last executing test programs: 17m15.544129023s ago: executing program 4 (id=5): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}], 0x1, 0x2, 0x2) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x48000) 17m12.05129116s ago: executing program 0 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000ed00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 17m11.666287414s ago: executing program 4 (id=24): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000210000000c000000020000000000000000000088000000000000"], &(0x7f00000002c0)=""/223, 0x26, 0xdf, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000070000000000000005000100060000000c0007800600044000000000e3dd69e80c42098b72041582357166a7d1d910eed20db83b95ab9ac0d032eb584310eb20d5afc1c44c25ae16fde20e2246f97089fe484365c3d4c3f0ef4de327b2ac0ac0e6180a207cbc84b9e3aaf15f3a999e38d9c162aca50b6ed1383da3421bf16c4653af0dccf97907ae163bcff5079627a8f2810bf93be7a8010fcf15d8173ac60b74420dbf97dfdebb0d2975eb32916c540e2ac8fc18b2ba80a6bc6ad60d07dcbfd1e27e8044b993de2a87bfae523b33801089fe6cd9cc8100a0bdce889c0fa3656fc3e9a59e144fcdfdfda2282341e965a4048ce2024adbc3b8b1e725d76e4f7cf42f7b1b863e100bb2d3090f968e62038af16272d0d3"], 0x54}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x2b, 0x80801, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @mcast2, 0x400}, {0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x2, 0x0, [0x1, 0x5, 0xffffffff, 0xe76, 0xffff, 0x2, 0xc491, 0x9, 0x3, 0x9, 0x9, 0x4, 0x30000, 0x9, 0x7cb, 0x44]}], r5, 0x1, 0x1, 0x48}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000200)=ANY=[]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 17m11.129031432s ago: executing program 0 (id=28): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17m3.322578012s ago: executing program 0 (id=33): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x4, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0xe88}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 17m0.036008534s ago: executing program 0 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 16m58.693941825s ago: executing program 0 (id=39): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) 16m57.611579532s ago: executing program 0 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000"], 0x64}}, 0x4800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) 16m53.858513706s ago: executing program 32 (id=24): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000210000000c000000020000000000000000000088000000000000"], &(0x7f00000002c0)=""/223, 0x26, 0xdf, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x2b, 0x80801, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @mcast2, 0x400}, {0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x2, 0x0, [0x1, 0x5, 0xffffffff, 0xe76, 0xffff, 0x2, 0xc491, 0x9, 0x3, 0x9, 0x9, 0x4, 0x30000, 0x9, 0x7cb, 0x44]}], r5, 0x1, 0x1, 0x48}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000200)=ANY=[]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 16m41.286957854s ago: executing program 33 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000"], 0x64}}, 0x4800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) 13m51.257462748s ago: executing program 3 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 13m50.725029986s ago: executing program 3 (id=344): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="f7b920e49a48d1", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1, 0x7], 0x0, 0x0, 0x2}}, 0x40) 13m49.809977125s ago: executing program 3 (id=349): syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x0) 13m48.547204821s ago: executing program 3 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m46.847116835s ago: executing program 3 (id=360): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r3, &(0x7f00000000c0)=""/75, 0x4b) r4 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884700000f000000000066b0a620109006ff00000000000000000000ffffac1414aafc000000000000000000000000000000010000000000000004010700000000002e0000000000000001040000000000006200053867000000840009e168000000000000000000000001020000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sendmmsg$inet6(r4, &(0x7f00000065c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r6, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) syz_open_dev$video(0x0, 0x8, 0x80081) 13m41.959655754s ago: executing program 3 (id=369): userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 13m23.965839418s ago: executing program 34 (id=369): userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 4m12.652797384s ago: executing program 5 (id=1098): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 3m33.020045158s ago: executing program 5 (id=1098): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 2m37.465637842s ago: executing program 5 (id=1098): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 2m5.092173591s ago: executing program 5 (id=1098): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 1m9.448814681s ago: executing program 5 (id=1098): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 29.662705604s ago: executing program 1 (id=2692): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6e", 0x1b}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 28.474766933s ago: executing program 1 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8000000010001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x15c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x148, 0x1, [@m_connmark={0x50, 0x10, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xb0, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x15c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000300)) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0xa, 0x3, 0x3a) bind$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 28.029957147s ago: executing program 1 (id=2695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1fffffffffffffac, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200000, 0xa9be, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0xff0f, 0x0, 0x2ffffffff}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5b, 0x7fffffff}]}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 27.829409681s ago: executing program 5 (id=1098): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 22.343226419s ago: executing program 1 (id=2699): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) 21.345877612s ago: executing program 1 (id=2704): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6e", 0x1b}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880), 0x2, 0x0, 0x6}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 19.114547375s ago: executing program 1 (id=2708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 6.812436528s ago: executing program 2 (id=2727): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x6000bc, 0x1a) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="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", 0xfc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x8000) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) 6.489981036s ago: executing program 7 (id=2729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) 6.063119149s ago: executing program 7 (id=2730): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6e", 0x1b}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880), 0x2, 0x0, 0x6}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 6.023890215s ago: executing program 6 (id=2731): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 5.504792398s ago: executing program 6 (id=2732): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x10000, 0x10000}, 0x28) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@private2, 0x4e1f, 0x0, 0x0, 0x1, 0x2, 0x0, 0x80}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0xd, 0x2, 0x0, 0xb}, 0x0, 0x6e6bc0, 0x1, 0x0, 0x3}, {{@in6=@remote, 0x1, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x5, 0x0, 0xb3}}, 0xe8) ioperm(0x0, 0x2, 0x7e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xd9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 4.963414831s ago: executing program 7 (id=2733): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee00) 4.859603792s ago: executing program 2 (id=2734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xc}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 4.317436078s ago: executing program 7 (id=2735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1fffffffffffffac, &(0x7f0000000380)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200000, 0xa9be, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0xff0f, 0x0, 0x2ffffffff}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5b, 0x7fffffff}]}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 3.788197747s ago: executing program 6 (id=2736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3.278099012s ago: executing program 35 (id=2708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3.082439871s ago: executing program 2 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8000000010001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x15c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x148, 0x1, [@m_connmark={0x50, 0x10, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xb0, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x15c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000300)) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0xa, 0x3, 0x3a) bind$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 2.152710045s ago: executing program 6 (id=2739): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04"], 0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) 1.576125722s ago: executing program 6 (id=2740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) 1.488907672s ago: executing program 2 (id=2741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2a, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff00124000631177fbac141416e000030a94029f03032f87e5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 793.275377ms ago: executing program 7 (id=2742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc959, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0xa, 0x39cc191a, 0x5f, 0x5b8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0x35, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x935a, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8007, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x2, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x1, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x9a9f, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x400006, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a9, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x400006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 760.119454ms ago: executing program 6 (id=2743): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6e", 0x1b}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x672, 0x0, &(0x7f0000001880)="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", 0x2, 0x0, 0x6}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 652.884453ms ago: executing program 2 (id=2744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 119.901797ms ago: executing program 7 (id=2745): getpid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 2 (id=2746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) kernel console output (not intermixed with test programs): d solve the problem. [ 770.730630][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.998758][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.006354][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.033044][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.593625][ T9476] Bluetooth: hci4: command tx timeout [ 773.694252][ T9475] hsr_slave_0: entered promiscuous mode [ 773.705069][ T9475] hsr_slave_1: entered promiscuous mode [ 773.714468][ T9475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.722333][ T9475] Cannot create hsr debugfs directory [ 775.120695][ T9475] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.360497][ T9475] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.489662][ T9475] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.693915][ T9475] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.719972][ T9475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 776.895896][ T9475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 776.956327][ T9475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 777.050544][ T9475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 777.170267][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 778.101157][ C0] hrtimer: interrupt took 245141 ns [ 779.240709][ T9594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1157'. [ 779.952662][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1162'. [ 780.337012][ T9475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.542336][ T9475] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.670819][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.678711][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.702207][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.709975][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.459694][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 782.682057][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.689240][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.310051][ T9475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.488738][ T9475] veth0_vlan: entered promiscuous mode [ 786.568201][ T9475] veth1_vlan: entered promiscuous mode [ 786.882896][ T9475] veth0_macvtap: entered promiscuous mode [ 786.953515][ T9475] veth1_macvtap: entered promiscuous mode [ 787.186018][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.283044][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.370467][ T9475] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.379809][ T9475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.389102][ T9475] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.398219][ T9475] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.045606][ T9686] veth1_macvtap: left promiscuous mode [ 790.051387][ T9686] macsec0: entered promiscuous mode [ 790.057185][ T9686] macsec0: entered allmulticast mode [ 791.064803][ T9693] veth1_macvtap: entered promiscuous mode [ 791.070953][ T9693] veth1_macvtap: entered allmulticast mode [ 791.078403][ T9693] macsec0: left promiscuous mode [ 791.084592][ T9693] macsec0: left allmulticast mode [ 791.089909][ T9693] veth1_macvtap: left allmulticast mode [ 792.503085][ T9] IPVS: starting estimator thread 0... [ 792.613910][ T9711] IPVS: using max 192 ests per chain, 9600 per kthread [ 799.374250][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.382378][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.687059][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.695634][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.449455][ T4567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.632177][ T4567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.829106][ T4567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.036898][ T4567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.440055][ T4567] bridge_slave_1: left allmulticast mode [ 801.446482][ T4567] bridge_slave_1: left promiscuous mode [ 801.453223][ T4567] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.519720][ T4567] bridge_slave_0: left allmulticast mode [ 801.525824][ T4567] bridge_slave_0: left promiscuous mode [ 801.532506][ T4567] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.235379][ T4567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.273221][ T4567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.332316][ T4567] bond0 (unregistering): Released all slaves [ 803.171749][ T4567] hsr_slave_0: left promiscuous mode [ 803.243920][ T4567] hsr_slave_1: left promiscuous mode [ 803.252883][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.261015][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.438677][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.447040][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.723259][ T4567] veth1_macvtap: left promiscuous mode [ 803.736347][ T4567] veth0_macvtap: left promiscuous mode [ 803.742351][ T4567] veth1_vlan: left promiscuous mode [ 803.748222][ T4567] veth0_vlan: left promiscuous mode [ 804.586998][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 804.597213][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 804.611277][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 804.639546][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 804.667083][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 806.730236][ T5798] Bluetooth: hci4: command tx timeout [ 806.760438][ T9816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 807.250854][ T4567] team0 (unregistering): Port device team_slave_1 removed [ 807.280205][ T4567] team0 (unregistering): Port device team_slave_0 removed [ 807.720504][ T9810] batadv0: entered promiscuous mode [ 807.752288][ T9810] batadv0: left promiscuous mode [ 808.816714][ T5798] Bluetooth: hci4: command tx timeout [ 808.833987][ T9799] chnl_net:caif_netlink_parms(): no params data found [ 810.151476][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.159610][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.167820][ T9799] bridge_slave_0: entered allmulticast mode [ 810.177755][ T9799] bridge_slave_0: entered promiscuous mode [ 810.244205][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.251975][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.260423][ T9799] bridge_slave_1: entered allmulticast mode [ 810.270389][ T9799] bridge_slave_1: entered promiscuous mode [ 810.548775][ T9799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.641626][ T9799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.883969][ T5798] Bluetooth: hci4: command tx timeout [ 811.039702][ T9799] team0: Port device team_slave_0 added [ 811.099858][ T9799] team0: Port device team_slave_1 added [ 811.481082][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.488681][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.522003][ T9799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.688561][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.696298][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.728150][ T9799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.162288][ T9799] hsr_slave_0: entered promiscuous mode [ 812.172826][ T9799] hsr_slave_1: entered promiscuous mode [ 812.182099][ T9799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.190141][ T9799] Cannot create hsr debugfs directory [ 812.965035][ T5798] Bluetooth: hci4: command tx timeout [ 814.026425][ T9799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 814.115017][ T9799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 814.181225][ T9799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 814.259418][ T9799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 815.366380][ T9799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.558691][ T9799] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.606088][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.613823][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.727007][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.734758][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.908870][ T9941] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 3, id = 0 [ 817.904123][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.071288][ T9799] veth0_vlan: entered promiscuous mode [ 821.196345][ T9799] veth1_vlan: entered promiscuous mode [ 821.525949][ T9799] veth0_macvtap: entered promiscuous mode [ 821.638358][ T9799] veth1_macvtap: entered promiscuous mode [ 821.747145][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.868055][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.991713][ T9799] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.002215][ T9799] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.011547][ T9799] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.020748][ T9799] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.877689][T10014] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1321'. [ 825.004686][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1329'. [ 825.014315][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1329'. [ 826.023986][T10050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1336'. [ 828.667359][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.677239][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.992160][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.000706][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.931691][ T3492] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.158769][ T3492] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.311127][ T3492] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.522813][ T3492] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.815114][ T3492] bridge_slave_1: left allmulticast mode [ 830.821080][ T3492] bridge_slave_1: left promiscuous mode [ 830.828168][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.854877][ T3492] bridge_slave_0: left allmulticast mode [ 830.860826][ T3492] bridge_slave_0: left promiscuous mode [ 830.876304][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.436004][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.487496][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.506202][ T3492] bond0 (unregistering): Released all slaves [ 832.117986][ T3492] hsr_slave_0: left promiscuous mode [ 832.183500][ T3492] hsr_slave_1: left promiscuous mode [ 832.192066][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.206193][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.282233][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.290213][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.470455][ T3492] veth1_macvtap: left promiscuous mode [ 832.476833][ T3492] veth0_macvtap: left promiscuous mode [ 832.482893][ T3492] veth1_vlan: left promiscuous mode [ 832.488771][ T3492] veth0_vlan: left promiscuous mode [ 833.582384][ T9476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 833.605293][ T9476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 833.618083][ T9476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 833.666395][ T9476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 833.679664][ T9476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 835.765473][ T9476] Bluetooth: hci4: command tx timeout [ 836.879444][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 836.919090][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 837.843632][ T9476] Bluetooth: hci4: command tx timeout [ 838.647170][T10129] chnl_net:caif_netlink_parms(): no params data found [ 839.924412][ T9476] Bluetooth: hci4: command tx timeout [ 840.621696][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.630815][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.639116][T10129] bridge_slave_0: entered allmulticast mode [ 840.649069][T10129] bridge_slave_0: entered promiscuous mode [ 840.770379][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.778270][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.786387][T10129] bridge_slave_1: entered allmulticast mode [ 840.796562][T10129] bridge_slave_1: entered promiscuous mode [ 841.139646][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.220741][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.003852][ T9476] Bluetooth: hci4: command tx timeout [ 842.263659][T10129] team0: Port device team_slave_0 added [ 843.291203][T10129] team0: Port device team_slave_1 added [ 844.048403][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.055685][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.953019][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.961587][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.988198][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.050095][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.058563][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.086372][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.977404][T10129] hsr_slave_0: entered promiscuous mode [ 845.988393][T10129] hsr_slave_1: entered promiscuous mode [ 845.997604][T10129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.005564][T10129] Cannot create hsr debugfs directory [ 847.635583][T10248] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1418'. [ 848.138669][T10129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 848.214692][T10129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 848.286577][T10129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 848.371831][T10129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 850.099175][T10129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.359076][T10129] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.416502][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.424348][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.555496][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.563147][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.079759][T10280] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1431'. [ 852.827157][T10129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.204759][T10314] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1444'. [ 855.701973][T10129] veth0_vlan: entered promiscuous mode [ 855.835418][T10129] veth1_vlan: entered promiscuous mode [ 856.152206][T10129] veth0_macvtap: entered promiscuous mode [ 856.287995][T10129] veth1_macvtap: entered promiscuous mode [ 856.504654][T10129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.560605][T10129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.647733][T10129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.657285][T10129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.666620][T10129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.681685][T10129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.215410][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.224385][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.557208][T10415] overlayfs: failed to clone upperpath [ 866.614492][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.622619][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.811939][ T3492] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.024954][ T3492] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.283821][ T3492] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.469758][ T3492] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.914333][ T3492] bridge_slave_1: left allmulticast mode [ 868.920314][ T3492] bridge_slave_1: left promiscuous mode [ 868.927263][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.984633][ T3492] bridge_slave_0: left allmulticast mode [ 868.990597][ T3492] bridge_slave_0: left promiscuous mode [ 868.998679][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.771375][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.832009][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.861509][ T3492] bond0 (unregistering): Released all slaves [ 870.512431][ T3492] hsr_slave_0: left promiscuous mode [ 870.538836][ T3492] hsr_slave_1: left promiscuous mode [ 870.547368][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.556206][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.588151][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.602646][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.724082][ T3492] veth1_macvtap: left promiscuous mode [ 870.729917][ T3492] veth0_macvtap: left promiscuous mode [ 870.736083][ T3492] veth1_vlan: left promiscuous mode [ 870.741724][ T3492] veth0_vlan: left promiscuous mode [ 872.197726][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 872.217895][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 872.231805][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 872.257249][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 872.270874][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 873.858345][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 873.918892][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 874.259179][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1489'. [ 874.325243][ T5798] Bluetooth: hci4: command tx timeout [ 876.408950][ T5798] Bluetooth: hci4: command tx timeout [ 876.482714][T10436] chnl_net:caif_netlink_parms(): no params data found [ 878.534835][ T5798] Bluetooth: hci4: command tx timeout [ 879.215938][T10436] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.223930][T10436] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.231879][T10436] bridge_slave_0: entered allmulticast mode [ 879.242116][T10436] bridge_slave_0: entered promiscuous mode [ 879.353805][T10436] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.361463][T10436] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.369813][T10436] bridge_slave_1: entered allmulticast mode [ 879.379721][T10436] bridge_slave_1: entered promiscuous mode [ 879.800579][T10436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.895274][T10436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.336527][T10436] team0: Port device team_slave_0 added [ 880.800911][T10436] team0: Port device team_slave_1 added [ 880.824482][ T5798] Bluetooth: hci4: command tx timeout [ 881.437058][T10436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.445041][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.476859][T10436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.720170][T10436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.728270][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.755790][T10436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.172835][T10436] hsr_slave_0: entered promiscuous mode [ 882.191724][T10436] hsr_slave_1: entered promiscuous mode [ 882.200882][T10436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 882.208935][T10436] Cannot create hsr debugfs directory [ 883.723010][T10436] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 883.794929][T10436] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 883.856875][T10436] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 