last executing test programs: 27m48.19489727s ago: executing program 32 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@RTA_NH_ID={0x8, 0x12, 0x81}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7ff) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xfffffffffffffffc}, &(0x7f0000000540)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x30, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xddb}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 20m47.772063386s ago: executing program 33 (id=1160): chdir(0x0) mkdir(0x0, 0x0) socket(0xa, 0x2, 0x0) setregid(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x4, r0}, {0x2, 0x2}, {0x2, 0x2, r0}], {}, [], {0x10, 0x2}}, 0x3c, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000080)={[{@auto_da_alloc}, {@delalloc}, {@resuid}, {@data_ordered}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x11, 0x5d8, &(0x7f00000005c0)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x1, 0x2000402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x7, 0x0, 0x8, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x807, 0x4, 0x6, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0x2, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x77) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sched_getscheduler(0x0) 20m45.072184927s ago: executing program 34 (id=1165): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 18m22.817914906s ago: executing program 35 (id=1536): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) io_uring_enter(0xffffffffffffffff, 0x15fe, 0x20, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="027ffffffe"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5, 0xc06, 0xffffffff, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x19, 0x1, 0x0, 0x0, "8aee974fff186584d25af3abfe3e407370d621fd21a4b939372d2e9563a75eb616e70c2d99a8440a163e7e88f2e01967c14cf0c34c9258ec7685ffc3aba57e0f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 15m4.102418168s ago: executing program 6 (id=1969): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') socket$inet6(0xa, 0x800000000000002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2000, 0x0) 15m2.906578098s ago: executing program 6 (id=1970): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) 14m58.574116473s ago: executing program 6 (id=1977): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)='\"', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 14m56.354559594s ago: executing program 6 (id=1981): openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a008000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200082, 0x0) pwrite64(r1, &(0x7f00000000c0)="b184bdea45", 0x5, 0x7) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000080)={0x20, 0x11, 0x7, "4beb0e4d0a03c7"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x0, 0x0}, 0x10) 14m50.270436511s ago: executing program 6 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) 14m50.066474695s ago: executing program 6 (id=1996): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r4}) socket$inet6(0xa, 0x2, 0x24000) 14m33.958641328s ago: executing program 36 (id=1996): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r4}) socket$inet6(0xa, 0x2, 0x24000) 13m31.983980822s ago: executing program 2 (id=2230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pipe2(&(0x7f0000000200), 0x80800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5632e2e"], 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 13m31.202406632s ago: executing program 2 (id=2233): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa466", 0xd6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000ec0)="10a31596b8266db970ee529e69000f5ffe120ced3a15de6c6c7379299dbd2e001d40ecf6a5a2d9614f14d856d3c9cb5fac6924aca0915196793dc6b6de808e29d23ac1bd9e6d4c5cc2ad7735a023fc77631d119ab511d598c4c39c704da5d2869205f5bee22ea8ef54ae14ee9f0e98ec8086c7fc8d6277bc081c6dc3bc3145600e12995030890d591b82ff1b9c768e3444998cdcd83c3b5c94075ffcff6c8ec317106a6a4be0979cdcc1f56e0fb84962", 0xb0}, {&(0x7f0000000f80)="d76bcc4dfc22fdfde9f3ca5d24fe281d198dab6307a4bebb0e6a388208b8c348f1dcb90b1c9d27dc7d99db4607e2cd739c9c557c11d99433cdab2d0bb4dddbfad131dc504eb71aaf195d43c53537dc15a65fbbb5c9c5b98352e5741115d4e984a9600834d90c6c2c0393902ce0e77028909fbf62", 0x74}], 0x2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x188}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000780)="22b59edde9a5e441fa1386235071d904983bd3170d0b551c7aa0d295f0da090e7a92e821b3fe2224b389f5978cbc1e29e1df957e7f98d5ff65caf1fc2bcca85f2fc2386586c293b7defbbb1b0edb261de9616eb8c0a9885a3e882c2b0bfaf218a9dd11c8af3d3949199a4166168d19762a5842e540b5a8cee1b2c922f8dd708b0d4046e6941fdad3a402a88e6c15b5a7284a8449e9b1bee2", 0x98}, {&(0x7f0000000ac0)="3ae931b02bc47e267e5e87a8ca40e44e218b89667d7ae58a5c879798a6459ce9c14a835fdde426f4bac752dd5746aa2bf2312cd377234164db3fcede1ad1f5565299ff0c71415c20df0a7770e8ef378de7a94466025643b300b7869a6c712f90d29d329e13d6563b2b7676b0861a60efa7554d4eb73cdf3bd40a890e8bb9b6f251861f702f17d47c358e326712bef1d9d3554ce6ff53afba5e4c963fd4fb702663b387fcb75e", 0xa6}, {&(0x7f0000000b80)="4b6d7c705c0b33346a5657ad3b72e234cb248dee1a562bcca1bda60e0ef9387bf96dca519a5fbc", 0x27}], 0x3}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13m30.724235662s ago: executing program 2 (id=2236): unshare(0x22020400) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000003a80)) 13m30.242835252s ago: executing program 2 (id=2241): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}, {@nobh}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 13m29.603478629s ago: executing program 2 (id=2246): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000"], 0x0, 0x28}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x38, 0xfffffffffffffffe}, 0x10) 13m28.491068765s ago: executing program 2 (id=2250): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1, 0x6, 0x0, 0x9}, {0x4a, 0x16, 0x1, 0x6}, {0xcaf, 0x7d, 0x2, 0x5}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) unshare(0x28000600) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/104, 0x68) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x43, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r4, 0xd3) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x33, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x20000001) 13m12.156329016s ago: executing program 37 (id=2250): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1, 0x6, 0x0, 0x9}, {0x4a, 0x16, 0x1, 0x6}, {0xcaf, 0x7d, 0x2, 0x5}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) unshare(0x28000600) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/104, 0x68) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x43, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r4, 0xd3) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x33, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x20000001) 8m21.176577641s ago: executing program 9 (id=3033): r0 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010104, 0x4e20, 0x3, 'rr\x00', 0x1, 0x80005, 0x1b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m20.827845049s ago: executing program 9 (id=3036): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8m19.522463607s ago: executing program 9 (id=3039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e6576653000"], 0x104}}, 0x0) 8m18.60722389s ago: executing program 9 (id=3040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) 8m17.47096217s ago: executing program 9 (id=3042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000340)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e6, 0x0) 8m15.465830416s ago: executing program 9 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 8m6.692734382s ago: executing program 1 (id=3065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, r6, 0x0, r6], [0x2b8], [0x0, 0x1]}) close_range(r0, 0xffffffffffffffff, 0x0) 8m4.773406894s ago: executing program 1 (id=3069): setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x35, &(0x7f000000cf3d)=""/195}, 0x48) 8m4.384443189s ago: executing program 1 (id=3071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b703000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 8m2.950034578s ago: executing program 1 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 8m1.225769297s ago: executing program 1 (id=3075): r0 = syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000340)={0x0, 0x1, 0x2, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x28000080) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 7m58.51451571s ago: executing program 38 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7m58.380838512s ago: executing program 1 (id=3079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000000440), 0x1068801, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) 7m45.669476928s ago: executing program 5 (id=3097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x200000, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000100)={0x0, 0x400, 0x3, 0x1, 0x5, 0xfffffffe, 0x9}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000001000000"]) 7m44.487018426s ago: executing program 5 (id=3099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000340)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) 7m42.900901401s ago: executing program 5 (id=3100): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) 7m41.962781888s ago: executing program 39 (id=3079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000000440), 0x1068801, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) 7m36.306088383s ago: executing program 5 (id=3111): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x1e, r1, {0x1}}, './bus\x00'}) 7m35.623117108s ago: executing program 5 (id=3112): mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) 7m34.707491391s ago: executing program 5 (id=3114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pipe2(&(0x7f0000000200), 0x80800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5632e2e"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 7m34.069738387s ago: executing program 40 (id=3114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pipe2(&(0x7f0000000200), 0x80800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5632e2e"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 33.089266277s ago: executing program 0 (id=4194): unshare(0xe040400) r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0) 32.013578437s ago: executing program 0 (id=4198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 31.520727449s ago: executing program 0 (id=4203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet(0x2, 0x0, 0x10000) socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 31.163213709s ago: executing program 0 (id=4205): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x1e, r1, {0x1}}, './bus\x00'}) 30.330138988s ago: executing program 0 (id=4207): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x800) 29.747021346s ago: executing program 0 (id=4210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 29.136082597s ago: executing program 41 (id=4210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 13.497033213s ago: executing program 8 (id=4256): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x800) 12.249468841s ago: executing program 3 (id=4260): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r0, &(0x7f0000000040)="09000000010001", 0x7) 12.043005286s ago: executing program 3 (id=4262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r2, 0x800) accept4(r2, 0x0, 0x0, 0x80000) socket(0x10, 0x803, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000001280), 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 10.803255753s ago: executing program 7 (id=4264): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x800) 7.277299273s ago: executing program 8 (id=4265): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2], 0x34}}, 0x0) 7.077737387s ago: executing program 7 (id=4267): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.977231423s ago: executing program 3 (id=4268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0xb0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x6c, 0x9, 0x0, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0xfffffffa, 0xffffffffffffffff, 0x40, 0x1}, 0x5d}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000002180)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1b}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff880000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb005b) 6.930730091s ago: executing program 4 (id=4269): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.687078462s ago: executing program 4 (id=4270): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00@'], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockname$tipc(r0, 0x0, &(0x7f0000000080)) 6.686749352s ago: executing program 8 (id=4271): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 6.503051723s ago: executing program 4 (id=4272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4c}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040094) 6.498751913s ago: executing program 8 (id=4273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4008894) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x10004081) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, 0x0, 0x20000010) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, 0x0, 0x4010) recvfrom(r3, &(0x7f00000012c0)=""/4054, 0xfd6, 0x40000323, 0x0, 0x0) 6.213839441s ago: executing program 4 (id=4274): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x14, 0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x62040400) socket(0x2b, 0x80801, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x300, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1000}, 0x4000) 6.212623482s ago: executing program 8 (id=4275): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x800) 1.61717681s ago: executing program 3 (id=4276): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.206491778s ago: executing program 8 (id=4277): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x800) 1.047844655s ago: executing program 7 (id=4278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)='\x00'/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 657.17342ms ago: executing program 7 (id=4279): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 533.368811ms ago: executing program 4 (id=4280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x58}, 0x0) 474.227171ms ago: executing program 3 (id=4281): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00@'], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockname$tipc(r0, 0x0, &(0x7f0000000080)) 291.197702ms ago: executing program 7 (id=4282): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 238.015721ms ago: executing program 4 (id=4283): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000740)={0x0, 0x0, "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", "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"}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0xd24, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0xe7e, 0x0) read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001840)={'ip6tnl0\x00', &(0x7f00000017c0)={'syztnl1\x00', 0x0, 0x4, 0x13, 0x3, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7800, 0x7, 0x2, 0x1}}) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000080)={0x4, 0xfffff001, 0x9, 0x8000003, 0x20, "3eccd2000500000000000e00"}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x1c, 0x1e, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x3, 0x0, 0x1, [@generic="fce10c6b"]}]}, 0x1c}}, 0xc010) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000001740)) 179.01516ms ago: executing program 3 (id=4284): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000"/16], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="060006030100000008000100", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 7 (id=4285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0xb0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x6c, 0x9, 0x0, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0xfffffffa, 0xffffffffffffffff, 0x40, 0x1}, 0x5d}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000002180)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1b}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff880000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb005b) kernel console output (not intermixed with test programs): , bcdDevice= 0.40 [ 1391.294434][T13226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.312379][T13226] usb 5-1: config 0 