T28092] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7411'. [ 1675.909601][T28102] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7413'. [ 1676.789965][T28121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7416'. [ 1676.789990][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7416'. [ 1677.188225][T28128] netlink: 196 bytes leftover after parsing attributes in process `syz.9.7419'. [ 1677.886052][T28133] syzkaller0: entered promiscuous mode [ 1677.886078][T28133] syzkaller0: entered allmulticast mode [ 1678.504844][ T5853] kernel write not supported for file /uhid (pid: 5853 comm: kworker/1:3) [ 1678.881582][T28152] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7428'. [ 1678.956176][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7431'. [ 1678.956192][T28158] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7431'. [ 1679.253685][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.253748][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.293980][T28197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7443'. [ 1680.468781][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7445'. [ 1680.468805][T28202] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7445'. [ 1680.650236][T28208] pim6reg1: entered promiscuous mode [ 1680.650271][T28208] pim6reg1: entered allmulticast mode [ 1680.653706][T28212] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7448'. [ 1680.892128][T28218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7450'. [ 1681.351507][T28228] netlink: 'syz.3.7452': attribute type 24 has an invalid length. [ 1683.807079][T28273] ================================================================== [ 1683.807099][T28273] BUG: KASAN: unknown-crash in copy_mc_to_kernel+0x35/0xa0 [ 1683.807309][T28273] Read of size 4096 at addr ffff8880aa548000 by task syz.7.7465/28273 [ 1683.807326][T28273] [ 1683.807353][T28273] CPU: 0 UID: 0 PID: 28273 Comm: syz.7.7465 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1683.807374][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1683.807389][T28273] Call Trace: [ 1683.807399][T28273] [ 1683.807408][T28273] dump_stack_lvl+0xe8/0x150 [ 1683.807496][T28273] print_report+0xba/0x230 [ 1683.807534][T28273] ? copy_mc_to_kernel+0x35/0xa0 [ 1683.807558][T28273] kasan_report+0x117/0x150 [ 1683.807667][T28273] ? copy_mc_to_kernel+0x35/0xa0 [ 1683.807694][T28273] kasan_check_range+0x264/0x2c0 [ 1683.807721][T28273] copy_mc_to_kernel+0x35/0xa0 [ 1683.807745][T28273] dump_user_range+0x31a/0x12d0 [ 1683.807809][T28273] ? __pfx_dump_user_range+0x10/0x10 [ 1683.807829][T28273] ? elf_coredump_extra_notes_write+0x441/0x4d0 [ 1683.807872][T28273] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1683.807899][T28273] elf_core_dump+0x34c2/0x3ad0 [ 1683.807951][T28273] ? __pfx_elf_core_dump+0x10/0x10 [ 1683.807971][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.808007][T28273] ? __kvmalloc_node_noprof+0x3d2/0x8f0 [ 1683.808077][T28273] ? coredump_write+0x381/0x1960 [ 1683.808096][T28273] ? vfs_coredump+0x36af/0x4280 [ 1683.808120][T28273] ? get_signal+0x10d7/0x1310 [ 1683.808142][T28273] ? arch_do_signal_or_restart+0xbc/0x830 [ 1683.808185][T28273] ? irqentry_exit+0x176/0x620 [ 1683.808228][T28273] ? asm_exc_page_fault+0x26/0x30 [ 1683.808260][T28273] ? mas_ascend+0x304/0x890 [ 1683.808316][T28273] ? vfs_coredump+0x36af/0x4280 [ 1683.808333][T28273] ? 