883.918589][T10436] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 886.148510][T10436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.340787][T10436] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.415150][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.422789][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.555073][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.562763][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.225004][T10436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.189873][T10436] veth0_vlan: entered promiscuous mode [ 893.292293][T10436] veth1_vlan: entered promiscuous mode [ 893.571179][T10436] veth0_macvtap: entered promiscuous mode [ 893.713725][T10436] veth1_macvtap: entered promiscuous mode [ 894.246003][T10436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.303209][T10436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.335980][T10436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.345304][T10436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.354486][T10436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.364066][T10436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.928349][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.936845][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.123167][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.131872][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.049237][ T8385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.172942][ T8385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.354048][ T8385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.480520][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.490782][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.587545][ T8385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.872115][ T8385] bridge_slave_1: left allmulticast mode [ 905.878292][ T8385] bridge_slave_1: left promiscuous mode [ 905.885281][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.909861][ T8385] bridge_slave_0: left allmulticast mode [ 905.916264][ T8385] bridge_slave_0: left promiscuous mode [ 905.922953][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.535036][ T8385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.610810][ T8385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.662221][ T8385] bond0 (unregistering): Released all slaves [ 907.009942][ T8385] hsr_slave_0: left promiscuous mode [ 907.019221][ T8385] hsr_slave_1: left promiscuous mode [ 907.027776][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.036990][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.058487][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.066330][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.100535][ T8385] veth1_macvtap: left promiscuous mode [ 907.106752][ T8385] veth0_macvtap: left promiscuous mode [ 907.112592][ T8385] veth1_vlan: left promiscuous mode [ 907.118354][ T8385] veth0_vlan: left promiscuous mode [ 908.196132][T10761] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1605'. [ 908.608743][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 908.645124][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 908.662483][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 908.836133][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 908.847998][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 908.925775][ T8385] team0 (unregistering): Port device team_slave_1 removed [ 908.954477][ T8385] team0 (unregistering): Port device team_slave_0 removed [ 910.384911][T10764] chnl_net:caif_netlink_parms(): no params data found [ 910.964914][ T5798] Bluetooth: hci4: command tx timeout [ 911.835195][T10805] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1623'. [ 912.031595][T10809] overlayfs: failed to clone upperpath [ 912.151698][T10764] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.159591][T10764] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.167489][T10764] bridge_slave_0: entered allmulticast mode [ 912.186952][T10764] bridge_slave_0: entered promiscuous mode [ 912.286251][T10764] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.294367][T10764] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.302249][T10764] bridge_slave_1: entered allmulticast mode [ 912.312326][T10764] bridge_slave_1: entered promiscuous mode [ 912.545976][T10764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.597876][T10764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.812969][T10764] team0: Port device team_slave_0 added [ 912.857960][T10764] team0: Port device team_slave_1 added [ 913.105603][ T5798] Bluetooth: hci4: command tx timeout [ 913.210539][T10764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.217948][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.244477][T10764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.264943][T10764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.272152][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.304899][T10764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.265295][T10764] hsr_slave_0: entered promiscuous mode [ 914.275733][T10764] hsr_slave_1: entered promiscuous mode [ 914.284569][T10764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.292370][T10764] Cannot create hsr debugfs directory [ 915.095617][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1638'. [ 915.127487][ T5798] Bluetooth: hci4: command tx timeout [ 916.142907][T10764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 916.218944][T10764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 916.286328][T10764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 916.368138][T10764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 917.205937][ T5798] Bluetooth: hci4: command tx timeout [ 917.249484][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 917.441297][T10871] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1652'. [ 917.526930][T10764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.690007][T10764] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.782691][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.790460][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.917752][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.925452][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.555014][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 919.732368][T10906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1667'. [ 919.743633][T10906] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1667'. [ 919.838458][T10764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.750736][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 922.024688][T10764] veth0_vlan: entered promiscuous mode [ 922.072165][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1681'. [ 922.082024][T10946] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1681'. [ 922.162234][T10764] veth1_vlan: entered promiscuous mode [ 922.440594][T10764] veth0_macvtap: entered promiscuous mode [ 922.500111][T10764] veth1_macvtap: entered promiscuous mode [ 922.700021][T10764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.785575][T10764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.887169][T10764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.897120][T10764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.906499][T10764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.915704][T10764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.004949][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1693'. [ 927.915873][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1706'. [ 928.084814][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1709'. [ 928.094681][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1709'. [ 930.336590][T11058] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1722'. [ 930.346248][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1722'. [ 930.865123][ T5082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.873773][ T5082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.185109][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.193739][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.871264][ T4265] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.159274][ T4265] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.496524][ T4265] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.777248][ T5868] IPVS: starting estimator thread 0... [ 932.972671][T11086] IPVS: using max 240 ests per chain, 12000 per kthread [ 933.616887][ T4265] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.181335][ T4265] bridge_slave_1: left allmulticast mode [ 934.196093][ T4265] bridge_slave_1: left promiscuous mode [ 934.203036][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.327239][ T4265] bridge_slave_0: left allmulticast mode [ 934.333162][ T4265] bridge_slave_0: left promiscuous mode [ 934.340200][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.246654][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.284741][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.312121][ T4265] bond0 (unregistering): Released all slaves [ 935.654993][ T4265] hsr_slave_0: left promiscuous mode [ 935.663831][ T4265] hsr_slave_1: left promiscuous mode [ 935.671964][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.680020][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.699265][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.707199][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.749232][ T4265] veth1_macvtap: left promiscuous mode [ 935.755797][ T4265] veth0_macvtap: left promiscuous mode [ 935.761587][ T4265] veth1_vlan: left promiscuous mode [ 935.767837][ T4265] veth0_vlan: left promiscuous mode [ 936.249252][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1737'. [ 936.259137][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1737'. [ 938.529960][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 938.642611][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 939.116282][T11101] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 939.126025][T11101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 939.136038][T11101] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 939.234280][ T30] audit: type=1800 audit(1750796641.596:13): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1736" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 939.727886][ T9476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 939.737433][ T9476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 939.771610][ T9476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 939.790621][ T9476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 939.811690][ T9476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 940.254239][T11114] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 940.284797][T11114] syz_tun: entered promiscuous mode [ 940.338867][T11114] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 940.894834][T11107] chnl_net:caif_netlink_parms(): no params data found [ 941.963921][ T9476] Bluetooth: hci4: command tx timeout [ 942.944020][T11144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1754'. [ 942.953623][T11144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 943.822384][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.830259][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.839183][T11107] bridge_slave_0: entered allmulticast mode [ 943.849275][T11107] bridge_slave_0: entered promiscuous mode [ 943.880981][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.888859][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.897616][T11107] bridge_slave_1: entered allmulticast mode [ 943.907204][T11107] bridge_slave_1: entered promiscuous mode [ 944.051562][ T9476] Bluetooth: hci4: command tx timeout [ 944.149806][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.176339][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.371597][T11107] team0: Port device team_slave_0 added [ 944.440378][T11107] team0: Port device team_slave_1 added [ 944.664069][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.671342][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.697980][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.725273][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.732578][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.764348][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.127817][T11107] hsr_slave_0: entered promiscuous mode [ 945.138907][T11107] hsr_slave_1: entered promiscuous mode [ 945.156048][T11107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.164028][T11107] Cannot create hsr debugfs directory [ 946.100037][ T9476] Bluetooth: hci4: command tx timeout [ 946.805100][ T5868] IPVS: starting estimator thread 0... [ 946.934084][T11184] IPVS: using max 240 ests per chain, 12000 per kthread [ 948.082313][T11107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 948.164020][ T9476] Bluetooth: hci4: command tx timeout [ 948.214870][T11107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 948.403741][T11107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 948.607937][T11107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 949.819118][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.029774][T11107] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.138222][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.145901][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.276928][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.284575][ T5082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.555824][ T5866] IPVS: starting estimator thread 0... [ 954.244515][T11235] IPVS: using max 240 ests per chain, 12000 per kthread [ 955.337820][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.807783][T11107] veth0_vlan: entered promiscuous mode [ 959.015301][T11107] veth1_vlan: entered promiscuous mode [ 959.579795][T11107] veth0_macvtap: entered promiscuous mode [ 959.620651][T11107] veth1_macvtap: entered promiscuous mode [ 959.732370][T11107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.837338][T11107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.957197][T11107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.966755][T11107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.975975][T11107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.985206][T11107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.789054][T11309] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1814'. [ 965.138569][T11342] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 965.147286][T11342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 965.155946][T11342] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 965.164226][T11342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 966.911083][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 966.918061][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 971.588460][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.596666][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.850250][ T5082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.861828][ T5082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.649806][ T3492] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.558398][ T3492] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.576517][ T3492] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.814874][ T3492] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.412918][ T3492] bridge_slave_1: left allmulticast mode [ 975.419468][ T3492] bridge_slave_1: left promiscuous mode [ 975.426241][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.541267][ T3492] bridge_slave_0: left allmulticast mode [ 975.547474][ T3492] bridge_slave_0: left promiscuous mode [ 975.554458][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.394530][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.418195][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.439181][ T3492] bond0 (unregistering): Released all slaves [ 976.816621][ T3492] hsr_slave_0: left promiscuous mode [ 976.825555][ T3492] hsr_slave_1: left promiscuous mode [ 976.833987][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.841679][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.861208][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.869202][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.984814][ T3492] veth1_macvtap: left promiscuous mode [ 976.996020][ T3492] veth0_macvtap: left promiscuous mode [ 977.001942][ T3492] veth1_vlan: left promiscuous mode [ 977.007736][ T3492] veth0_vlan: left promiscuous mode [ 980.108623][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.136777][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.150354][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.174934][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 980.202237][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 980.284747][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.401259][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 982.438082][T11458] chnl_net:caif_netlink_parms(): no params data found [ 982.615942][ T5798] Bluetooth: hci4: command tx timeout [ 984.643812][ T5798] Bluetooth: hci4: command tx timeout [ 985.258441][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.266326][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.274375][T11458] bridge_slave_0: entered allmulticast mode [ 985.289371][T11458] bridge_slave_0: entered promiscuous mode [ 985.385459][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.399746][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.407802][T11458] bridge_slave_1: entered allmulticast mode [ 985.417334][T11458] bridge_slave_1: entered promiscuous mode [ 985.669708][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.722008][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.896232][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'. [ 985.932799][T11511] veth0_macvtap: left promiscuous mode [ 985.976914][T11458] team0: Port device team_slave_0 added [ 986.021451][T11458] team0: Port device team_slave_1 added [ 986.395170][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.402391][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.434433][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.573983][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.581266][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.607954][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.740891][ T5798] Bluetooth: hci4: command tx timeout [ 986.914553][T11458] hsr_slave_0: entered promiscuous mode [ 986.936452][T11458] hsr_slave_1: entered promiscuous mode [ 986.945444][T11458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.954793][T11458] Cannot create hsr debugfs directory [ 988.804103][ T5798] Bluetooth: hci4: command tx timeout [ 990.430356][T11458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 990.499804][T11458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 990.630614][T11458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 990.743136][T11458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 991.798772][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.979210][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.080545][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.088316][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.223901][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.231440][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.595905][T11458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 992.606923][T11458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 995.805290][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.189532][T11599] overlayfs: failed to clone upperpath [ 997.417257][T11613] netlink: 1068 bytes leftover after parsing attributes in process `syz.7.1935'. [ 998.663866][T11628] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 999.061535][T11458] veth0_vlan: entered promiscuous mode [ 999.190169][T11458] veth1_vlan: entered promiscuous mode [ 999.680505][T11458] veth0_macvtap: entered promiscuous mode [ 999.793731][T11458] veth1_macvtap: entered promiscuous mode [ 999.968398][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.268716][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.236394][T11458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.245535][T11458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.254646][T11458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.268034][T11458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.880342][T11723] netlink: 'syz.2.1974': attribute type 39 has an invalid length. [ 1011.013680][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.118681][T11723] bridge_slave_0 (unregistering): left allmulticast mode [ 1011.126275][T11723] bridge_slave_0 (unregistering): left promiscuous mode [ 1011.133870][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.110262][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.118861][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.384419][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.392583][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.127017][ T3492] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.317299][ T3492] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.512445][ T3492] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.710093][ T3492] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.294163][ T3492] bridge_slave_1: left allmulticast mode [ 1019.300122][ T3492] bridge_slave_1: left promiscuous mode [ 1019.307021][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.342597][ T3492] bridge_slave_0: left allmulticast mode [ 1019.348852][ T3492] bridge_slave_0: left promiscuous mode [ 1019.355771][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.182060][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.243906][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.282452][ T3492] bond0 (unregistering): Released all slaves [ 1020.838366][ T3492] hsr_slave_0: left promiscuous mode [ 1020.861983][ T3492] hsr_slave_1: left promiscuous mode [ 1020.869547][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.877855][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.895869][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.903813][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.936604][ T3492] veth1_macvtap: left promiscuous mode [ 1020.942326][ T3492] veth0_macvtap: left promiscuous mode [ 1020.948464][ T3492] veth1_vlan: left promiscuous mode [ 1020.954203][ T3492] veth0_vlan: left promiscuous mode [ 1022.686751][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 1022.714821][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 1022.991697][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'. [ 1023.001936][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 1023.608333][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1023.645779][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1023.744614][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1023.759768][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1023.771342][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1025.215812][T11806] chnl_net:caif_netlink_parms(): no params data found [ 1025.846218][ T5802] Bluetooth: hci4: command tx timeout [ 1026.391592][T11839] 9pnet_fd: Insufficient options for proto=fd [ 1026.615069][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.622926][T11806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.631152][T11806] bridge_slave_0: entered allmulticast mode [ 1026.640908][T11806] bridge_slave_0: entered promiscuous mode [ 1026.912224][T11806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.920277][T11806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.928340][T11806] bridge_slave_1: entered allmulticast mode [ 1026.937673][T11806] bridge_slave_1: entered promiscuous mode [ 1027.330381][T11806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.370161][T11806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.833174][T11806] team0: Port device team_slave_0 added [ 1027.967364][T11806] team0: Port device team_slave_1 added [ 1028.018665][ T5802] Bluetooth: hci4: command tx timeout [ 1028.341307][T11854] process 'syz.1.2021' launched '/dev/fd/7' with NULL argv: empty string added [ 1028.404115][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.410840][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.050700][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1029.145321][T11806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.152759][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.179703][T11806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.370936][T11806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.379222][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.406097][T11806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.083962][ T5802] Bluetooth: hci4: command tx timeout [ 1030.255461][T11806] hsr_slave_0: entered promiscuous mode [ 1030.266195][T11806] hsr_slave_1: entered promiscuous mode [ 1030.275271][T11806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.283072][T11806] Cannot create hsr debugfs directory [ 1032.093018][T11806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1032.169039][ T5802] Bluetooth: hci4: command tx timeout [ 1032.196716][T11806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1032.220618][T11806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1032.246660][T11806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1033.281954][T11806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.410688][T11806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.184811][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.192363][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.498558][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.506265][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.988424][T11806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.764885][T11939] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1042.912391][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.173823][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.184545][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.195581][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.206084][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.216545][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.227366][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.238263][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.248835][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1044.259263][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1046.560403][T11806] veth0_vlan: entered promiscuous mode [ 1046.676785][T11806] veth1_vlan: entered promiscuous mode [ 1046.912622][T11806] veth0_macvtap: entered promiscuous mode [ 1046.972143][T11806] veth1_macvtap: entered promiscuous mode [ 1047.195633][T11806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.326827][T11806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.508790][T11806] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.518816][T11806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.532601][T11806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.543157][T11806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.212576][T12010] ======================================================= [ 1054.212576][T12010] WARNING: The mand mount option has been deprecated and [ 1054.212576][T12010] and is ignored by this kernel. Remove the mand [ 1054.212576][T12010] option from the mount to silence this warning. [ 1054.212576][T12010] ======================================================= [ 1058.383182][T12033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1064.733819][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.742017][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.919848][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.928246][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.261772][ T3512] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.390262][T12097] __nla_validate_parse: 27 callbacks suppressed [ 1068.390340][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2104'. [ 1068.477945][ T3512] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.576086][T12097] team2: entered promiscuous mode [ 1068.581408][T12097] team2: entered allmulticast mode [ 1068.690987][ T3512] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.854257][ T3512] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.126024][ T3512] bridge_slave_1: left allmulticast mode [ 1069.131989][ T3512] bridge_slave_1: left promiscuous mode [ 1069.139589][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.217998][ T3512] bridge_slave_0: left allmulticast mode [ 1069.224652][ T3512] bridge_slave_0: left promiscuous mode [ 1069.231222][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.169582][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.225179][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.264604][ T3512] bond0 (unregistering): Released all slaves [ 1070.847782][ T3512] hsr_slave_0: left promiscuous mode [ 1070.873926][ T3512] hsr_slave_1: left promiscuous mode [ 1070.881778][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.889957][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.935095][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.942858][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.980498][ T3512] veth1_macvtap: left promiscuous mode [ 1070.986544][ T3512] veth0_macvtap: left promiscuous mode [ 1070.992342][ T3512] veth1_vlan: left promiscuous mode [ 1071.003639][ T3512] veth0_vlan: left promiscuous mode [ 1071.868443][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 1071.938341][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 1073.307441][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1073.324161][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1073.467097][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1073.481772][ T9476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1073.495914][ T9476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1075.607250][ T9476] Bluetooth: hci4: command tx timeout [ 1076.513971][T12133] 9pnet_fd: Insufficient options for proto=fd [ 1076.843754][T12120] chnl_net:caif_netlink_parms(): no params data found [ 1077.689100][ T9476] Bluetooth: hci4: command tx timeout [ 1078.518254][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.526094][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.535378][T12120] bridge_slave_0: entered allmulticast mode [ 1078.545277][T12120] bridge_slave_0: entered promiscuous mode [ 1078.666268][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.680808][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.688881][T12120] bridge_slave_1: entered allmulticast mode [ 1078.699091][T12120] bridge_slave_1: entered promiscuous mode [ 1079.262822][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.349311][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.484985][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 1079.746071][T12120] team0: Port device team_slave_0 added [ 1079.764164][ T9476] Bluetooth: hci4: command tx timeout [ 1079.838862][T12120] team0: Port device team_slave_1 added [ 1080.100443][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.112340][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.140497][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.310387][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.323162][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.352836][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.966540][T12120] hsr_slave_0: entered promiscuous mode [ 1080.977155][T12120] hsr_slave_1: entered promiscuous mode [ 1080.986057][T12120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1080.993965][T12120] Cannot create hsr debugfs directory [ 1081.844212][ T9476] Bluetooth: hci4: command tx timeout [ 1084.878274][T12120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1085.028337][T12120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1085.114811][T12120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1085.235845][T12120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1088.620659][T12120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.694424][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.752303][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.760017][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.777288][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.784962][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.789505][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.797249][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.881547][T12120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.078722][ T9476] Bluetooth: hci2: unexpected event for opcode 0x080f [ 1094.285214][T12251] netlink: 988 bytes leftover after parsing attributes in process `syz.6.2155'. [ 1095.345581][T12120] veth0_vlan: entered promiscuous mode [ 1095.454247][T12120] veth1_vlan: entered promiscuous mode [ 1095.737416][T12120] veth0_macvtap: entered promiscuous mode [ 1095.814056][T12120] veth1_macvtap: entered promiscuous mode [ 1095.965293][T12120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.127683][T12120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.221888][T12120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.231318][T12120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.240600][T12120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.250874][T12120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.666112][T12286] netlink: 988 bytes leftover after parsing attributes in process `syz.1.2169'. [ 1098.084574][ T9476] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1098.093858][ T9476] Bluetooth: hci2: Injecting HCI hardware error event [ 1098.101960][ T9476] Bluetooth: hci2: hardware error 0x00 [ 1099.850277][T12303] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2174'. [ 1100.166863][ T9476] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1101.366317][ T9476] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1101.375643][ T9476] Bluetooth: hci1: Injecting HCI hardware error event [ 1101.384759][ T5802] Bluetooth: hci1: hardware error 0x00 [ 1101.495814][T12321] netlink: 988 bytes leftover after parsing attributes in process `syz.1.2181'. [ 1103.484577][ T5802] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1105.160606][T12353] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2191'. [ 1105.460834][T12358] netlink: 900 bytes leftover after parsing attributes in process `syz.2.2194'. [ 1106.218113][T12366] 9pnet_fd: Insufficient options for proto=fd [ 1106.373013][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.381520][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.981760][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 1107.122348][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.131089][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.872514][ T3512] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.039586][ T3512] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.281483][ T3512] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.459460][ T3512] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.748413][ T3512] bridge_slave_1: left allmulticast mode [ 1108.754715][ T3512] bridge_slave_1: left promiscuous mode [ 1108.761262][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.798258][ T3512] bridge_slave_0: left allmulticast mode [ 1108.804628][ T3512] bridge_slave_0: left promiscuous mode [ 1108.811282][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.637731][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.681656][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.730894][ T3512] bond0 (unregistering): Released all slaves [ 1110.188878][ T3512] hsr_slave_0: left promiscuous mode [ 1110.236231][ T3512] hsr_slave_1: left promiscuous mode [ 1110.249013][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.257104][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.273964][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.281707][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.329661][ T3512] veth1_macvtap: left promiscuous mode [ 1110.335979][ T3512] veth0_macvtap: left promiscuous mode [ 1110.341924][ T3512] veth1_vlan: left promiscuous mode [ 1110.348357][ T3512] veth0_vlan: left promiscuous mode [ 1111.735870][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 1111.835875][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 1112.198859][T12397] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2211'. [ 1112.485620][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 1112.644867][ T9476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1112.676748][ T9476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1112.706403][ T9476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1112.732239][ T9476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1112.745501][ T9476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1114.008664][T12404] chnl_net:caif_netlink_parms(): no params data found [ 1114.805615][ T9476] Bluetooth: hci4: command tx timeout [ 1115.366025][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 1115.489833][T12437] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2226'. [ 1115.579378][T12404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.587454][T12404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.596856][T12404] bridge_slave_0: entered allmulticast mode [ 1115.606829][T12404] bridge_slave_0: entered promiscuous mode [ 1115.737575][T12404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.752752][T12404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.760919][T12404] bridge_slave_1: entered allmulticast mode [ 1115.772102][T12404] bridge_slave_1: entered promiscuous mode [ 1116.077441][T12404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.146688][T12404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.439470][T12404] team0: Port device team_slave_0 added [ 1116.500231][T12404] team0: Port device team_slave_1 added [ 1116.883863][ T9476] Bluetooth: hci4: command tx timeout [ 1118.984764][ T9476] Bluetooth: hci4: command tx timeout [ 1120.066769][T12404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.074258][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.100996][T12404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.217210][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 1120.289339][T12404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.296863][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.324027][T12404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.704104][T12476] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2242'. [ 1120.911739][T12404] hsr_slave_0: entered promiscuous mode [ 1120.922082][T12404] hsr_slave_1: entered promiscuous mode [ 1120.930997][T12404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.939022][T12404] Cannot create hsr debugfs directory [ 1121.046021][ T9476] Bluetooth: hci4: command tx timeout [ 1123.371330][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2253'. [ 1127.709020][T12404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1127.777861][T12404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1127.791692][T12527] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2261'. [ 1127.851798][T12404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1127.861691][T12527] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 1127.976049][T12527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1128.165049][T12529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1128.174367][T12529] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 1128.190283][T12529] bond1: (slave ipip0): Error -95 calling set_mac_address [ 1128.331307][T12404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1128.404703][T12527] bond1: (slave ip6erspan0): making interface the new active one [ 1128.415191][T12527] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1131.120828][T12404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.497974][T12404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.586109][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2268'. [ 1133.635376][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.643013][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.759118][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.766720][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.895436][ T30] audit: type=1326 audit(1750796840.346:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12585 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1137.919102][ T30] audit: type=1326 audit(1750796840.366:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12585 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1137.942497][ T30] audit: type=1326 audit(1750796840.366:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12585 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1138.173020][ T30] audit: type=1326 audit(1750796840.446:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12585 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1138.235370][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2278'. [ 1138.261992][T12404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.392751][T12593] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 1138.634545][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 1140.772153][T12615] netlink: 'syz.2.2287': attribute type 8 has an invalid length. [ 1143.968794][T12404] veth0_vlan: entered promiscuous mode [ 1146.743570][T12404] veth1_vlan: entered promiscuous mode [ 1147.310397][T12404] veth0_macvtap: entered promiscuous mode [ 1147.713936][T12404] veth1_macvtap: entered promiscuous mode [ 1147.997438][T12404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.151517][T12404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.251557][T12404] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.261075][T12404] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.271261][T12404] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.280497][T12404] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.447525][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'. [ 1149.206301][T12651] netlink: 'syz.2.2299': attribute type 8 has an invalid length. [ 1151.230327][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.237181][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1152.728867][T12673] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2306'. [ 1153.107179][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'. [ 1155.050282][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 1155.086860][T12690] netlink: 'syz.2.2315': attribute type 8 has an invalid length. [ 1157.663110][T12706] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 1157.671394][T12706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2320'. [ 1157.775761][T12706] team0: Port device netdevsim1 added [ 1157.841679][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2322'. [ 1158.658272][T12723] netlink: 892 bytes leftover after parsing attributes in process `syz.7.2327'. [ 1159.093005][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'. [ 1159.345763][T12735] netlink: 'syz.7.2330': attribute type 1 has an invalid length. [ 1159.418344][T12735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1159.612949][T12739] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1159.795221][ T9476] Bluetooth: hci3: connection err: -111 [ 1161.480203][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 1161.694961][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.703043][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.184353][T11696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.192594][T11696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.816049][T12765] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1163.412326][ T3512] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.530095][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 1163.750568][ T3512] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.951530][ T3512] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.166990][ T3512] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.479140][ T3512] bridge_slave_1: left allmulticast mode [ 1164.491531][ T3512] bridge_slave_1: left promiscuous mode [ 1164.498296][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.541243][ T3512] bridge_slave_0: left allmulticast mode [ 1164.547687][ T3512] bridge_slave_0: left promiscuous mode [ 1164.554558][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.208457][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.261534][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.279947][ T3512] bond0 (unregistering): Released all slaves [ 1165.592121][ T3512] hsr_slave_0: left promiscuous mode [ 1165.599635][ T3512] hsr_slave_1: left promiscuous mode [ 1165.619484][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.628455][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.640907][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.648883][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.690045][ T3512] veth1_macvtap: left promiscuous mode [ 1165.695993][ T3512] veth0_macvtap: left promiscuous mode [ 1165.701893][ T3512] veth1_vlan: left promiscuous mode [ 1165.708160][ T3512] veth0_vlan: left promiscuous mode [ 1166.391261][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 1166.418824][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 1167.088474][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 1167.625732][T12793] netlink: 892 bytes leftover after parsing attributes in process `syz.7.2354'. [ 1168.841628][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 1169.258490][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1169.268144][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1169.277687][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1169.290525][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1169.926438][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 1170.266014][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1170.358658][ T5802] Bluetooth: hci0: unexpected event for opcode 0x080f [ 1170.814100][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2365'. [ 1171.644248][T12809] chnl_net:caif_netlink_parms(): no params data found [ 1171.793835][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 1172.331424][ T5802] Bluetooth: hci4: command tx timeout [ 1173.247055][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1174.141707][T12809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.149752][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.157744][T12809] bridge_slave_0: entered allmulticast mode [ 1174.167450][T12809] bridge_slave_0: entered promiscuous mode [ 1174.833054][ T5802] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1174.843806][ T5802] Bluetooth: hci0: Injecting HCI hardware error event [ 1174.854820][ T5802] Bluetooth: hci4: command tx timeout [ 1174.855557][ T9476] Bluetooth: hci0: hardware error 0x00 [ 1174.907960][T12867] netlink: 'syz.6.2380': attribute type 4 has an invalid length. [ 1174.951171][T12809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.958931][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.973939][T12809] bridge_slave_1: entered allmulticast mode [ 1174.984334][T12809] bridge_slave_1: entered promiscuous mode [ 1175.007855][T12867] netlink: 'syz.6.2380': attribute type 4 has an invalid length. [ 1175.192643][T12809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.306925][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2381'. [ 1175.335566][T12809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.645262][T12809] team0: Port device team_slave_0 added [ 1175.723921][T12809] team0: Port device team_slave_1 added [ 1175.977875][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'. [ 1175.992350][T12809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.000152][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.026991][T12809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.085719][T12809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.092937][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.119812][T12809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.403794][ T5798] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1176.454731][T12809] hsr_slave_0: entered promiscuous mode [ 1176.472177][T12809] hsr_slave_1: entered promiscuous mode [ 1176.481747][T12809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1176.489725][T12809] Cannot create hsr debugfs directory [ 1176.896014][ T5798] Bluetooth: hci4: command tx timeout [ 1176.964560][ T9476] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1179.286297][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2397'. [ 1179.381489][ T9476] Bluetooth: hci4: command tx timeout [ 1180.491643][ T9476] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1180.500679][ T9476] Bluetooth: hci3: Injecting HCI hardware error event [ 1180.510475][ T9476] Bluetooth: hci3: hardware error 0x00 [ 1180.528763][T12809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1180.560390][T12809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1180.591895][T12809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1180.627344][T12809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1181.950231][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.117718][T12809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.218630][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.226256][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.243059][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.250761][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.375415][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 1182.564534][ T9476] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1182.577503][T12809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.087169][T12809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.857528][T12976] 9pnet_fd: Insufficient options for proto=fd [ 1186.310749][T12809] veth0_vlan: entered promiscuous mode [ 1186.437357][T12809] veth1_vlan: entered promiscuous mode [ 1186.717303][T12809] veth0_macvtap: entered promiscuous mode [ 1186.772348][T12809] veth1_macvtap: entered promiscuous mode [ 1187.059050][T12809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.381054][T12809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.539181][T12809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.549196][T12809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.558410][T12809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.567577][T12809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.174733][T13002] netlink: 'syz.2.2435': attribute type 1 has an invalid length. [ 1189.341432][T13002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1189.774853][T13004] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1190.193898][T13012] netlink: 'syz.6.2438': attribute type 1 has an invalid length. [ 1190.276299][T13012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1190.336039][T13015] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1191.375192][T13027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2442'. [ 1192.605432][T13041] tipc: Started in network mode [ 1192.610641][T13041] tipc: Node identity 4, cluster identity 4711 [ 1192.617455][T13041] tipc: Node number set to 4 [ 1193.867591][T13055] netlink: 'syz.1.2453': attribute type 1 has an invalid length. [ 1193.894383][T13057] netlink: 'syz.2.2452': attribute type 1 has an invalid length. [ 1193.995256][T13055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1194.100947][T13057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1194.169245][T13059] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1194.791346][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.804597][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.956606][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.964950][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.609185][T13077] tipc: Started in network mode [ 1195.620971][T13077] tipc: Node identity 4, cluster identity 4711 [ 1195.630295][T13077] tipc: Node number set to 4 [ 1195.711538][ T3512] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.953814][ T3512] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.149469][ T3512] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.287966][ T3512] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.585503][ T3512] bridge_slave_1: left allmulticast mode [ 1196.591451][ T3512] bridge_slave_1: left promiscuous mode [ 1196.598477][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.615114][ T3512] bridge_slave_0: left allmulticast mode [ 1196.621016][ T3512] bridge_slave_0: left promiscuous mode [ 1196.627854][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.156873][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.177753][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.205082][ T3512] bond0 (unregistering): Released all slaves [ 1197.629942][ T3512] hsr_slave_0: left promiscuous mode [ 1197.638777][ T3512] hsr_slave_1: left promiscuous mode [ 1197.647421][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.655297][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.675688][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.683700][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.714552][ T3512] veth1_macvtap: left promiscuous mode [ 1197.720298][ T3512] veth0_macvtap: left promiscuous mode [ 1197.726542][ T3512] veth1_vlan: left promiscuous mode [ 1197.732151][ T3512] veth0_vlan: left promiscuous mode [ 1198.403799][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 1198.433037][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 1198.957316][T13088] netlink: 'syz.2.2465': attribute type 1 has an invalid length. [ 1199.037416][T13088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1199.084677][ T30] audit: type=1326 audit(1750796901.546:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2cf9858e7 code=0x7ffc0000 [ 1199.111158][ T30] audit: type=1326 audit(1750796901.546:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2cf92ab19 code=0x7ffc0000 [ 1199.135474][ T30] audit: type=1326 audit(1750796901.546:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cf98e929 code=0x7ffc0000 [ 1199.158624][ T30] audit: type=1326 audit(1750796901.556:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2cf9858e7 code=0x7ffc0000 [ 1199.181469][ T30] audit: type=1326 audit(1750796901.556:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2cf92ab19 code=0x7ffc0000 [ 1199.397634][T13094] bond0: (slave syz_tun): Releasing backup interface [ 1199.680011][T13094] bridge_slave_0: left allmulticast mode [ 1199.686383][T13094] bridge_slave_0: left promiscuous mode [ 1199.693276][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.961697][ T30] audit: type=1326 audit(1750796901.726:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2cf9858e7 code=0x7ffc0000 [ 1199.984875][ T30] audit: type=1326 audit(1750796901.726:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2cf92ab19 code=0x7ffc0000 [ 1200.007576][ T30] audit: type=1326 audit(1750796901.726:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2cf9858e7 code=0x7ffc0000 [ 1200.034992][ T30] audit: type=1326 audit(1750796901.726:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2cf92ab19 code=0x7ffc0000 [ 1200.059310][ T30] audit: type=1326 audit(1750796901.726:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.6.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2cf9858e7 code=0x7ffc0000 [ 1200.102085][T13094] bridge_slave_1: left allmulticast mode [ 1200.108250][T13094] bridge_slave_1: left promiscuous mode [ 1200.115148][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.292735][T13094] bond2: (slave veth0_to_bond): Releasing backup interface [ 1200.370146][T13102] netlink: 'syz.2.2468': attribute type 1 has an invalid length. [ 1200.485339][T13094] bond0: (slave bond_slave_0): Releasing backup interface [ 1200.507481][T13094] bond_slave_0: left promiscuous mode [ 1200.591000][T13094] bond0: (slave bond_slave_1): Releasing backup interface [ 1200.626352][T13094] bond_slave_1: left promiscuous mode [ 1200.739043][T13094] team0: Port device team_slave_0 removed [ 1200.782507][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1200.796062][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1200.821526][T13094] team0: Port device team_slave_1 removed [ 1200.832581][T13094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.847052][T13094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.861218][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1200.887964][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1200.904006][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1200.928643][T13094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.936604][T13094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.176318][T13102] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1201.370294][T13105] bond2: (slave veth0_to_bond): Releasing backup interface [ 1201.406015][T13105] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1201.413622][T13114] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2471'. [ 1201.498536][T13114] netlink: 'syz.7.2471': attribute type 1 has an invalid length. [ 1201.578402][T13114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1201.707037][T13115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1201.716192][T13115] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 1201.731821][T13115] bond2: (slave ipip0): Error -95 calling set_mac_address [ 1201.977191][T13114] bond2: (slave ip6erspan0): making interface the new active one [ 1201.987755][T13114] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1203.073030][T13108] chnl_net:caif_netlink_parms(): no params data found [ 1203.124148][ T5798] Bluetooth: hci4: command tx timeout [ 1203.244414][T13130] netlink: 'syz.2.2476': attribute type 1 has an invalid length. [ 1203.678916][T13136] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 1203.768212][T13136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1205.274218][ T5798] Bluetooth: hci4: command tx timeout [ 1206.188497][T13108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.196471][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.204448][T13108] bridge_slave_0: entered allmulticast mode [ 1206.214105][T13108] bridge_slave_0: entered promiscuous mode [ 1206.316145][T13153] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 1206.462146][T13153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1206.518769][T13108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.526766][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.534703][T13108] bridge_slave_1: entered allmulticast mode [ 1206.544345][T13108] bridge_slave_1: entered promiscuous mode [ 1206.964835][T13154] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1207.175476][T13162] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2485'. [ 1207.216317][T13108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.275116][T13108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.286013][ T5798] Bluetooth: hci4: command tx timeout [ 1207.581283][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1207.588031][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1207.656013][T13108] team0: Port device team_slave_0 added [ 1207.675908][T13108] team0: Port device team_slave_1 added [ 1207.692252][T13168] ceph: No mds server is up or the cluster is laggy [ 1207.931710][T13108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.939044][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.966299][T13108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.234585][T13108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.241805][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.258992][T13177] netlink: 'syz.1.2490': attribute type 1 has an invalid length. [ 1208.268996][T13108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.856310][T13108] hsr_slave_0: entered promiscuous mode [ 1208.867049][T13108] hsr_slave_1: entered promiscuous mode [ 1208.876036][T13108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1208.883933][T13108] Cannot create hsr debugfs directory [ 1209.402224][ T5798] Bluetooth: hci4: command tx timeout [ 1210.358283][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1210.358364][ T30] audit: type=1326 audit(1750796912.836:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz.7.2499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe439d8e929 code=0x0 [ 1212.636540][T13203] netlink: 'syz.6.2500': attribute type 1 has an invalid length. [ 1212.678914][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.686159][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.839128][T13203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1213.015194][T13209] bond1: (slave veth0_to_bond): Releasing backup interface [ 1213.114567][T13209] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1213.272949][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1213.279735][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1213.336196][T13108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1213.372516][T13108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1213.920651][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1213.927076][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1213.957117][T13212] ceph: No mds server is up or the cluster is laggy [ 1213.982140][T13108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1214.985119][T13108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1215.387201][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1215.393888][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1215.421209][T13223] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1215.430105][T13223] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1215.440473][T13223] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1216.544873][T13233] sch_fq: defrate 4294967295 ignored. [ 1217.067901][T13108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.237891][T13108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.335119][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.342736][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.468855][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.476603][ T5082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.947260][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 1217.953799][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 1218.107788][T13249] ceph: No mds server is up or the cluster is laggy [ 1218.484626][T13260] netlink: 'syz.6.2519': attribute type 1 has an invalid length. [ 1218.605982][T13260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1218.823133][T13262] bond2: (slave veth0_to_bond): Releasing backup interface [ 1218.917750][T13262] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1221.668097][T13108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.822148][T13318] netlink: 'syz.6.2536': attribute type 1 has an invalid length. [ 1228.905522][T13318] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1229.241692][T13318] bond3: (slave veth0_to_bond): Releasing backup interface [ 1229.335946][T13318] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1230.033033][T13108] veth0_vlan: entered promiscuous mode [ 1230.114921][T13108] veth1_vlan: entered promiscuous mode [ 1230.292475][T13108] veth0_macvtap: entered promiscuous mode [ 1230.401036][T13108] veth1_macvtap: entered promiscuous mode [ 1230.559772][T13108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.687547][T13108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.798673][T13108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.809941][T13108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.819212][T13108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.828384][T13108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.231309][T13358] netlink: 'syz.6.2552': attribute type 1 has an invalid length. [ 1232.344740][T13358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1235.717591][T13397] netlink: 'syz.6.2569': attribute type 1 has an invalid length. [ 1239.784784][T13397] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1239.795484][T13420] netlink: 'syz.2.2579': attribute type 1 has an invalid length. [ 1239.900141][T13398] bond4: (slave veth0_to_bond): Releasing backup interface [ 1245.683490][T13436] overlayfs: failed to clone upperpath [ 1247.465374][T13460] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2592'. [ 1247.475002][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2592'. [ 1248.219370][T13465] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 1250.432462][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.440996][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.648910][ T4567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.657290][ T4567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.261352][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2605'. [ 1251.270949][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 1251.411547][ T5082] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.496748][T13499] netlink: 'syz.7.2606': attribute type 1 has an invalid length. [ 1251.658687][ T5082] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.909680][ T5082] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.110118][ T5082] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.534611][ T5082] bridge_slave_1: left allmulticast mode [ 1252.540537][ T5082] bridge_slave_1: left promiscuous mode [ 1252.547382][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.609472][ T5082] bridge_slave_0: left allmulticast mode [ 1252.615836][ T5082] bridge_slave_0: left promiscuous mode [ 1252.622538][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.785614][ T9476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1252.809938][ T9476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1252.819068][ T9476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1252.842516][ T9476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1252.882616][ T9476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1253.477073][ T5082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.518098][ T5082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.539925][ T5082] bond0 (unregistering): Released all slaves [ 1254.342161][ T5082] hsr_slave_0: left promiscuous mode [ 1254.378955][ T5082] hsr_slave_1: left promiscuous mode [ 1254.387353][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.400807][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.414461][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.422094][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.451220][ T5082] veth1_macvtap: left promiscuous mode [ 1254.457078][ T5082] veth0_macvtap: left promiscuous mode [ 1254.462918][ T5082] veth1_vlan: left promiscuous mode [ 1254.469209][ T5082] veth0_vlan: left promiscuous mode [ 1254.964552][ T9476] Bluetooth: hci4: command tx timeout [ 1255.222108][ T5082] team0 (unregistering): Port device team_slave_1 removed [ 1255.276263][ T5082] team0 (unregistering): Port device team_slave_0 removed [ 1255.689812][T13503] chnl_net:caif_netlink_parms(): no params data found [ 1257.025891][T13527] virtio-fs: tag not found [ 1257.049298][ T5798] Bluetooth: hci4: command tx timeout [ 1257.939269][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1257.965952][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1258.051408][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1258.067049][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1258.084967][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1259.125127][ T5798] Bluetooth: hci4: command tx timeout [ 1259.136725][T13538] team0: Device gtp0 is of different type [ 1259.161903][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.170082][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.178070][T13503] bridge_slave_0: entered allmulticast mode [ 1259.187776][T13503] bridge_slave_0: entered promiscuous mode [ 1259.371984][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.379630][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.387735][T13503] bridge_slave_1: entered allmulticast mode [ 1259.397532][T13503] bridge_slave_1: entered promiscuous mode [ 1260.440865][ T5798] Bluetooth: hci0: command tx timeout [ 1261.222687][ T5798] Bluetooth: hci4: command tx timeout [ 1261.585195][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.461732][ T5798] Bluetooth: hci0: command tx timeout [ 1263.519180][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.968980][T13503] team0: Port device team_slave_0 added [ 1264.086284][T13503] team0: Port device team_slave_1 added [ 1264.184729][T13547] netlink: 'syz.6.2621': attribute type 1 has an invalid length. [ 1264.416127][T13549] CIFS: VFS: Malformed UNC in devname [ 1264.979998][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.987399][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.014162][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.371091][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.378642][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.405198][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.550753][ T5798] Bluetooth: hci0: command tx timeout [ 1267.104809][T13525] chnl_net:caif_netlink_parms(): no params data found [ 1267.146128][T13503] hsr_slave_0: entered promiscuous mode [ 1267.156354][T13503] hsr_slave_1: entered promiscuous mode [ 1267.165460][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1267.173477][T13503] Cannot create hsr debugfs directory [ 1267.649077][ T5798] Bluetooth: hci0: command tx timeout [ 1271.742579][T13503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.918442][T13503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.169290][T13503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.192457][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.201490][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.214083][T13525] bridge_slave_0: entered allmulticast mode [ 1272.225302][T13525] bridge_slave_0: entered promiscuous mode [ 1272.257045][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.265179][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.272914][T13525] bridge_slave_1: entered allmulticast mode [ 1272.282602][T13525] bridge_slave_1: entered promiscuous mode [ 1272.586085][T13503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.662419][T13525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.740857][T13525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.973967][T13525] team0: Port device team_slave_0 added [ 1273.003833][T13525] team0: Port device team_slave_1 added [ 1273.480626][T13525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.488171][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.514874][T13525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.553869][T13525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.561072][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.587797][T13525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.632392][T13503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1273.699200][T13503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1273.794374][T13503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1273.855920][T13503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1274.115951][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.122683][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.220963][T13525] hsr_slave_0: entered promiscuous mode [ 1274.235508][T13525] hsr_slave_1: entered promiscuous mode [ 1274.245254][T13525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.253054][T13525] Cannot create hsr debugfs directory [ 1275.213675][T13503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.397983][T13503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.501021][T11696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.508735][T11696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.634220][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.641812][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.335574][T13525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1276.469496][T13525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1276.547677][T13525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1276.645445][T13525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1278.088059][T13525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.636155][T13525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.861062][T11696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.868843][T11696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.125670][T11696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.133386][T11696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.284540][T13503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.011085][T13503] veth0_vlan: entered promiscuous mode [ 1281.188237][T13503] veth1_vlan: entered promiscuous mode [ 1281.639050][T13503] veth0_macvtap: entered promiscuous mode [ 1281.744651][T13503] veth1_macvtap: entered promiscuous mode [ 1281.960552][T13503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.085973][T13503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.175359][T13503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.185119][T13503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.194264][T13503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.203438][T13503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.316844][T13525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.056472][ T30] audit: type=1326 audit(1750796985.496:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.082894][ T30] audit: type=1326 audit(1750796985.496:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.108054][ T30] audit: type=1326 audit(1750796985.496:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.131549][ T30] audit: type=1326 audit(1750796985.496:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.154392][ T30] audit: type=1326 audit(1750796985.506:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.180537][ T30] audit: type=1326 audit(1750796985.596:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.204815][ T30] audit: type=1326 audit(1750796985.596:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.227689][ T30] audit: type=1326 audit(1750796985.676:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.250466][ T30] audit: type=1326 audit(1750796985.676:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1283.276989][ T30] audit: type=1326 audit(1750796985.696:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2d818e929 code=0x7ffc0000 [ 1284.666334][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2670'. [ 1284.676098][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2670'. [ 1284.872678][T13525] veth0_vlan: entered promiscuous mode [ 1285.005597][T13525] veth1_vlan: entered promiscuous mode [ 1285.365957][T13525] veth0_macvtap: entered promiscuous mode [ 1285.441090][T13525] veth1_macvtap: entered promiscuous mode [ 1285.636393][T13525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.710213][T13525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.878187][T13525] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.888807][T13525] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.898123][T13525] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.907483][T13525] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.301749][T13710] pim6reg: entered allmulticast mode [ 1288.912276][T13740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1288.921900][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1289.564816][ T8385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.572939][ T8385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.687599][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.696031][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.310788][T13758] warning: `syz.1.2608' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1292.041947][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.050533][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.201009][T11696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.209234][T11696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.302141][T13777] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2693'. [ 1292.565396][T13779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2694'. [ 1292.575263][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 1292.702872][T13779] Bluetooth: MGMT ver 1.23 [ 1292.985467][ T3627] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.155056][ T3627] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.389255][ T3627] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.441882][T13783] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2696'. [ 1293.489641][T13783] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 1293.603471][T13783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1293.796309][ T3627] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.952389][T13784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1294.961409][T13784] bond6: (slave ipip0): The slave device specified does not support setting the MAC address [ 1294.978638][T13784] bond6: (slave ipip0): Error -95 calling set_mac_address [ 1296.163867][ T3627] bridge_slave_1: left allmulticast mode [ 1296.169867][ T3627] bridge_slave_1: left promiscuous mode [ 1296.184308][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.270569][ T3627] bridge_slave_0: left allmulticast mode [ 1296.287136][ T3627] bridge_slave_0: left promiscuous mode [ 1296.293993][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.040911][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.070393][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.088085][ T3627] bond0 (unregistering): Released all slaves [ 1297.441759][ T3627] hsr_slave_0: left promiscuous mode [ 1297.452351][ T3627] hsr_slave_1: left promiscuous mode [ 1297.461033][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1297.471590][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.486695][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.494629][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.534638][ T3627] veth1_macvtap: left promiscuous mode [ 1297.540421][ T3627] veth0_macvtap: left promiscuous mode [ 1297.546648][ T3627] veth1_vlan: left promiscuous mode [ 1297.552200][ T3627] veth0_vlan: left promiscuous mode [ 1298.371758][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 1298.412145][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 1300.796324][ T9476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1300.808545][ T9476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1300.830825][ T9476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1300.855386][ T9476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1300.875224][ T9476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1304.463828][ T9476] Bluetooth: hci0: command tx timeout [ 1305.344841][T13833] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2710'. [ 1305.517413][T13833] netlink: 'syz.7.2710': attribute type 1 has an invalid length. [ 1305.645229][T13833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1305.805602][T13836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1305.814979][T13836] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 1305.831377][T13836] bond3: (slave ipip0): Error -95 calling set_mac_address [ 1306.485212][ T9476] Bluetooth: hci0: command tx timeout [ 1307.394097][T13810] chnl_net:caif_netlink_parms(): no params data found [ 1308.342535][T13859] vlan2: entered allmulticast mode [ 1308.348135][T13859] bond0: entered allmulticast mode [ 1308.353806][T13859] bond_slave_0: entered allmulticast mode [ 1308.368030][T13859] bond_slave_1: entered allmulticast mode [ 1308.567556][ T9476] Bluetooth: hci0: command tx timeout [ 1311.097099][ T9476] Bluetooth: hci0: command tx timeout [ 1311.365648][T13872] ptrace attach of "./syz-executor exec"[7573] was attempted by ""[13872] [ 1312.955980][T13810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.971439][T13810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.979493][T13810] bridge_slave_0: entered allmulticast mode [ 1312.989154][T13810] bridge_slave_0: entered promiscuous mode [ 1313.235096][T13810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.242854][T13810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.250995][T13810] bridge_slave_1: entered allmulticast mode [ 1313.260764][T13810] bridge_slave_1: entered promiscuous mode [ 1313.646958][T13810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.722503][T13878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2724'. [ 1313.732188][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2724'. [ 1313.736683][T13810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.153519][T13810] team0: Port device team_slave_0 added [ 1314.209020][T13810] team0: Port device team_slave_1 added [ 1314.292453][T13884] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2727'. [ 1314.435380][T13887] netlink: 'syz.2.2727': attribute type 1 has an invalid length. [ 1314.567172][T13810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.574589][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.601507][T13810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.739502][T13887] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1314.832746][T13810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.841414][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.868177][T13810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.989029][T13888] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1314.998560][T13888] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 1315.022806][T13888] bond7: (slave ipip0): Error -95 calling set_mac_address [ 1315.391357][T13810] hsr_slave_0: entered promiscuous mode [ 1315.401776][T13810] hsr_slave_1: entered promiscuous mode [ 1315.410345][T13810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.418264][T13810] Cannot create hsr debugfs directory [ 1318.456318][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2738'. [ 1318.466066][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 1318.748535][T13810] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1319.746706][T13810] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1319.854821][T13810] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1320.012239][T13810] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1320.785833][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1320.816186][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1320.859914][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1320.888899][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1320.904485][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1321.400558][T13934] ===================================================== [ 1321.408737][T13934] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1321.416993][T13934] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1321.422180][T13934] sctp_inq_push+0x2a6/0x350 [ 1321.427301][T13934] sctp_backlog_rcv+0x3c7/0xda0 [ 1321.432434][T13934] sk_backlog_rcv+0x142/0x420 [ 1321.437655][T13934] __release_sock+0x1d3/0x330 [ 1321.442605][T13934] release_sock+0x6b/0x270 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1321.448925][T13934] sctp_wait_for_connect+0x458/0x820 [ 1321.455358][T13934] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1321.460946][T13934] sctp_sendmsg+0x3910/0x49f0 [ 1321.471348][T13934] inet_sendmsg+0x269/0x2a0 [ 1321.478121][T13934] __sock_sendmsg+0x278/0x3d0 [ 1321.483905][T13934] __sys_sendto+0x593/0x720 [ 1321.488711][T13934] __x64_sys_sendto+0x130/0x200 [ 1321.494112][T13934] x64_sys_call+0x3c0b/0x3db0 [ 1321.499052][T13934] do_syscall_64+0xd9/0x210 [ 1321.504451][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.510554][T13934] [ 1321.513000][T13934] Uninit was created at: [ 1321.517698][T13934] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1321.524592][T13934] kmalloc_reserve+0x22f/0x4b0 [ 1321.529592][T13934] __alloc_skb+0x347/0x7d0 [ 1321.535077][T13934] sctp_packet_transmit+0x18a1/0x46d0 [ 1321.540763][T13934] sctp_outq_flush+0x1c7d/0x67c0 [ 1321.546312][T13934] sctp_outq_uncork+0x9e/0xc0 [ 1321.551199][T13934] sctp_do_sm+0x8c8e/0x9720 [ 1321.556083][T13934] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 1321.561235][T13934] sctp_inq_push+0x2a6/0x350 [ 1321.571719][T13934] sctp_backlog_rcv+0x3c7/0xda0 [ 1321.578511][T13934] sk_backlog_rcv+0x142/0x420 [ 1321.583666][T13934] __release_sock+0x1d3/0x330 [ 1321.588552][T13934] release_sock+0x6b/0x270 [ 1321.593435][T13934] sctp_wait_for_connect+0x458/0x820 [ 1321.598977][T13934] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1321.604663][T13934] sctp_sendmsg+0x3910/0x49f0 [ 1321.609533][T13934] inet_sendmsg+0x269/0x2a0 [ 1321.614340][T13934] __sock_sendmsg+0x278/0x3d0 [ 1321.619238][T13934] __sys_sendto+0x593/0x720 [ 1321.624107][T13934] __x64_sys_sendto+0x130/0x200 [ 1321.629143][T13934] x64_sys_call+0x3c0b/0x3db0 [ 1321.634157][T13934] do_syscall_64+0xd9/0x210 [ 1321.638857][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.645084][T13934] [ 1321.647577][T13934] CPU: 1 UID: 0 PID: 13934 Comm: syz.7.2745 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 1321.660204][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1321.676760][T13934] ===================================================== [ 1321.686121][T13934] Disabling lock debugging due to kernel taint [ 1321.692419][T13934] Kernel panic - not syncing: kmsan.panic set ... [ 1321.699051][T13934] CPU: 1 UID: 0 PID: 13934 Comm: syz.7.2745 Tainted: G B 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 1321.713053][T13934] Tainted: [B]=BAD_PAGE [ 1321.717377][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1321.727716][T13934] Call Trace: [ 1321.731136][T13934] [ 1321.734203][T13934] __dump_stack+0x26/0x30 [ 1321.738753][T13934] dump_stack_lvl+0x53/0x270 [ 1321.743579][T13934] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1321.749668][T13934] dump_stack+0x1e/0x25 [ 1321.754044][T13934] panic+0x4bd/0xd50 [ 1321.758249][T13934] kmsan_report+0x31c/0x320 [ 1321.763017][T13934] ? __msan_warning+0x1b/0x30 [ 1321.767960][T13934] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1321.773346][T13934] ? sctp_inq_push+0x2a6/0x350 [ 1321.778376][T13934] ? sctp_backlog_rcv+0x3c7/0xda0 [ 1321.783669][T13934] ? sk_backlog_rcv+0x142/0x420 [ 1321.788770][T13934] ? __release_sock+0x1d3/0x330 [ 1321.793832][T13934] ? release_sock+0x6b/0x270 [ 1321.798735][T13934] ? sctp_wait_for_connect+0x458/0x820 [ 1321.804415][T13934] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1321.810172][T13934] ? sctp_sendmsg+0x3910/0x49f0 [ 1321.815226][T13934] ? inet_sendmsg+0x269/0x2a0 [ 1321.820093][T13934] ? __sock_sendmsg+0x278/0x3d0 [ 1321.825164][T13934] ? __sys_sendto+0x593/0x720 [ 1321.830100][T13934] ? __x64_sys_sendto+0x130/0x200 [ 1321.835329][T13934] ? x64_sys_call+0x3c0b/0x3db0 [ 1321.840421][T13934] ? do_syscall_64+0xd9/0x210 [ 1321.845326][T13934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.851641][T13934] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1321.857743][T13934] ? kmsan_get_metadata+0xfb/0x160 [ 1321.863132][T13934] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1321.869250][T13934] ? kmsan_get_metadata+0xfb/0x160 [ 1321.874624][T13934] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1321.880750][T13934] ? sctp_inq_pop+0x15ea/0x19e0 [ 1321.885875][T13934] ? kmsan_get_metadata+0xfb/0x160 [ 1321.891248][T13934] __msan_warning+0x1b/0x30 [ 1321.895968][T13934] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1321.901175][T13934] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 1321.907076][T13934] sctp_inq_push+0x2a6/0x350 [ 1321.911906][T13934] sctp_backlog_rcv+0x3c7/0xda0 [ 1321.916970][T13934] ? kmsan_get_metadata+0xfb/0x160 [ 1321.922376][T13934] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1321.928010][T13934] sk_backlog_rcv+0x142/0x420 [ 1321.932971][T13934] __release_sock+0x1d3/0x330 [ 1321.937911][T13934] release_sock+0x6b/0x270 [ 1321.942580][T13934] sctp_wait_for_connect+0x458/0x820 [ 1321.948144][T13934] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1321.954609][T13934] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1321.960210][T13934] ? kmsan_get_metadata+0xfb/0x160 [ 1321.965573][T13934] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1321.971679][T13934] sctp_sendmsg+0x3910/0x49f0 [ 1321.976598][T13934] ? kmsan_save_stack_with_flags+0x10/0x60 [ 1321.982774][T13934] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1321.988049][T13934] inet_sendmsg+0x269/0x2a0 [ 1321.992809][T13934] __sock_sendmsg+0x278/0x3d0 [ 1321.997754][T13934] __sys_sendto+0x593/0x720 [ 1322.002541][T13934] ? do_futex+0x3a1/0x480 [ 1322.007221][T13934] ? kmsan_get_metadata+0xfb/0x160 [ 1322.012742][T13934] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1322.018894][T13934] __x64_sys_sendto+0x130/0x200 [ 1322.023995][T13934] x64_sys_call+0x3c0b/0x3db0 [ 1322.028926][T13934] do_syscall_64+0xd9/0x210 [ 1322.033682][T13934] ? irqentry_exit+0x16/0x60 [ 1322.038542][T13934] ? clear_bhb_loop+0x40/0x90 [ 1322.043467][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.049639][T13934] RIP: 0033:0x7fe439d8e929 [ 1322.054236][T13934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.074167][T13934] RSP: 002b:00007fe43abc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1322.082799][T13934] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8e929 [ 1322.090945][T13934] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 1322.099062][T13934] RBP: 00007fe439e10b39 R08: 000020000005ffe4 R09: 000000000000001c [ 1322.107194][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.115299][T13934] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd291eeff8 [ 1322.123476][T13934] [ 1322.127007][T13934] Kernel Offset: disabled [ 1322.131425][T13934] Rebooting in 86400 seconds..