descriptor?? [ 1391.547640][T13226] usb 5-1: USB disconnect, device number 4 [ 1391.925598][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1391.987219][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1392.048515][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.114185][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.229439][T17312] loop4: detected capacity change from 0 to 1024 [ 1392.242827][T17312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1392.298025][T17312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1392.320927][T17312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1392.329179][T17312] System zones: 0-1, 3-36 [ 1392.347145][T17312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1392.774119][ T4321] bond0 (unregistering): Released all slaves [ 1392.884835][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1392.895191][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1392.905943][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1392.915599][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1392.928368][T17042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.947229][T17042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.958081][T17042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.973709][T17042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.106690][T17150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1393.148203][T13514] EXT4-fs (loop4): unmounting filesystem. [ 1393.168128][T17150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1393.412445][T17150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1393.467204][T17325] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1393.490562][T17150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1393.596016][T17321] device syzkaller0 entered promiscuous mode [ 1394.326659][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1394.333106][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1400.480844][T17342] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3155'. [ 1400.550765][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.645615][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.802484][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1401.291519][ T9376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.299752][ T9376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.307587][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1401.423718][T17191] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1401.782259][T17346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1401.798865][T17347] device wlan0 entered promiscuous mode [ 1401.821966][T17347] bond6: (slave wlan0): Enslaving as an active interface with an up link [ 1401.832843][T17191] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1401.932209][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 1402.030211][T17191] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1402.167038][T17150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.204865][T17191] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1402.304338][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1402.337582][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1402.532523][ T4321] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.545516][ T4321] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.565571][T17150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.710669][T17360] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1402.833817][ T4321] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.870855][ T4321] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.922999][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1402.949607][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.993001][T11158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.000422][T11158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.034419][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1403.047397][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1403.057195][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1403.067236][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1403.106866][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1403.114371][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1403.151890][ T4321] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.188921][ T4321] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.265010][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1403.274108][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1403.299193][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1403.313216][T11158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.320683][T11158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.371738][ T4321] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.382799][ T4321] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.413535][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1403.444619][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1403.501245][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1403.546772][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1403.563819][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1403.609572][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1403.618967][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1403.666696][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1403.712397][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1403.735171][T17150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1403.763452][T17150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1403.806747][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1403.831472][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1403.858280][T17367] lo speed is unknown, defaulting to 1000 [ 1404.010938][T17191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.134111][T17191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.257678][ T4321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.294909][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1404.325238][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1404.378434][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1404.387390][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1404.434188][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.441642][ T9586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.482483][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1404.515279][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1404.557688][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.564944][ T9586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.595529][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1404.727632][ T4321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.787167][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1404.829501][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1404.909851][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1404.957508][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1405.156842][T17150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.271669][ T4321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.322034][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1405.338158][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1405.346364][ T8749] Bluetooth: hci2: command 0x0409 tx timeout [ 1405.420796][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1405.529260][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1405.604525][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.690851][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1405.784178][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1405.882577][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1405.954118][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.171456][T17401] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1406.306522][ T4321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.543586][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.576646][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.672814][T17412] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1406.814152][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.829088][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.564096][ T8749] Bluetooth: hci2: command 0x041b tx timeout [ 1407.789031][T17150] device veth0_vlan entered promiscuous mode [ 1407.807099][T17367] chnl_net:caif_netlink_parms(): no params data found [ 1408.012243][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1408.053955][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1408.153379][T17367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.166876][T17367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.225633][T17367] device bridge_slave_0 entered promiscuous mode [ 1408.275210][T17150] device veth1_vlan entered promiscuous mode [ 1408.333063][T17367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.341341][T17367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.390187][T17367] device bridge_slave_1 entered promiscuous mode [ 1408.541407][T17367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.611710][T13104] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1408.648787][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1408.687818][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1408.720909][T17367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.756360][T17191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.806116][T13104] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1408.830755][T13104] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.877342][T13104] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1408.908510][T13104] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.954175][T13104] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1408.974927][T13104] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1409.004942][T13104] usb 9-1: Product: syz [ 1409.016788][T13104] usb 9-1: Manufacturer: syz [ 1409.067607][T13104] cdc_wdm 9-1:1.0: skipping garbage [ 1409.079551][T13104] cdc_wdm 9-1:1.0: skipping garbage [ 1409.154470][T13104] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1409.160923][T13104] cdc_wdm 9-1:1.0: Unknown control protocol [ 1409.269218][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1409.301068][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1409.385231][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1409.392439][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1409.399312][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1409.405972][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1409.413027][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1409.419688][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1409.434419][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1409.441279][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1409.447718][ T4318] usb 9-1: USB disconnect, device number 8 [ 1409.521439][T17150] device veth0_macvtap entered promiscuous mode [ 1409.549077][T17367] team0: Port device team_slave_0 added [ 1409.787966][ T8749] Bluetooth: hci2: command 0x040f tx timeout [ 1409.817725][T17150] device veth1_macvtap entered promiscuous mode [ 1409.869027][T17367] team0: Port device team_slave_1 added [ 1410.182809][T17367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.199877][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.177455][T17367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.215810][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.284395][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.314209][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.336040][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.368672][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.399123][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.444875][T17150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.452511][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1411.488803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1411.527521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1411.731638][T17469] overlayfs: failed to resolve './file0': -2 [ 1412.011313][ T8749] Bluetooth: hci2: command 0x0419 tx timeout [ 1412.587584][T17367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.596956][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.663540][T17367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.710435][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.732309][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.753906][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.772904][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.784786][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.795588][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.814859][T17150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.992492][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1414.012623][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1414.033600][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1414.070358][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1414.091113][T17150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.104817][T17150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.125013][T17150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.172159][T17150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.214583][T17480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1415.220284][T17367] device hsr_slave_0 entered promiscuous mode [ 1415.227459][T17367] device hsr_slave_1 entered promiscuous mode [ 1415.236911][T17367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1415.244900][T17367] Cannot create hsr debugfs directory [ 1415.281453][T17489] netlink: 'syz.4.3175': attribute type 10 has an invalid length. [ 1415.308582][T17489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.317450][T17489] team0: Port device bond0 added [ 1416.309347][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1416.319214][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1416.342342][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1416.352369][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1416.580492][T17191] device veth0_vlan entered promiscuous mode [ 1416.713803][T17500] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3177'. [ 1416.738617][T17191] device veth1_vlan entered promiscuous mode [ 1416.833197][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.841180][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.935934][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1417.072516][ T4321] bond5: (slave wlan0): Releasing backup interface [ 1417.225441][T17191] device veth0_macvtap entered promiscuous mode [ 1417.274702][T16988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1417.290762][T16988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1417.321412][T16988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1417.643794][T17191] device veth1_macvtap entered promiscuous mode [ 1417.675918][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1417.787960][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1417.831151][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1417.858686][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1417.871126][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1417.881792][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1417.889214][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1418.213237][T17530] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1418.220142][T17530] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1418.237472][T17530] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1419.029043][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.077981][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.088068][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.099383][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.109634][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.120777][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.130682][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.141906][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.154648][T17191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.267982][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1419.287028][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1419.355660][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.366229][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.490013][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.596879][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.686910][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.782560][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.913880][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.986206][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.088336][T17191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.115055][T11790] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1420.136655][ T8749] Bluetooth: hci3: command 0x0409 tx timeout [ 1420.181925][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1420.248178][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1420.377754][T11790] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1420.380677][T17367] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.407723][T11790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.416814][T11790] usb 9-1: Product: syz [ 1420.421141][T11790] usb 9-1: Manufacturer: syz [ 1420.430144][T11790] usb 9-1: SerialNumber: syz [ 1420.449578][T11790] usb 9-1: config 0 descriptor?? [ 1420.484498][T17541] bond6: (slave wlan0): Releasing backup interface [ 1420.517209][T17191] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.540969][T17191] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.571946][T17191] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.603234][T17191] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.679552][T11790] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1420.709159][T17367] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.731934][T17522] lo speed is unknown, defaulting to 1000 [ 1420.761985][ T4321] device hsr_slave_0 left promiscuous mode [ 1420.781916][ T4321] device hsr_slave_1 left promiscuous mode [ 1420.799873][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.818410][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.851468][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.880306][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.896538][ T4321] device bridge_slave_1 left promiscuous mode [ 1420.916995][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.929614][ T4321] device bridge_slave_0 left promiscuous mode [ 1420.937786][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.952934][ T4321] device hsr_slave_0 left promiscuous mode [ 1420.971278][ T4321] device hsr_slave_1 left promiscuous mode [ 1420.994128][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.001765][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.054789][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.076213][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.100296][ T4321] device bridge_slave_1 left promiscuous mode [ 1421.106641][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.137988][ T4321] device bridge_slave_0 left promiscuous mode [ 1421.147893][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.463788][ T4321] device veth1_macvtap left promiscuous mode [ 1421.517204][ T4321] device veth1_vlan left promiscuous mode [ 1421.561495][ T4321] device veth0_vlan left promiscuous mode [ 1422.260417][T11790] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1422.289133][T11790] usb 9-1: USB disconnect, device number 9 [ 1422.360533][ T8749] Bluetooth: hci3: command 0x041b tx timeout [ 1422.689474][ T4321] bond5 (unregistering): Released all slaves [ 1423.082445][ T4321] bond4 (unregistering): Released all slaves [ 1423.793936][ T4321] bond3 (unregistering): Released all slaves [ 1424.013589][ T4321] bond2 (unregistering): Released all slaves [ 1424.320612][ T4321] bond1 (unregistering): Released all slaves [ 1424.592621][ T8749] Bluetooth: hci3: command 0x040f tx timeout [ 1424.876481][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1424.945304][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1425.027109][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.139790][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.372237][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1425.411355][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1425.421081][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1425.443136][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1425.464663][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1425.475415][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1425.794535][ T4321] bond0 (unregistering): Released all slaves [ 1426.131109][ T4321] bond3 (unregistering): Released all slaves [ 1426.350528][ T4321] bond2 (unregistering): Released all slaves [ 1426.563903][ T4321] bond1 (unregistering): Released all slaves [ 1426.813026][ T8749] Bluetooth: hci3: command 0x0419 tx timeout [ 1427.142184][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1427.211282][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1427.273053][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.342146][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.748854][ T8749] Bluetooth: hci4: command 0x0409 tx timeout [ 1427.875774][ T4321] bond0 (unregistering): Released all slaves [ 1428.104894][T17367] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.197590][T17583] device macvtap1 entered promiscuous mode [ 1428.203483][T17583] device syz_tun entered promiscuous mode [ 1428.214520][T17583] device syz_tun left promiscuous mode [ 1428.965383][T17367] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.971783][ T8749] Bluetooth: hci4: command 0x041b tx timeout [ 1430.044514][T17585] lo speed is unknown, defaulting to 1000 [ 1431.539112][T17367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1431.730883][T17367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1431.782110][T17367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1431.833148][T17522] chnl_net:caif_netlink_parms(): no params data found [ 1431.852879][T17585] chnl_net:caif_netlink_parms(): no params data found [ 1431.915144][T17367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1432.197390][ T8749] Bluetooth: hci4: command 0x040f tx timeout [ 1432.906048][T17636] device macvtap1 entered promiscuous mode [ 1432.912082][T17636] device syz_tun entered promiscuous mode [ 1432.932717][T17636] device syz_tun left promiscuous mode [ 1433.199065][T17585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.273680][T17585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.287093][T17585] device bridge_slave_0 entered promiscuous mode [ 1433.295973][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.336540][T17522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.360745][T17522] device bridge_slave_0 entered promiscuous mode [ 1434.253074][T17585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.323973][T17585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.424977][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 1434.508315][T17585] device bridge_slave_1 entered promiscuous mode [ 1434.601164][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.608941][T17522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.626982][T17522] device bridge_slave_1 entered promiscuous mode [ 1434.944259][T17522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.998931][T17522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.080134][T17585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.149749][T17585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.182752][T17367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.222188][T17522] team0: Port device team_slave_0 added [ 1435.297393][T17585] team0: Port device team_slave_0 added [ 1435.310667][T17522] team0: Port device team_slave_1 added [ 1435.365538][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1435.414567][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1435.426206][T17367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.472911][T17585] team0: Port device team_slave_1 added [ 1435.527441][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1435.585811][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1435.627191][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.634412][ T9364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.666907][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1435.709625][T17522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.735197][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.819441][T17522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.882657][T17585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.911455][T17585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.038853][T17585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.881150][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1436.890150][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1436.898831][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.906150][ T9364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.918779][T17522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.953830][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.188969][T17522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.304651][T17585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.335626][T17585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.738860][T17585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.800974][T17367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1437.880258][T17675] 9pnet_virtio: no channels available for device syz [ 1438.094363][T17677] overlayfs: unrecognized mount option "/" or missing value [ 1438.784080][T17367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1438.827003][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1438.836260][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1438.856174][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1439.543777][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1439.572718][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1439.664207][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1439.758093][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1439.848698][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1439.950509][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1440.076047][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1440.473346][T17585] device hsr_slave_0 entered promiscuous mode [ 1440.482437][T17585] device hsr_slave_1 entered promiscuous mode [ 1440.652857][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1440.661309][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1440.761901][T17522] device hsr_slave_0 entered promiscuous mode [ 1440.889786][T17522] device hsr_slave_1 entered promiscuous mode [ 1440.910954][T17522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1440.960071][T17522] Cannot create hsr debugfs directory [ 1441.623858][T17585] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.764143][T17701] device macvtap1 entered promiscuous mode [ 1441.770172][T17701] device syz_tun entered promiscuous mode [ 1441.792349][T17701] device syz_tun left promiscuous mode [ 1441.954257][T17585] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.161035][T17585] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.367915][ T4321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.431530][T17367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.798111][T17585] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.192912][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1443.345897][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1443.529570][ T4321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.557799][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1443.641681][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1443.808442][ T4321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.999579][ T4321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.070542][T17367] device veth0_vlan entered promiscuous mode [ 1444.118672][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1444.135610][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1444.186027][T17367] device veth1_vlan entered promiscuous mode [ 1444.222605][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1444.236753][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1444.285782][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1444.522212][T17367] device veth0_macvtap entered promiscuous mode [ 1444.530907][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1444.562375][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1444.631978][T17367] device veth1_macvtap entered promiscuous mode [ 1444.652079][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1444.692398][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1444.784372][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.838785][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.889925][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.936682][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.971741][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1445.015315][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.219015][T17367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.237462][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1445.265994][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1445.282346][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.322722][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.332789][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.386029][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.408658][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.616592][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.669512][T17367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.691129][T17367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.422025][T17367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.140628][T17367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.162128][T17367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.190711][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1448.214593][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1449.059361][T17750] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1449.084288][T17751] bond9: (slave wlan0): Enslaving as an active interface with an up link [ 1450.019549][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 1450.343401][ T5622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.363641][ T5622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.466817][T17770] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3219'. [ 1450.707002][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1450.988990][T11158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.030674][T11158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.043771][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1454.873230][T17799] Bluetooth: MGMT ver 1.22 [ 1456.515898][ T26] audit: type=1326 audit(1776159823.528:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17814 comm="syz.0.3227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b99f9c819 code=0x0 [ 1456.715136][T17810] bond9: (slave wlan0): Releasing backup interface [ 1456.957905][T17522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1457.029435][T17522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1457.058574][T17522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1457.078675][T17522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1457.115245][T17826] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3228'. [ 1457.547731][T17585] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1459.116598][T17585] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1459.550529][T17585] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1459.561548][T17585] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1460.034555][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1460.042891][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1460.507584][ T4321] device hsr_slave_0 left promiscuous mode [ 1460.525984][ T4321] device hsr_slave_1 left promiscuous mode [ 1460.548510][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.575424][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.629858][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.651621][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.716468][ T4321] device bridge_slave_1 left