0xffffffffff600000 [ 1683.808357][T28273] coredump_write+0x1224/0x1960 [ 1683.808383][T28273] ? __pfx_coredump_write+0x10/0x10 [ 1683.808405][T28273] ? vfs_coredump+0x213d/0x4280 [ 1683.808423][T28273] ? unshare_files+0xa8/0x140 [ 1683.808446][T28273] vfs_coredump+0x36af/0x4280 [ 1683.808472][T28273] ? __pfx_vfs_coredump+0x10/0x10 [ 1683.808488][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.808512][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.808538][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.808559][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.808579][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.808602][T28273] ? unwind_next_frame+0xa5/0x23c0 [ 1683.808628][T28273] ? unwind_next_frame+0xa5/0x23c0 [ 1683.808650][T28273] ? is_bpf_text_address+0x26/0x2b0 [ 1683.808701][T28273] ? is_bpf_text_address+0x26/0x2b0 [ 1683.808729][T28273] ? is_bpf_text_address+0x292/0x2b0 [ 1683.808755][T28273] ? is_bpf_text_address+0x26/0x2b0 [ 1683.808781][T28273] ? get_signal+0xa29/0x1310 [ 1683.808798][T28273] ? kernel_text_address+0xa5/0xe0 [ 1683.808836][T28273] ? __kernel_text_address+0xd/0x30 [ 1683.808861][T28273] ? unwind_get_return_address+0x4d/0x90 [ 1683.808886][T28273] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1683.808934][T28273] ? arch_stack_walk+0xfb/0x150 [ 1683.808962][T28273] ? stack_trace_save+0xa9/0x100 [ 1683.808987][T28273] ? __pfx_stack_trace_save+0x10/0x10 [ 1683.809015][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.809037][T28273] ? kasan_save_track+0x4f/0x80 [ 1683.809057][T28273] ? kasan_save_track+0x3e/0x80 [ 1683.809076][T28273] ? kasan_save_free_info+0x46/0x50 [ 1683.809093][T28273] ? __kasan_slab_free+0x5c/0x80 [ 1683.809123][T28273] ? kmem_cache_free+0x18d/0x8c0 [ 1683.809146][T28273] ? get_signal+0xa29/0x1310 [ 1683.809161][T28273] ? arch_do_signal_or_restart+0xbc/0x830 [ 1683.809187][T28273] ? irqentry_exit+0x176/0x620 [ 1683.809206][T28273] ? asm_exc_page_fault+0x26/0x30 [ 1683.809229][T28273] ? do_raw_spin_lock+0x12b/0x2f0 [ 1683.809259][T28273] ? rt_spin_unlock+0x14f/0x200 [ 1683.809325][T28273] ? rt_spin_unlock+0x160/0x200 [ 1683.809353][T28273] get_signal+0x10d7/0x1310 [ 1683.809378][T28273] arch_do_signal_or_restart+0xbc/0x830 [ 1683.809407][T28273] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1683.809443][T28273] irqentry_exit+0x176/0x620 [ 1683.809463][T28273] ? trace_irq_disable+0x37/0x100 [ 1683.809502][T28273] asm_exc_page_fault+0x26/0x30 [ 1683.809518][T28273] RIP: 0033:0x7fe602a6bf81 [ 1683.809533][T28273] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1683.809549][T28273] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1683.809569][T28273] RAX: 0000000000000000 RBX: 00007fe602ce5fa0 RCX: 00007fe602a6bf79 [ 1683.809584][T28273] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1683.809596][T28273] RBP: 00007fe602b027e0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.809606][T28273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1683.809616][T28273] R13: 00007fe602ce6038 R14: 00007fe602ce5fa0 R15: 00007fffca7d23d8 [ 1683.809636][T28273] [ 1683.809642][T28273] [ 1683.809647][T28273] The buggy address belongs to the physical page: [ 1683.809660][T28273] page: refcount:7 mapcount:5 mapping:0000000000000000 index:0x0 pfn:0xaa548 [ 1683.809680][T28273] flags: 0x80000000000000(node=0|zone=1) [ 1683.809704][T28273] raw: 