promiscuous mode [ 1460.728818][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.769795][ T4321] device bridge_slave_0 left promiscuous mode [ 1460.780220][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.879269][ T4321] device hsr_slave_0 left promiscuous mode [ 1460.888302][ T4321] device hsr_slave_1 left promiscuous mode [ 1460.964149][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.972218][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.026498][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.049267][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.071517][ T4321] device bridge_slave_1 left promiscuous mode [ 1461.089428][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.134165][ T4321] device bridge_slave_0 left promiscuous mode [ 1461.156328][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.210137][ T4321] device hsr_slave_0 left promiscuous mode [ 1461.241827][ T4321] device hsr_slave_1 left promiscuous mode [ 1461.252813][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.260500][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.320924][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.337986][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.487136][ T4321] device bridge_slave_1 left promiscuous mode [ 1461.947102][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.012443][ T4321] device bridge_slave_0 left promiscuous mode [ 1462.018766][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.612415][ T4321] device veth1_macvtap left promiscuous mode [ 1462.637494][ T4321] device veth0_macvtap left promiscuous mode [ 1462.664715][ T4321] device veth1_vlan left promiscuous mode [ 1462.688789][ T4321] device veth0_vlan left promiscuous mode [ 1462.750961][ T4321] device veth1_macvtap left promiscuous mode [ 1462.759512][ T4321] device veth0_macvtap left promiscuous mode [ 1462.793453][ T4321] device veth1_vlan left promiscuous mode [ 1462.824140][ T4321] device veth0_vlan left promiscuous mode [ 1462.840243][ T4321] device veth1_macvtap left promiscuous mode [ 1462.850674][ T4321] device veth0_macvtap left promiscuous mode [ 1462.877840][ T4321] device veth1_vlan left promiscuous mode [ 1462.893649][ T4321] device veth0_vlan left promiscuous mode [ 1467.006048][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1467.110061][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1467.236181][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.355642][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.084741][ T4321] bond0 (unregistering): Released all slaves [ 1468.977552][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1469.043127][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1469.107726][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.181398][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.685130][ T4321] bond0 (unregistering): Released all slaves [ 1470.504937][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1470.575569][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1470.639259][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.703137][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.207734][ T4321] bond0 (unregistering): Released all slaves [ 1471.341769][T17522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.474184][T17522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.481278][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1471.494882][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1471.558822][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1471.597912][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1471.641355][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.648613][ T5622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.761355][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1471.884263][T17585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.896791][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1471.985364][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1472.572475][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.579687][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.609860][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1472.655125][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1472.730325][T17522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1472.788303][T17522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1472.839979][T17585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.871951][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1472.899742][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1473.306155][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1473.441187][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1473.459779][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1473.484820][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1473.547058][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1473.590420][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1473.621944][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1473.662083][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1473.707786][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1473.738337][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1473.803939][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1473.822868][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1473.911637][T13019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.918783][T13019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.029577][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1474.079647][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1474.127173][T13019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.134499][T13019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.384275][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1475.383885][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1475.429246][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1475.499656][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1475.594732][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1475.728434][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1475.749485][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1475.800270][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1475.872957][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1475.929744][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1476.003003][T17585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1476.088353][T17585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1476.137193][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1476.159744][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1476.624541][T17986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1476.637839][T17988] bond7: (slave wlan0): Opening slave failed [ 1478.669286][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1478.676952][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1478.866267][T17522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.779705][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1479.801335][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1479.988345][T18011] random: crng reseeded on system resumption [ 1480.985196][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1481.069269][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1481.183802][T17522] device veth0_vlan entered promiscuous mode [ 1481.210792][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1481.299383][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1481.775701][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1481.787743][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1481.827605][T17585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.183443][ T8749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1483.262663][ T8749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1483.275834][ T8749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1483.295797][ T8749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1483.454050][ T8749] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1483.461605][ T8749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1483.488953][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1483.498911][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1483.506587][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1483.522320][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1483.529984][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1483.537758][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1483.788731][T18036] lo speed is unknown, defaulting to 1000 [ 1485.488503][T18055] device wlan0 entered promiscuous mode [ 1485.734338][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 1486.156556][T18036] chnl_net:caif_netlink_parms(): no params data found [ 1486.245996][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1486.293002][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1486.424394][T17585] device veth0_vlan entered promiscuous mode [ 1486.505539][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1486.536125][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1486.588378][T17585] device veth1_vlan entered promiscuous mode [ 1487.079815][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1487.105393][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1487.135269][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1487.495269][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1487.520476][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1487.580056][T18036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.617271][T18036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.665026][T18036] device bridge_slave_0 entered promiscuous mode [ 1487.705886][T17585] device veth0_macvtap entered promiscuous mode [ 1487.736585][T18036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.759127][T18036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.927674][T18036] device bridge_slave_1 entered promiscuous mode [ 1487.966860][T17585] device veth1_macvtap entered promiscuous mode [ 1488.155202][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1488.220462][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1488.768542][T18036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.818070][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.872219][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.994580][T17585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.005221][T18036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.049657][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1489.070673][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1489.167756][T18036] team0: Port device team_slave_0 added [ 1489.473281][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.515696][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.589540][T17585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.647811][T18036] team0: Port device team_slave_1 added [ 1489.661269][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1489.704408][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1490.451673][T18036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.494635][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.908878][T18036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.978765][T18036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.036867][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.167428][T18036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.712573][T18036] device hsr_slave_0 entered promiscuous mode [ 1491.765148][ T8749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1491.778296][ T8749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1491.790120][ T8749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1491.800555][ T8749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1491.808733][ T8749] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1491.816223][ T8749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1491.845560][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1491.853474][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1491.861469][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1491.884399][T18036] device hsr_slave_1 entered promiscuous mode [ 1491.895528][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1491.903908][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1491.911586][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1491.947173][T18036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1491.955078][T18036] Cannot create hsr debugfs directory [ 1493.548846][T18142] 9pnet_virtio: no channels available for device syz [ 1494.168841][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 1495.091780][T18142] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1495.101373][T18142] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1495.111158][T18142] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1495.120448][ T26] audit: type=1800 audit(1776159859.615:98): pid=18142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3271" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1495.237906][T18142] syz.4.3271 (18142) used greatest stack depth: 19320 bytes left [ 1495.395897][T18135] lo speed is unknown, defaulting to 1000 [ 1496.914344][ T9364] device hsr_slave_0 left promiscuous mode [ 1496.963441][ T9364] device hsr_slave_1 left promiscuous mode [ 1496.981176][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.023706][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.050077][ T9364] device bridge_slave_1 left promiscuous mode [ 1497.066017][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.083843][ T9364] device bridge_slave_0 left promiscuous mode [ 1497.098129][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.036801][ T9364] device veth0_vlan left promiscuous mode [ 1499.295478][ T9364] team0 (unregistering): Port device team_slave_1 removed [ 1499.412547][ T9364] team0 (unregistering): Port device team_slave_0 removed [ 1499.518184][ T9364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.634818][ T9364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.341880][ T9364] bond0 (unregistering): Released all slaves [ 1501.159078][T18209] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1501.173497][T18210] bond10: (slave wlan0): Opening slave failed [ 1503.180656][T18236] team0: Port device bond0 removed [ 1503.215992][T18236] device bridge_slave_0 left promiscuous mode [ 1503.235853][T18236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.259590][T18236] device bridge_slave_1 left promiscuous mode [ 1503.271079][T18236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.322046][T18236] bond5: (slave veth0_to_bond): Releasing active interface [ 1503.356731][T18236] bond0: (slave bond_slave_0): Releasing backup interface [ 1503.366877][T18236] bond0: (slave bond_slave_1): Releasing backup interface [ 1503.380081][T18236] team0: Port device team_slave_0 removed [ 1503.401085][T18236] team0: Port device team_slave_1 removed [ 1503.415457][T18236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.456041][T18236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.469031][T18236] bond0: (slave wlan1): Releasing backup interface [ 1503.522754][T18135] chnl_net:caif_netlink_parms(): no params data found [ 1503.629652][T18238] team0: Mode changed to "activebackup" [ 1503.898732][T18135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.906171][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.915243][T18135] device bridge_slave_0 entered promiscuous mode [ 1503.924578][T18135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.932077][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.940952][T18135] device bridge_slave_1 entered promiscuous mode [ 1503.973190][T18135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.993446][T18226] Bluetooth: MGMT ver 1.22 [ 1503.998022][T18036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1504.094628][T18135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.196773][T18036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1504.556782][T18036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1504.598599][T18135] team0: Port device team_slave_0 added [ 1504.718582][T18036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1504.830395][T18135] team0: Port device team_slave_1 added [ 