0080000000000000 ffffea0002a95208 ffffea0002a95208 0000000000000000 [ 1683.809719][T28273] raw: 0000000000000000 0000000000000000 0000000700000004 0000000000000000 [ 1683.809728][T28273] page dumped because: kasan: bad access detected [ 1683.809741][T28273] page_owner tracks the page as allocated [ 1683.809747][T28273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 24777, tgid 24777 (syz-executor), ts 1428328264450, free_ts 0 [ 1683.809782][T28273] post_alloc_hook+0x228/0x280 [ 1683.809858][T28273] get_page_from_freelist+0x28bb/0x2950 [ 1683.809885][T28273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1683.809914][T28273] alloc_pages_mpol+0xd1/0x380 [ 1683.809979][T28273] alloc_pages_noprof+0xce/0x1e0 [ 1683.810005][T28273] __vmalloc_node_range_noprof+0x79b/0x1730 [ 1683.810046][T28273] vmalloc_user_noprof+0xad/0xe0 [ 1683.810067][T28273] kcov_ioctl+0x58/0x640 [ 1683.810088][T28273] __se_sys_ioctl+0xff/0x170 [ 1683.810145][T28273] do_syscall_64+0xe2/0xf80 [ 1683.810164][T28273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.810179][T28273] page_owner free stack trace missing [ 1683.810186][T28273] [ 1683.810189][T28273] Memory state around the buggy address: [ 1683.810203][T28273] ffff8880aa547f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1683.810215][T28273] ffff8880aa547f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1683.810227][T28273] >ffff8880aa548000: 00 d3 c3 32 80 88 ff ff 00 00 00 00 00 00 00 00 [ 1683.810236][T28273] ^ [ 1683.810244][T28273] ffff8880aa548080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1683.810267][T28273] ffff8880aa548100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1683.810276][T28273] ================================================================== [ 1683.810290][T28273] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1683.810307][T28273] CPU: 0 UID: 0 PID: 28273 Comm: syz.7.7465 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1683.810326][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1683.810336][T28273] Call Trace: [ 1683.810343][T28273] [ 1683.810350][T28273] vpanic+0x1e0/0x670 [ 1683.810376][T28273] panic+0xc5/0xd0 [ 1683.810398][T28273] ? __pfx_panic+0x10/0x10 [ 1683.810422][T28273] ? copy_mc_to_kernel+0x35/0xa0 [ 1683.810445][T28273] ? rcu_is_watching+0x15/0xb0 [ 1683.810469][T28273] ? copy_mc_to_kernel+0x35/0xa0 [ 1683.810491][T28273] check_panic_on_warn+0x89/0xb0 [ 1683.810516][T28273] ? copy_mc_to_kernel+0x35/0xa0 [ 1683.810538][T28273] end_report+0x6f/0x140 [ 1683.810562][T28273] kasan_report+0x128/0x150 [ 1683.810585][T28273] ? copy_mc_to_kernel+0x35/0xa0 [ 1683.810611][T28273] kasan_check_range+0x264/0x2c0 [ 1683.810637][T28273] copy_mc_to_kernel+0x35/0xa0 [ 1683.810667][T28273] dump_user_range+0x31a/0x12d0 [ 1683.810695][T28273] ? __pfx_dump_user_range+0x10/0x10 [ 1683.810737][T28273] ? elf_coredump_extra_notes_write+0x441/0x4d0 [ 1683.810764][T28273] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1683.810797][T28273] elf_core_dump+0x34c2/0x3ad0 [ 1683.810830][T28273] ? __pfx_elf_core_dump+0x10/0x10 [ 1683.810852][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.810877][T28273] ? __kvmalloc_node_noprof+0x3d2/0x8f0 [ 1683.810907][T28273] ? coredump_write+0x381/0x1960 [ 1683.810928][T28273] ? vfs_coredump+0x36af/0x4280 [ 1683.810947][T28273] ? get_signal+0x10d7/0x1310 [ 1683.810965][T28273] ? arch_do_signal_or_restart+0xbc/0x830 [ 1683.810996][T28273] ? irqentry_exit+0x176/0x620 [ 1683.811032][T28273] ? asm_exc_page_fault+0x26/0x30 [ 1683.811053][T28273] ? mas_ascend+0x304/0x890 [ 1683.811107][T28273] ? vfs_coredump+0x36af/0x4280 [ 1683.811129][T28273] ? 