1504.990632][T18135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.018099][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.114926][T18135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.266127][T18135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.295901][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.517970][T18135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.922159][T18036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.969308][T18135] device hsr_slave_0 entered promiscuous mode [ 1507.011476][T18135] device hsr_slave_1 entered promiscuous mode [ 1507.056011][T18135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1507.082714][T18135] Cannot create hsr debugfs directory [ 1507.132486][T18036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.199904][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1507.212078][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1507.269632][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1507.305974][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1507.318799][T17076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.326037][T17076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.357746][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1507.368835][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1507.388857][T17076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.396053][T17076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.420140][ T26] audit: type=1326 audit(1776159871.149:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1507.457998][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1507.487741][ T26] audit: type=1326 audit(1776159871.177:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1507.558215][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1507.629285][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1507.638381][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1507.658188][ T26] audit: type=1326 audit(1776159871.177:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1507.725070][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1507.725100][T18285] netlink: 332 bytes leftover after parsing attributes in process `syz.8.3290'. [ 1507.768303][ T26] audit: type=1326 audit(1776159871.186:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1507.905645][ T26] audit: type=1326 audit(1776159871.196:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06d2d5d04e code=0x7ffc0000 [ 1508.035023][ T26] audit: type=1326 audit(1776159871.196:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1508.091156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1508.249193][ T26] audit: type=1326 audit(1776159871.196:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1508.271799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1508.279916][ T26] audit: type=1326 audit(1776159871.196:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1508.284904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1509.017940][ T26] audit: type=1326 audit(1776159871.196:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1509.094998][ T26] audit: type=1326 audit(1776159871.196:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2d9c819 code=0x7ffc0000 [ 1509.136504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1509.156412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1509.335817][T18036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.406231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1509.426730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1510.525669][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1511.739188][T18331] device syzkaller0 entered promiscuous mode [ 1516.178370][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1516.202282][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1516.404668][T18036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1516.470645][T18356] usb usb1: usbfs: process 18356 (syz.8.3304) did not claim interface 0 before use [ 1516.487855][ T9364] device hsr_slave_0 left promiscuous mode [ 1516.590396][ T9364] device hsr_slave_1 left promiscuous mode [ 1516.633351][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.654680][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1516.689577][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1516.723497][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.731893][ T9364] device bridge_slave_1 left promiscuous mode [ 1516.774629][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.797986][ T9364] device bridge_slave_0 left promiscuous mode [ 1517.039531][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.100048][T13226] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1517.195756][ T9364] device veth1_macvtap left promiscuous mode [ 1517.222622][ T9364] device veth0_macvtap left promiscuous mode [ 1517.236576][T18375] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1517.252020][ T9364] device veth1_vlan left promiscuous mode [ 1517.257941][ T9364] device veth0_vlan left promiscuous mode [ 1517.339516][T13226] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1517.381372][T13226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.422124][T13226] usb 1-1: Product: syz [ 1517.454364][T13226] usb 1-1: Manufacturer: syz [ 1517.474848][T13226] usb 1-1: SerialNumber: syz [ 1517.486022][T13226] usb 1-1: config 0 descriptor?? [ 1517.779739][T13226] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1519.310456][T13226] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1519.325871][T13226] usb 1-1: USB disconnect, device number 10 [ 1521.182081][ T9364] team0 (unregistering): Port device team_slave_1 removed [ 1521.479985][ T9364] team0 (unregistering): Port device team_slave_0 removed [ 1521.676424][ T9364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.887812][ T9364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.370394][ T9364] bond0 (unregistering): Released all slaves [ 1523.788906][T18446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1523.806502][T18447] bond1: (slave wlan0): Opening slave failed [ 1524.461732][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1524.558954][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1524.714501][T18135] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1524.747462][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1524.810907][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1524.848043][T18135] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1524.874297][T18135] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1524.896030][T18036] device veth0_vlan entered promiscuous mode [ 1524.905612][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1524.914644][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1524.927975][T18135] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1525.051737][T18036] device veth1_vlan entered promiscuous mode [ 1525.194928][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1525.233737][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.239184][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1525.322229][T18036] device veth0_macvtap entered promiscuous mode [ 1525.363623][T18036] device veth1_macvtap entered promiscuous mode [ 1525.460390][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 1525.467554][ T4317] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.482474][T18135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.498648][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.515843][ T4317] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1525.530548][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.541901][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1525.568648][T18036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.580490][ T4317] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1525.609816][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1525.638375][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1525.657558][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.676649][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.683035][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1525.691862][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1525.729620][ T4317] usb 1-1: config 0 descriptor?? [ 1525.775431][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1525.813404][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.853303][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.911199][T18036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.939958][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1525.958639][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1525.999266][T18135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.575563][T18036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.885185][T18036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.987282][T18036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.036232][T18036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.151107][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1528.225018][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1528.365768][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1528.429514][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1528.498944][T17185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.506224][T17185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.712115][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1528.790368][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.884043][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.986987][T17185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.994527][T17185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.298218][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1529.441629][ T4317] usbhid 1-1:0.0: can't add hid device: -71 [ 1529.589422][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1529.630471][ T4317] usbhid: probe of 1-1:0.0 failed with error -71 [ 1529.830880][ T4317] usb 1-1: USB disconnect, device number 11 [ 1529.869763][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1529.880259][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1529.965815][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1529.974271][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1529.995164][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1530.015621][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1530.048416][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1530.511248][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1530.531293][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1530.562452][T18135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1530.591814][T13019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.600026][T13019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.627179][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1530.700410][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.708307][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.751187][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1530.995152][T18501] device syz_tun entered promiscuous mode [ 1531.008863][T18501] device macvtap1 entered promiscuous mode [ 1531.037614][T18501] device syz_tun left promiscuous mode [ 1531.115462][T16525] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1531.137034][T18508] device syzkaller0 entered promiscuous mode [ 1531.352983][T16525] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1531.364911][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1531.379824][T17185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1531.388280][T16525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.415865][T16525] usb 5-1: Product: syz [ 1531.420736][T16525] usb 5-1: Manufacturer: syz [ 1531.428326][T16525] usb 5-1: SerialNumber: syz [ 1531.446374][T16525] usb 5-1: config 0 descriptor?? [ 1531.450514][T18135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1531.681274][T16525] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1532.810263][T18536] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1533.687278][T18554] device syz_tun entered promiscuous mode [ 1533.708048][T18554] device macvtap1 entered promiscuous mode [ 1533.742864][T18554] device syz_tun left promiscuous mode [ 1533.759367][T16525] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1533.789586][T16525] usb 5-1: USB disconnect, device number 5 [ 1534.221226][T18563] netlink: 'syz.3.3345': attribute type 2 has an invalid length. [ 1534.298577][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3346'. [ 1534.566296][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1534.591183][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1534.748771][T18135] device veth0_vlan entered promiscuous mode [ 1534.805071][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1534.851918][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1534.909914][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1534.965955][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1535.044249][T18135] device veth1_vlan entered promiscuous mode [ 1535.139020][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1535.183473][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1535.237200][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1535.328929][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1535.383589][T18135] device veth0_macvtap entered promiscuous mode [ 1535.415263][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1535.512439][T18135] device veth1_macvtap entered promiscuous mode [ 1535.930990][T18135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1536.037316][T18135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.120067][T18135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1536.178614][T18135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.240330][T18135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1536.326816][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1536.346407][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1536.384825][T18135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.437132][T18135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.512295][T18135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.542602][T18135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.601714][T18135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.630011][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1536.643824][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1536.696126][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 1536.696141][ T26] audit: type=1326 audit(1776159898.537:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.3352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b99f9c819 code=0x0 [ 1536.733097][T18135] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.755671][T18135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.782665][T18135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.805576][T18135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.853809][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3353'. [ 1537.088702][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.120263][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.209390][T13019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1537.262840][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.285801][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.362207][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1539.241666][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 1540.326997][T18636] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3362'. [ 1540.850503][T18649] device macvtap1 entered promiscuous mode [ 1540.856625][T18649] device syz_tun entered promiscuous mode [ 1540.899717][T18649] device syz_tun left promiscuous mode [ 1541.753774][T18656] device syzkaller0 entered promiscuous mode [ 1544.645961][T18695] netlink: 'syz.7.3377': attribute type 10 has an invalid length. [ 1544.783744][T18695] team0: Port device netdevsim0 added [ 1546.255633][T18706] device syzkaller0 entered promiscuous mode [ 1547.706035][T18712] device wlan0 entered promiscuous mode [ 1547.895701][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3384'. [ 1549.942228][T18742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1549.984448][T18742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1552.813556][T18777] syz.7.3400 (18777) used greatest stack depth: 18096 bytes left [ 1552.957404][T18788] netlink: 'syz.8.3392': attribute type 2 has an invalid length. [ 1555.285188][T18813] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1555.300589][T18809] lo speed is unknown, defaulting to 1000 [ 1555.330305][T18813] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1555.923122][T18823] autofs4:pid:18823:autofs_fill_super: called with bogus options [ 1560.471397][T18877] autofs4:pid:18877:autofs_fill_super: called with bogus options [ 1561.520079][T18901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1561.574589][T18903] bond2: (slave wlan0): Opening slave failed [ 1563.058804][T18918] device syzkaller0 entered promiscuous mode [ 1563.096897][T18924] overlayfs: failed to resolve './file0': -2 [ 1563.893241][T18948] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3445'. [ 1564.963569][T18967] device syzkaller0 entered promiscuous mode [ 1565.355537][T18972] overlayfs: failed to resolve './file0': -2 [ 1566.431282][T18996] tipc: Started in network mode [ 1566.449618][T18996] tipc: Node identity 1e15b721298d, cluster identity 4711 [ 1566.472229][T18996] tipc: Enabled bearer , priority 0 [ 1566.499980][T18999] device syzkaller0 entered promiscuous mode [ 1566.550477][T18996] tipc: Resetting bearer [ 1566.583245][T18995] tipc: Resetting bearer [ 1566.694771][T18995] tipc: Disabling bearer [ 1567.229248][T19013] overlayfs: failed to resolve './file1': -2 [ 1568.575299][ T22] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1568.785795][ T22] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1568.808115][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.842590][ T22] usb 1-1: Product: syz [ 1568.860245][ T22] usb 1-1: Manufacturer: syz [ 1568.877078][ T22] usb 1-1: SerialNumber: syz [ 1568.906820][ T22] usb 1-1: config 0 descriptor?? [ 1568.942520][T19060] overlayfs: failed to resolve './file1': -2 [ 1569.137637][ T22] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1570.349891][ C1] hrtimer: interrupt took 54773 ns [ 1570.842960][ T22] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1570.864095][ T22] usb 1-1: USB disconnect, device number 12 [ 1571.331229][T19088] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3489'. [ 1571.475554][T19094] device syzkaller0 entered promiscuous mode [ 1572.963399][T19119] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1573.303276][T19137] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1573.334249][T19137] bond8: (slave wlan0): Opening slave failed [ 1574.127975][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3502'. [ 1574.791007][T19149] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1574.805113][T19151] bond9: (slave wlan0): Opening slave failed [ 1574.893546][T13226] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1575.576161][T13226] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1575.626222][T13226] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.659121][T13226] usb 9-1: Product: syz [ 1575.666683][T13226] usb 9-1: Manufacturer: syz [ 1575.671738][T13226] usb 9-1: SerialNumber: syz [ 1575.704668][T13226] usb 9-1: config 0 descriptor?? [ 1575.938011][T13226] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1577.462678][T13226] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1577.546207][T13226] usb 9-1: USB disconnect, device number 10 [ 1577.608017][T19177] autofs4:pid:19177:autofs_fill_super: called with bogus options [ 1578.202408][ T26] audit: type=1326 audit(1776159937.356:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19182 comm="syz.8.3512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1f9d9c819 code=0x0 [ 1578.709366][T19187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3513'. [ 1579.906539][T19195] device wlan0 entered promiscuous mode [ 1580.336040][T19210] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1580.998734][T19229] autofs4:pid:19229:autofs_fill_super: called with bogus options [ 1581.906507][ T4316] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1581.943347][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3524'. [ 1582.915145][ T4316] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1582.935814][ T4316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.011402][ T4316] usb 8-1: Product: syz [ 1583.015664][ T4316] usb 8-1: Manufacturer: syz [ 1583.089966][ T4316] usb 8-1: SerialNumber: syz [ 1583.126384][ T4316] usb 8-1: config 0 descriptor?? [ 1583.188543][T19255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3527'. [ 1583.386626][ T4316] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1583.722324][T19255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3527'. [ 1584.567272][T19265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1584.596060][T19267] bond3: (slave wlan0): Opening slave failed [ 1585.018597][ T4316] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1585.090917][ T4316] usb 8-1: USB disconnect, device number 4 [ 1587.069861][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 1589.084353][T19311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3536'. [ 1590.277975][T19318] netlink: 'syz.4.3540': attribute type 4 has an invalid length. [ 1590.552370][T19324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1590.623940][T19326] bond1: (slave wlan0): Opening slave failed [ 1591.360459][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1591.366851][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1592.625666][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'. [ 1593.053731][T19352] device macvtap1 entered promiscuous mode [ 1593.059864][T19352] device syz_tun entered promiscuous mode [ 1593.618943][T19352] device syz_tun left promiscuous mode [ 1596.105374][T19396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1596.119404][T19398] bond4: (slave wlan0): Opening slave failed [ 1597.460571][T19413] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1601.554901][T19451] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1601.585808][T19453] bond11: (slave wlan0): Opening slave failed [ 1601.874406][T19459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3573'. [ 1604.013108][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3580'. [ 1605.244753][T19507] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1605.732738][T19522] netlink: 'syz.3.3587': attribute type 4 has an invalid length. [ 1605.880269][T19529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3586'. [ 1609.905536][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3595'. [ 1610.511608][T19568] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1610.525240][T19570] bond12: (slave wlan0): Opening slave failed [ 1611.743112][T19577] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3600'. [ 1616.157485][T19623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1616.787961][T19647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1617.863102][ T26] audit: type=1326 audit(1776159974.454:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19653 comm="syz.8.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1617.937317][ T26] audit: type=1326 audit(1776159974.464:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19653 comm="syz.8.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1618.081164][ T26] audit: type=1326 audit(1776159974.660:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19653 comm="syz.8.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1618.113886][ T26] audit: type=1326 audit(1776159974.660:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19653 comm="syz.8.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1618.151475][ T26] audit: type=1326 audit(1776159974.660:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19653 comm="syz.8.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1620.596829][T19688] netlink: 'syz.0.3625': attribute type 4 has an invalid length. [ 1622.281501][T19713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3629'. [ 1622.305190][ T26] audit: type=1326 audit(1776159978.608:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19705 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1622.442288][ T26] audit: type=1326 audit(1776159978.636:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19705 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1622.611000][ T26] audit: type=1326 audit(1776159978.636:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19705 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1622.677484][ T26] audit: type=1326 audit(1776159978.636:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19705 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1623.131403][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1624.319799][T19736] netlink: 'syz.8.3638': attribute type 4 has an invalid length. [ 1626.540228][T19764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3645'. [ 1628.298150][ T26] audit: type=1326 audit(1776159984.220:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.8.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1628.374114][ T26] audit: type=1326 audit(1776159984.248:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.8.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1628.468417][ T26] audit: type=1326 audit(1776159984.248:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.8.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1628.540548][ T26] audit: type=1326 audit(1776159984.248:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.8.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f9d9c819 code=0x7ffc0000 [ 1628.813208][ T26] audit: type=1326 audit(1776159984.678:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19802 comm="syz.3.3654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc31d9c819 code=0x0 [ 1631.439144][T19827] device syzkaller0 entered promiscuous mode [ 1631.554187][T19833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3660'. [ 1633.000342][T19863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3667'. [ 1633.905963][ T26] audit: type=1326 audit(1776159989.458:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19869 comm="syz.7.3670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53bd99c819 code=0x0 [ 1635.052554][T19884] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3673'. [ 1635.848601][T19904] lo speed is unknown, defaulting to 1000 [ 1635.878890][T19904] lo speed is unknown, defaulting to 1000 [ 1636.067428][T19904] lo speed is unknown, defaulting to 1000 [ 1636.168318][T19913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3681'. [ 1637.012198][T19904] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1637.734276][T19904] lo speed is unknown, defaulting to 1000 [ 1638.050021][T19904] lo speed is unknown, defaulting to 1000 [ 1638.108326][T19904] lo speed is unknown, defaulting to 1000 [ 1638.115193][T19904] lo speed is unknown, defaulting to 1000 [ 1638.215012][T19904] lo speed is unknown, defaulting to 1000 [ 1638.551386][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1640.043255][T19939] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3690'. [ 1640.995776][T19958] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3693'. [ 1641.007052][T12285] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1641.235708][T12285] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1641.548856][T12285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.804529][T12285] usb 8-1: Product: syz [ 1641.831120][T12285] usb 8-1: Manufacturer: syz [ 1641.869629][T12285] usb 8-1: SerialNumber: syz [ 1641.897388][T12285] usb 8-1: config 0 descriptor?? [ 1642.138564][T12285] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1644.460804][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3697'. [ 1645.174994][T12285] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1645.314963][T12285] usb 8-1: USB disconnect, device number 5 [ 1646.026211][T20001] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3703'. [ 1648.659132][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1650.465527][ T4316] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1650.684896][ T4316] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1650.711086][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.744499][ T4316] usb 1-1: Product: syz [ 1650.748753][ T4316] usb 1-1: Manufacturer: syz [ 1650.945261][ T4316] usb 1-1: SerialNumber: syz [ 1650.964316][ T4316] usb 1-1: config 0 descriptor?? [ 1651.452584][ T4316] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1651.994245][T20066] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3718'. [ 1652.995437][ T4316] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1653.035177][ T4316] usb 1-1: USB disconnect, device number 13 [ 1655.721173][T20119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3731'. [ 1656.795571][T20147] device syz_tun entered promiscuous mode [ 1656.801947][T20147] device macvtap1 entered promiscuous mode [ 1656.817300][T20147] device syz_tun left promiscuous mode [ 1657.043178][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1657.049596][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1659.205585][T20174] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1659.240586][T20174] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1660.019728][T20191] netlink: 'syz.7.3751': attribute type 10 has an invalid length. [ 1660.102171][T20191] team0: Port device dummy0 added [ 1660.204627][T20194] netlink: 'syz.7.3751': attribute type 10 has an invalid length. [ 1660.427332][T20194] team0: Port device dummy0 removed [ 1660.505348][T20194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1661.962465][T20209] device syz_tun entered promiscuous mode [ 1661.968672][T20209] device macvtap1 entered promiscuous mode [ 1662.163234][T20209] device syz_tun left promiscuous mode [ 1663.048531][ T4316] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1663.058249][T20226] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1663.075955][T20226] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1663.426904][ T4316] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1663.456409][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.495852][ T4316] usb 4-1: Product: syz [ 1663.500597][ T4316] usb 4-1: Manufacturer: syz [ 1663.505246][ T4316] usb 4-1: SerialNumber: syz [ 1663.551481][ T4316] usb 4-1: config 0 descriptor?? [ 1663.791614][ T4316] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1665.556772][ T4316] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1665.574113][ T4316] usb 4-1: USB disconnect, device number 11 [ 1665.898631][T20263] device syzkaller0 entered promiscuous mode [ 1667.942366][T20286] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1667.952184][T20286] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1668.651563][T20294] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1671.037115][ T4317] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1671.573077][ T4317] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1671.583693][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.592361][ T4317] usb 4-1: Product: syz [ 1671.596968][ T4317] usb 4-1: Manufacturer: syz [ 1671.616383][ T4317] usb 4-1: SerialNumber: syz [ 1671.625237][ T4317] usb 4-1: config 0 descriptor?? [ 1671.857545][ T4317] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1673.284909][T20318] device macvtap1 entered promiscuous mode [ 1673.291048][T20318] device syz_tun entered promiscuous mode [ 1673.299535][T20318] device syz_tun left promiscuous mode [ 1673.431127][ T4317] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1673.452594][ T4317] usb 4-1: USB disconnect, device number 12 [ 1673.837279][T20328] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1676.605158][T20363] device syz_tun entered promiscuous mode [ 1676.611242][T20363] device macvtap1 entered promiscuous mode [ 1676.702266][T20363] device syz_tun left promiscuous mode [ 1677.384449][ T4661] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1677.612073][ T4661] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1677.784451][ T4661] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.905905][T20390] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1678.028840][ T4661] usb 8-1: Product: syz [ 1678.121373][ T4661] usb 8-1: Manufacturer: syz [ 1678.245618][ T4661] usb 8-1: SerialNumber: syz [ 1678.323245][ T4661] usb 8-1: config 0 descriptor?? [ 1678.569425][ T4661] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1680.068489][ T4661] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1680.761999][T20424] device