0xffffffffff600000 [ 1683.811154][T28273] coredump_write+0x1224/0x1960 [ 1683.811186][T28273] ? __pfx_coredump_write+0x10/0x10 [ 1683.811215][T28273] ? vfs_coredump+0x213d/0x4280 [ 1683.811236][T28273] ? unshare_files+0xa8/0x140 [ 1683.811264][T28273] vfs_coredump+0x36af/0x4280 [ 1683.811296][T28273] ? __pfx_vfs_coredump+0x10/0x10 [ 1683.811317][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.811342][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.811371][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.811400][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.811425][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.811456][T28273] ? unwind_next_frame+0xa5/0x23c0 [ 1683.811486][T28273] ? unwind_next_frame+0xa5/0x23c0 [ 1683.811515][T28273] ? is_bpf_text_address+0x26/0x2b0 [ 1683.811554][T28273] ? is_bpf_text_address+0x26/0x2b0 [ 1683.811588][T28273] ? is_bpf_text_address+0x292/0x2b0 [ 1683.811620][T28273] ? is_bpf_text_address+0x26/0x2b0 [ 1683.811652][T28273] ? get_signal+0xa29/0x1310 [ 1683.811672][T28273] ? kernel_text_address+0xa5/0xe0 [ 1683.811701][T28273] ? __kernel_text_address+0xd/0x30 [ 1683.811730][T28273] ? unwind_get_return_address+0x4d/0x90 [ 1683.811758][T28273] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1683.811792][T28273] ? arch_stack_walk+0xfb/0x150 [ 1683.811825][T28273] ? stack_trace_save+0xa9/0x100 [ 1683.811857][T28273] ? __pfx_stack_trace_save+0x10/0x10 [ 1683.811893][T28273] ? __lock_acquire+0x6b5/0x2cf0 [ 1683.811917][T28273] ? kasan_save_track+0x4f/0x80 [ 1683.811942][T28273] ? kasan_save_track+0x3e/0x80 [ 1683.811965][T28273] ? kasan_save_free_info+0x46/0x50 [ 1683.811985][T28273] ? __kasan_slab_free+0x5c/0x80 [ 1683.812009][T28273] ? kmem_cache_free+0x18d/0x8c0 [ 1683.812036][T28273] ? get_signal+0xa29/0x1310 [ 1683.812053][T28273] ? arch_do_signal_or_restart+0xbc/0x830 [ 1683.812083][T28273] ? irqentry_exit+0x176/0x620 [ 1683.812110][T28273] ? asm_exc_page_fault+0x26/0x30 [ 1683.812139][T28273] ? do_raw_spin_lock+0x12b/0x2f0 [ 1683.812176][T28273] ? rt_spin_unlock+0x14f/0x200 [ 1683.812209][T28273] ? rt_spin_unlock+0x160/0x200 [ 1683.812241][T28273] get_signal+0x10d7/0x1310 [ 1683.812273][T28273] arch_do_signal_or_restart+0xbc/0x830 [ 1683.812307][T28273] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1683.812351][T28273] irqentry_exit+0x176/0x620 [ 1683.812374][T28273] ? trace_irq_disable+0x37/0x100 [ 1683.812403][T28273] asm_exc_page_fault+0x26/0x30 [ 1683.812423][T28273] RIP: 0033:0x7fe602a6bf81 [ 1683.812441][T28273] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1683.812461][T28273] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1683.812479][T28273] RAX: 0000000000000000 RBX: 00007fe602ce5fa0 RCX: 00007fe602a6bf79 [ 1683.812494][T28273] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1683.812507][T28273] RBP: 00007fe602b027e0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.812521][T28273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1683.812534][T28273] R13: 00007fe602ce6038 R14: 00007fe602ce5fa0 R15: 00007fffca7d23d8 [ 1683.812559][T28273] [ 1683.813148][T28273] Kernel Offset: disabled