macvtap1 entered promiscuous mode [ 1680.767969][T20424] device syz_tun entered promiscuous mode [ 1680.780990][T20424] device syz_tun left promiscuous mode [ 1681.256441][ T22] usb 8-1: USB disconnect, device number 6 [ 1681.386507][T20432] device syzkaller0 entered promiscuous mode [ 1682.143195][ T26] audit: type=1326 audit(1776160034.591:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.4.3821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06d2d9c819 code=0x0 [ 1683.214577][T20476] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1688.693311][T20493] device syz_tun entered promiscuous mode [ 1688.699469][T20493] device macvtap1 entered promiscuous mode [ 1688.715682][T20493] device syz_tun left promiscuous mode [ 1689.533764][ T26] audit: type=1326 audit(1776160041.495:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.3.3834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc31d9c819 code=0x0 [ 1689.736942][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3835'. [ 1689.783400][T20525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.744531][T20537] device macvtap1 entered promiscuous mode [ 1690.750636][T20537] device syz_tun entered promiscuous mode [ 1690.798520][T20537] device syz_tun left promiscuous mode [ 1691.309320][T20540] device syzkaller0 entered promiscuous mode [ 1691.391371][T20551] device syz_tun entered promiscuous mode [ 1691.397456][T20551] device macvtap1 entered promiscuous mode [ 1691.415324][T20551] device syz_tun left promiscuous mode [ 1696.891476][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1697.257327][ T26] audit: type=1326 audit(1776160048.716:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.4.3852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06d2d9c819 code=0x0 [ 1697.597097][T20628] device syzkaller0 entered promiscuous mode [ 1698.036495][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3847'. [ 1698.301061][T20638] device syz_tun entered promiscuous mode [ 1698.307017][T20638] device macvtap1 entered promiscuous mode [ 1698.326308][T20638] device syz_tun left promiscuous mode [ 1698.747540][T20647] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3856'. [ 1699.886159][T20649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1701.841400][ T26] audit: type=1326 audit(1776160053.009:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.3.3865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc31d9c819 code=0x0 [ 1704.043811][T20707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3869'. [ 1707.741115][T20723] device syz_tun entered promiscuous mode [ 1707.747185][T20723] device macvtap1 entered promiscuous mode [ 1707.766105][T20723] device syz_tun left promiscuous mode [ 1708.329344][T20736] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1708.409403][T20736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.417786][T20736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.900975][T20749] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3881'. [ 1709.615198][T20753] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 1710.300226][T20773] device syz_tun entered promiscuous mode [ 1710.306319][T20773] device macvtap1 entered promiscuous mode [ 1710.322675][T20773] device syz_tun left promiscuous mode [ 1710.913474][T20784] sctp: [Deprecated]: syz.8.3893 (pid 20784) Use of int in maxseg socket option. [ 1710.913474][T20784] Use struct sctp_assoc_value instead [ 1711.975921][T20806] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3897'. [ 1714.467692][T20841] device syzkaller0 entered promiscuous mode [ 1714.485854][T20841] 0: reclassify loop, rule prio 0, protocol 800 [ 1714.755945][T20848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1717.979956][T20892] device syzkaller1 entered promiscuous mode [ 1722.125044][ T4317] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1722.225881][T20958] netlink: 'syz.7.3942': attribute type 8 has an invalid length. [ 1722.243388][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3942'. [ 1722.286717][T20958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.294511][T20958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.342488][ T4317] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1722.359721][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.389822][ T4317] usb 5-1: Product: syz [ 1722.396491][ T4317] usb 5-1: Manufacturer: syz [ 1722.422931][ T4317] usb 5-1: SerialNumber: syz [ 1722.456447][ T4317] usb 5-1: config 0 descriptor?? [ 1722.682157][ T4317] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1722.726247][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1722.732770][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.387805][ T4317] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1724.486399][ T4317] usb 5-1: USB disconnect, device number 6 [ 1724.858814][T20996] netlink: 'syz.0.3952': attribute type 10 has an invalid length. [ 1724.967293][T20996] team0: Port device dummy0 added [ 1724.991771][T21000] netlink: 'syz.0.3952': attribute type 10 has an invalid length. [ 1725.106693][T21000] team0: Port device dummy0 removed [ 1725.125982][T21000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1725.773024][T21014] device ip6gre1 entered promiscuous mode [ 1726.767173][T21042] netlink: 'syz.4.3967': attribute type 10 has an invalid length. [ 1726.788876][T21042] team0: Port device dummy0 added [ 1726.804469][T21045] netlink: 'syz.4.3967': attribute type 10 has an invalid length. [ 1726.949679][T21045] team0: Port device dummy0 removed [ 1726.994723][T21045] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1727.542279][T21065] netlink: 'syz.3.3973': attribute type 4 has an invalid length. [ 1728.376649][T21083] device syzkaller0 entered promiscuous mode [ 1729.220313][ T26] audit: type=1326 audit(1776160078.621:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21105 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc31d9c819 code=0x7ffc0000 [ 1729.302515][ T26] audit: type=1326 audit(1776160078.649:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21105 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc31d9c819 code=0x7ffc0000 [ 1729.423305][ T26] audit: type=1326 audit(1776160078.667:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21105 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc31d9c819 code=0x7ffc0000 [ 1729.532744][ T26] audit: type=1326 audit(1776160078.667:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21105 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc31d9c819 code=0x7ffc0000 [ 1729.608178][ T26] audit: type=1326 audit(1776160078.667:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21105 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc31d9c819 code=0x7ffc0000 [ 1734.480200][T21133] netlink: 'syz.4.3986': attribute type 4 has an invalid length. [ 1734.489534][T21150] netlink: 'syz.0.3990': attribute type 2 has an invalid length. [ 1734.774142][T21165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.914936][T21165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.968575][T21165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1735.183223][T21185] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1737.554396][T21209] device ip6gre1 entered promiscuous mode [ 1737.624894][T21213] device wlan0 left promiscuous mode [ 1738.524484][T21212] device syzkaller0 entered promiscuous mode [ 1738.812059][T21234] netlink: 'syz.4.4005': attribute type 2 has an invalid length. [ 1742.122566][T21286] kAFS: No cell specified [ 1745.268777][T21306] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4015'. [ 1745.969852][T21310] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1746.764171][T21325] kAFS: No cell specified [ 1748.296205][T21348] netlink: 'syz.4.4028': attribute type 2 has an invalid length. [ 1748.374851][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4029'. [ 1748.409128][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4029'. [ 1750.354695][T21366] device syz_tun entered promiscuous mode [ 1750.360746][T21366] device macvtap1 entered promiscuous mode [ 1750.383580][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4033'. [ 1750.399135][T21366] device syz_tun left promiscuous mode [ 1750.739274][T21370] kAFS: No cell specified [ 1751.592524][T21383] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1751.866936][T21388] device syzkaller0 entered promiscuous mode [ 1752.416831][T21401] tipc: Started in network mode [ 1752.435099][T21401] tipc: Node identity , cluster identity 4711 [ 1752.449146][T21404] kAFS: No cell specified [ 1752.457153][T21401] tipc: Failed to obtain node identity [ 1752.477680][T21401] tipc: Enabling of bearer rejected, failed to enable media [ 1752.511769][T21405] device syzkaller0 entered promiscuous mode [ 1753.019096][T21414] device syzkaller0 entered promiscuous mode [ 1753.164746][T21426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1753.452581][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4055'. [ 1754.244698][T21434] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1758.943721][T21443] device bond13 entered promiscuous mode [ 1759.139585][T21477] kAFS: No cell specified [ 1759.273827][T21479] device syzkaller0 entered promiscuous mode [ 1760.486172][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4071'. [ 1761.479580][T21520] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1762.809354][T21541] device syzkaller0 entered promiscuous mode [ 1763.332399][T21553] tipc: Started in network mode [ 1763.361634][T21553] tipc: Node identity 265ac95f9fa3, cluster identity 4711 [ 1763.378490][T21553] tipc: Enabled bearer , priority 0 [ 1763.397997][T21556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1763.474648][T21552] tipc: Disabling bearer [ 1763.484701][T21556] device bond2 entered promiscuous mode [ 1764.896448][T21582] device syz_tun entered promiscuous mode [ 1764.903324][T21582] device macvtap1 entered promiscuous mode [ 1765.512241][T21582] device syz_tun left promiscuous mode [ 1765.601964][T21585] device syzkaller0 entered promiscuous mode [ 1765.908357][T21597] tipc: Enabled bearer , priority 0 [ 1765.979070][T21599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4105'. [ 1766.028220][T21595] tipc: Disabling bearer [ 1766.098950][T21606] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1766.122627][T21599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4105'. [ 1767.732119][T21640] device syz_tun entered promiscuous mode [ 1767.738595][T21640] device macvtap1 entered promiscuous mode [ 1767.862625][T21640] device syz_tun left promiscuous mode [ 1768.397206][T21646] device syzkaller0 entered promiscuous mode [ 1769.388111][T21647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4119'. [ 1769.437554][T21652] tipc: Started in network mode [ 1769.575696][T21652] tipc: Node identity 1aa769fa12ee, cluster identity 4711 [ 1769.583430][T21652] tipc: Enabled bearer , priority 0 [ 1769.703972][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1769.984337][T21648] tipc: Disabling bearer [ 1771.486488][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4132'. [ 1771.584602][T21705] device bond3 entered promiscuous mode [ 1772.526373][T21719] device syzkaller0 entered promiscuous mode [ 1773.131140][T21731] tipc: Started in network mode [ 1773.179121][T21731] tipc: Node identity b653e3c9a205, cluster identity 4711 [ 1773.263674][T21731] tipc: Enabled bearer , priority 0 [ 1773.392867][T21730] tipc: Disabling bearer [ 1774.613522][T21760] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4147'. [ 1774.805877][T21766] device syzkaller0 entered promiscuous mode [ 1775.025914][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4151'. [ 1776.038905][T21781] tipc: Enabled bearer , priority 0 [ 1776.123170][T21780] tipc: Disabling bearer [ 1777.865697][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4157'. [ 1778.043967][T21797] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4159'. [ 1778.700347][T21820] device syzkaller0 entered promiscuous mode [ 1779.010455][T21826] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4167'. [ 1779.407766][T21843] device syzkaller0 entered promiscuous mode [ 1779.990253][T21865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1780.294855][T21873] device syz_tun entered promiscuous mode [ 1780.300804][T21873] device macvtap1 entered promiscuous mode [ 1780.476388][T21873] device syz_tun left promiscuous mode [ 1780.595165][T21880] device syzkaller0 entered promiscuous mode [ 1780.760436][T21886] netlink: 'syz.0.4183': attribute type 2 has an invalid length. [ 1782.180246][T21928] device bond_slave_0 entered promiscuous mode [ 1782.187472][T21928] device bond_slave_1 entered promiscuous mode [ 1782.193722][T21928] device dummy0 entered promiscuous mode [ 1782.222237][T21928] device vlan2 entered promiscuous mode [ 1782.233333][T21928] device bond0 entered promiscuous mode [ 1782.814811][T21934] device syzkaller0 entered promiscuous mode [ 1784.936474][T21965] device syzkaller0 entered promiscuous mode [ 1785.224709][T13019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.379984][ T8749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1786.391649][ T8749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1786.400661][ T8749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1786.426598][ T8749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1786.434511][ T8749] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1786.444694][ T8749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1786.511836][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1786.519882][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1786.539452][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1786.549832][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1786.558038][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1786.565478][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1787.038387][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1788.417776][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1788.427304][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1788.760955][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 1790.984112][ T8749] Bluetooth: hci2: command 0x041b tx timeout [ 1791.911904][T21985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.919094][T21985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.926647][T21985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.933900][T21985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.961803][T22005] device ip6gre1 entered promiscuous mode [ 1792.195076][T13019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.486637][T13019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.594582][T22021] tipc: Started in network mode [ 1792.619420][T22021] tipc: Node identity 4e5c65627868, cluster identity 4711 [ 1792.635503][T22021] tipc: Enabled bearer , priority 0 [ 1792.765535][T13019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.827403][T22026] device syzkaller0 entered promiscuous mode [ 1792.841337][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1792.855472][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1792.903160][T22021] tipc: Resetting bearer [ 1792.940025][T13226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1793.163862][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1793.209214][T22040] device macvtap1 entered promiscuous mode [ 1793.215260][T22040] device syz_tun entered promiscuous mode [ 1793.261432][T13104] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1793.601122][T22040] device syz_tun left promiscuous mode [ 1793.891542][T13104] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1793.941739][T22020] tipc: Resetting bearer [ 1794.055746][T22020] tipc: Disabling bearer [ 1794.187146][ T4316] tipc: Node number set to 909403490 [ 1794.197782][T21989] chnl_net:caif_netlink_parms(): no params data found [ 1794.242989][T22048] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1794.810838][T22059] ipt_CLUSTERIP: Please specify destination IP [ 1795.104624][T21989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.112945][T22056] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1795.131346][T21989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.139824][T21989] device bridge_slave_0 entered promiscuous mode [ 1795.181352][T22054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 1795.272096][T21989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.298119][T21989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.326141][T21989] device bridge_slave_1 entered promiscuous mode [ 1795.504104][T21989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.629781][T21989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.653829][T13019] tipc: Left network mode [ 1795.774794][T21989] team0: Port device team_slave_0 added [ 1796.008288][T21989] team0: Port device team_slave_1 added [ 1796.017631][T22079] device ip6gre1 entered promiscuous mode [ 1796.078948][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1796.234551][ T4661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1796.249116][ T4661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1796.296416][T16525] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1796.564066][T21989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.574149][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.699222][T21989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.723074][ T4661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1796.734034][T21989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.741288][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.768357][T21989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1797.215503][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1797.662688][T21989] device hsr_slave_0 entered promiscuous mode [ 1797.833545][T21989] device hsr_slave_1 entered promiscuous mode [ 1797.854152][T22115] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1798.672265][T22119] device macvtap1 entered promiscuous mode [ 1798.678131][T22119] device syz_tun entered promiscuous mode [ 1798.686644][T22119] device syz_tun left promiscuous mode [ 1799.861899][T22144] tipc: Enabled bearer , priority 0 [ 1799.934729][T22151] device syzkaller0 entered promiscuous mode [ 1800.044061][T22144] tipc: Resetting bearer [ 1800.821625][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1800.821659][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1801.154692][T22142] tipc: Resetting bearer [ 1801.214343][T22142] tipc: Disabling bearer [ 1801.276804][T16525] tipc: Node number set to 341238729 [ 1801.298562][T22162] tipc: Cannot configure node identity twice [ 1801.317451][T22162] tipc: Cannot configure node identity twice [ 1801.416466][T13019] device hsr_slave_0 left promiscuous mode [ 1801.505226][T13019] device hsr_slave_1 left promiscuous mode [ 1801.565263][T13019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1801.609318][T13019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1801.654098][T13019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1801.737205][T13019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1801.880884][T13019] device bridge_slave_1 left promiscuous mode [ 1801.988246][T13019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.137604][T13019] device bridge_slave_0 left promiscuous mode [ 1802.232807][T13019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.548419][T13019] device veth1_macvtap left promiscuous mode [ 1802.555357][T13019] device veth0_macvtap left promiscuous mode [ 1802.581358][T13019] device veth1_vlan left promiscuous mode [ 1802.734548][T22186] x_tables: duplicate underflow at hook 2 [ 1804.176887][T13019] bond4 (unregistering): Released all slaves [ 1804.513769][T13019] bond3 (unregistering): Released all slaves [ 1805.029834][T13019] bond2 (unregistering): Released all slaves [ 1805.314052][T13019] bond1 (unregistering): Released all slaves [ 1806.129389][T13019] team0 (unregistering): Port device team_slave_1 removed [ 1806.197875][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1806.211929][T13019] team0 (unregistering): Port device team_slave_0 removed [ 1806.281992][T13019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.350016][T13019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.799175][T13019] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1806.876049][T13019] bond0 (unregistering): Released all slaves [ 1807.220586][T22171] device macvtap1 entered promiscuous mode [ 1807.226638][T22171] device syz_tun entered promiscuous mode [ 1807.236940][T22171] device syz_tun left promiscuous mode [ 1807.336642][T22209] device syz_tun entered promiscuous mode [ 1807.342714][T22209] device macvtap1 entered promiscuous mode [ 1807.353860][T22209] device syz_tun left promiscuous mode [ 1807.821564][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1808.072331][T22222] device syzkaller0 entered promiscuous mode [ 1808.386587][T22236] tipc: Enabled bearer , priority 0 [ 1810.301685][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1813.024624][T22227] device syzkaller0 entered promiscuous mode [ 1813.034559][T22239] tipc: Resetting bearer [ 1813.198140][T22219] tipc: Resetting bearer [ 1813.248346][T22219] tipc: Disabling bearer [ 1813.263314][T22254] device macvtap1 entered promiscuous mode [ 1813.269204][T22254] device syz_tun entered promiscuous mode [ 1813.278223][T22254] device syz_tun left promiscuous mode [ 1813.322927][T16525] tipc: Node number set to 3120154975 [ 1814.021418][T22282] device macvtap1 entered promiscuous mode [ 1814.027427][T22282] device syz_tun entered promiscuous mode [ 1814.055342][T22282] device syz_tun left promiscuous mode [ 1814.156297][T21989] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1814.286661][T21989] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1814.312914][T21989] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1814.370345][T21989] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1814.692046][T22299] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1814.745776][T22297] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4284'. [ 1814.791010][T22297] ------------[ cut here ]------------ [ 1814.796594][T22297] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 1814.825812][T22297] WARNING: CPU: 1 PID: 22297 at net/sched/cls_u32.c:853 u32_change+0x1dfc/0x27e0 [ 1814.835178][T22297] Modules linked in: [ 1814.839149][T22297] CPU: 1 PID: 22297 Comm: syz.3.4284 Not tainted syzkaller #0 [ 1814.846751][T22297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1814.856917][T22297] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 1814.862731][T22297] Code: f9 eb 59 e8 f6 6d 1e f9 c6 05 4f 84 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 a0 8e 8b 4c 89 fe 48 c7 c2 20 a1 8e 8b e8 b4 dd e9 f8 <0f> 0b e9 ff ee ff ff e8 c8 6d 1e f9 eb 24 e8 c1 6d 1e f9 c6 05 c3 [ 1814.883050][T22297] RSP: 0018:ffffc90003c8ee40 EFLAGS: 00010246 [ 1814.889989][T22297] RAX: 9df80f2575e53f00 RBX: ffff88807d438ee0 RCX: 0000000000080000 [ 1814.899080][T22297] RDX: ffffc900105e7000 RSI: 00000000000063e7 RDI: 00000000000063e8 [ 1814.907529][T22297] RBP: ffffc90003c8eff8 R08: ffffc90003c8eac7 R09: 1ffff92000791d58 [ 1814.915678][T22297] R10: dffffc0000000000 R11: fffff52000791d59 R12: 0000000000000000 [ 1814.924049][T22297] R13: dffffc0000000000 R14: ffff88802c2e4200 R15: 0000000000000020 [ 1814.932415][T22297] FS: 00007efc32b916c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1814.941538][T22297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1814.948176][T22297] CR2: 00007f53bdc17dac CR3: 000000007665c000 CR4: 00000000003506e0 [ 1814.956271][T22297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1814.964311][T22297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1814.972445][T22297] Call Trace: [ 1814.975795][T22297] [ 1814.978783][T22297] ? u32_get+0x370/0x370 [ 1814.983159][T22297] ? u32_get+0x370/0x370 [ 1814.987627][T22297] tc_new_tfilter+0x1160/0x1900 [ 1814.992564][T22297] ? kmem_cache_free+0xf7/0x290 [ 1814.997634][T22297] ? nlmon_xmit+0xac/0xf0 [ 1815.002123][T22297] ? tcf_proto_signal_destroying+0x240/0x240 [ 1815.008175][T22297] ? rcu_read_unlock+0x8c/0xa0 [ 1815.013228][T22297] ? tcf_proto_signal_destroying+0x240/0x240 [ 1815.019337][T22297] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1815.024597][T22297] ? tcf_proto_signal_destroying+0x240/0x240 [ 1815.030672][T22297] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 1815.035900][T22297] ? rtnetlink_bind+0x80/0x80 [ 1815.040858][T22297] ? __local_bh_enable_ip+0x136/0x1c0 [ 1815.046525][T22297] ? lockdep_hardirqs_on+0x94/0x140 [ 1815.051996][T22297] ? __local_bh_enable_ip+0x136/0x1c0 [ 1815.057919][T22297] ? _local_bh_enable+0xa0/0xa0 [ 1815.062839][T22297] ? __dev_queue_xmit+0x26b/0x37c0 [ 1815.068059][T22297] ? __dev_queue_xmit+0x26b/0x37c0 [ 1815.073299][T22297] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1815.078573][T22297] ? __dev_queue_xmit+0x26b/0x37c0 [ 1815.083819][T22297] ? ref_tracker_free+0x68c/0x840 [ 1815.088926][T22297] ? __copy_skb_header+0x3ba/0x4f0 [ 1815.094351][T22297] ? refcount_inc+0x70/0x70 [ 1815.098943][T22297] ? memcpy+0x3c/0x60 [ 1815.103100][T22297] ? __copy_skb_header+0x3ba/0x4f0 [ 1815.108291][T22297] ? __skb_clone+0x480/0x790 [ 1815.113039][T22297] netlink_rcv_skb+0x1fb/0x450 [ 1815.117951][T22297] ? rtnetlink_bind+0x80/0x80 [ 1815.122800][T22297] ? netlink_ack+0x1170/0x1170 [ 1815.127653][T22297] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.133033][T22297] netlink_unicast+0x74d/0x8d0 [ 1815.138004][T22297] netlink_sendmsg+0x8ad/0xbd0 [ 1815.142869][T22297] ? netlink_getsockopt+0x550/0x550 [ 1815.148240][T22297] ? aa_sock_msg_perm+0x94/0x150 [ 1815.153427][T22297] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1815.158840][T22297] ? security_socket_sendmsg+0x7c/0xa0 [ 1815.164380][T22297] ? netlink_getsockopt+0x550/0x550 [ 1815.169734][T22297] ____sys_sendmsg+0x5be/0x970 [ 1815.174758][T22297] ? __sys_sendmsg_sock+0x30/0x30 [ 1815.180077][T22297] ? __import_iovec+0x315/0x500 [ 1815.185006][T22297] ? import_iovec+0x6f/0xa0 [ 1815.189742][T22297] ___sys_sendmsg+0x2a2/0x360 [ 1815.194512][T22297] ? __sched_text_start+0x8/0x8 [ 1815.199709][T22297] ? __sys_sendmsg+0x290/0x290 [ 1815.204606][T22297] __sys_sendmmsg+0x2c3/0x510 [ 1815.209527][T22297] ? __ia32_sys_sendmsg+0x80/0x80 [ 1815.214727][T22297] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1815.220771][T22297] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1815.226925][T22297] ? lock_chain_count+0x20/0x20 [ 1815.232010][T22297] __x64_sys_sendmmsg+0x9c/0xb0 [ 1815.236945][T22297] do_syscall_64+0x4c/0xa0 [ 1815.241578][T22297] ? clear_bhb_loop+0x60/0xb0 [ 1815.246570][T22297] ? clear_bhb_loop+0x60/0xb0 [ 1815.251448][T22297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.257458][T22297] RIP: 0033:0x7efc31d9c819 [ 1815.262071][T22297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.281913][T22297] RSP: 002b:00007efc32b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1815.290556][T22297] RAX: ffffffffffffffda RBX: 00007efc32015fa0 RCX: 00007efc31d9c819 [ 1815.298694][T22297] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 1815.306839][T22297] RBP: 00007efc31e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1815.314969][T22297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1815.322972][T22297] R13: 00007efc32016038 R14: 00007efc32015fa0 R15: 00007ffef56ebe48 [ 1815.331450][T22297] [ 1815.334482][T22297] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1815.341871][T22297] CPU: 1 PID: 22297 Comm: syz.3.4284 Not tainted syzkaller #0 [ 1815.349358][T22297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1815.359607][T22297] Call Trace: [ 1815.362907][T22297] [ 1815.365852][T22297] dump_stack_lvl+0x188/0x24e [ 1815.370558][T22297] ? memcpy+0x3c/0x60 [ 1815.374551][T22297] ? show_regs_print_info+0x12/0x12 [ 1815.379776][T22297] ? load_image+0x400/0x400 [ 1815.384346][T22297] panic+0x2e5/0x730 [ 1815.388322][T22297] ? bpf_jit_dump+0xd0/0xd0 [ 1815.393044][T22297] __warn+0x2f8/0x4f0 [ 1815.397039][T22297] ? u32_change+0x1dfc/0x27e0 [ 1815.401748][T22297] ? u32_change+0x1dfc/0x27e0 [ 1815.406446][T22297] report_bug+0x2ba/0x4f0 [ 1815.410899][T22297] ? u32_change+0x1dfc/0x27e0 [ 1815.415691][T22297] handle_bug+0x3a/0x70 [ 1815.419882][T22297] exc_invalid_op+0x16/0x40 [ 1815.424424][T22297] asm_exc_invalid_op+0x16/0x20 [ 1815.429388][T22297] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 1815.434712][T22297] Code: f9 eb 59 e8 f6 6d 1e f9 c6 05 4f 84 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 a0 8e 8b 4c 89 fe 48 c7 c2 20 a1 8e 8b e8 b4 dd e9 f8 <0f> 0b e9 ff ee ff ff e8 c8 6d 1e f9 eb 24 e8 c1 6d 1e f9 c6 05 c3 [ 1815.454716][T22297] RSP: 0018:ffffc90003c8ee40 EFLAGS: 00010246 [ 1815.460904][T22297] RAX: 9df80f2575e53f00 RBX: ffff88807d438ee0 RCX: 0000000000080000 [ 1815.468910][T22297] RDX: ffffc900105e7000 RSI: 00000000000063e7 RDI: 00000000000063e8 [ 1815.477026][T22297] RBP: ffffc90003c8eff8 R08: ffffc90003c8eac7 R09: 1ffff92000791d58 [ 1815.485038][T22297] R10: dffffc0000000000 R11: fffff52000791d59 R12: 0000000000000000 [ 1815.493063][T22297] R13: dffffc0000000000 R14: ffff88802c2e4200 R15: 0000000000000020 [ 1815.501172][T22297] ? u32_get+0x370/0x370 [ 1815.505457][T22297] ? u32_get+0x370/0x370 [ 1815.509754][T22297] tc_new_tfilter+0x1160/0x1900 [ 1815.514793][T22297] ? kmem_cache_free+0xf7/0x290 [ 1815.519833][T22297] ? nlmon_xmit+0xac/0xf0 [ 1815.524444][T22297] ? tcf_proto_signal_destroying+0x240/0x240 [ 1815.530556][T22297] ? rcu_read_unlock+0x8c/0xa0 [ 1815.535440][T22297] ? tcf_proto_signal_destroying+0x240/0x240 [ 1815.541528][T22297] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1815.546766][T22297] ? tcf_proto_signal_destroying+0x240/0x240 [ 1815.552865][T22297] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 1815.557864][T22297] ? rtnetlink_bind+0x80/0x80 [ 1815.562750][T22297] ? __local_bh_enable_ip+0x136/0x1c0 [ 1815.568242][T22297] ? lockdep_hardirqs_on+0x94/0x140 [ 1815.573464][T22297] ? __local_bh_enable_ip+0x136/0x1c0 [ 1815.578953][T22297] ? _local_bh_enable+0xa0/0xa0 [ 1815.584054][T22297] ? __dev_queue_xmit+0x26b/0x37c0 [ 1815.589641][T22297] ? __dev_queue_xmit+0x26b/0x37c0 [ 1815.594897][T22297] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1815.600456][T22297] ? __dev_queue_xmit+0x26b/0x37c0 [ 1815.605695][T22297] ? ref_tracker_free+0x68c/0x840 [ 1815.610792][T22297] ? __copy_skb_header+0x3ba/0x4f0 [ 1815.615955][T22297] ? refcount_inc+0x70/0x70 [ 1815.620481][T22297] ? memcpy+0x3c/0x60 [ 1815.624499][T22297] ? __copy_skb_header+0x3ba/0x4f0 [ 1815.629663][T22297] ? __skb_clone+0x480/0x790 [ 1815.634278][T22297] netlink_rcv_skb+0x1fb/0x450 [ 1815.639077][T22297] ? rtnetlink_bind+0x80/0x80 [ 1815.643880][T22297] ? netlink_ack+0x1170/0x1170 [ 1815.648776][T22297] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.654217][T22297] netlink_unicast+0x74d/0x8d0 [ 1815.659048][T22297] netlink_sendmsg+0x8ad/0xbd0 [ 1815.663969][T22297] ? netlink_getsockopt+0x550/0x550 [ 1815.669199][T22297] ? aa_sock_msg_perm+0x94/0x150 [ 1815.674337][T22297] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1815.679662][T22297] ? security_socket_sendmsg+0x7c/0xa0 [ 1815.685246][T22297] ? netlink_getsockopt+0x550/0x550 [ 1815.690616][T22297] ____sys_sendmsg+0x5be/0x970 [ 1815.695438][T22297] ? __sys_sendmsg_sock+0x30/0x30 [ 1815.700595][T22297] ? __import_iovec+0x315/0x500 [ 1815.705668][T22297] ? import_iovec+0x6f/0xa0 [ 1815.710372][T22297] ___sys_sendmsg+0x2a2/0x360 [ 1815.715246][T22297] ? __sched_text_start+0x8/0x8 [ 1815.720127][T22297] ? __sys_sendmsg+0x290/0x290 [ 1815.725032][T22297] __sys_sendmmsg+0x2c3/0x510 [ 1815.730017][T22297] ? __ia32_sys_sendmsg+0x80/0x80 [ 1815.735185][T22297] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1815.741433][T22297] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1815.747487][T22297] ? lock_chain_count+0x20/0x20 [ 1815.752598][T22297] __x64_sys_sendmmsg+0x9c/0xb0 [ 1815.757592][T22297] do_syscall_64+0x4c/0xa0 [ 1815.762305][T22297] ? clear_bhb_loop+0x60/0xb0 [ 1815.767028][T22297] ? clear_bhb_loop+0x60/0xb0 [ 1815.771729][T22297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.777657][T22297] RIP: 0033:0x7efc31d9c819 [ 1815.782120][T22297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.801858][T22297] RSP: 002b:00007efc32b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1815.810294][T22297] RAX: ffffffffffffffda RBX: 00007efc32015fa0 RCX: 00007efc31d9c819 [ 1815.818717][T22297] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 1815.826703][T22297] RBP: 00007efc31e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1815.835215][T22297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1815.843238][T22297] R13: 00007efc32016038 R14: 00007efc32015fa0 R15: 00007ffef56ebe48 [ 1815.851269][T22297] [ 1815.854939][T22297] Kernel Offset: disabled [ 1815.859398][T22297] Rebooting in 86400 seconds..