last executing test programs: 4m48.431084204s ago: executing program 1 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m47.580271606s ago: executing program 1 (id=644): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4m46.781835786s ago: executing program 1 (id=649): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) 4m46.2364933s ago: executing program 1 (id=651): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) 4m46.025407675s ago: executing program 1 (id=654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73ee8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000005d6dd3e373b1903cc31cf15c000000000000e3db2992f74a7fe5749657bd7348167b26"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 4m44.807456815s ago: executing program 1 (id=658): read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x66a71}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffe}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4m29.622453585s ago: executing program 32 (id=658): read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x66a71}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffe}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 3m1.873689883s ago: executing program 5 (id=958): setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000240)=0x22f, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) 3m1.566416134s ago: executing program 5 (id=960): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3m1.203495098s ago: executing program 5 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000004) 2m53.934009381s ago: executing program 5 (id=980): syz_mount_image$udf(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, &(0x7f00000010c0), 0x1, 0x1030, &(0x7f0000001100)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xb9}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x10d00, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x10000, 0x100000001) fallocate(r3, 0x8, 0x0, 0x2000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000a80)={'#! ', '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, 0x51) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) pread64(r4, &(0x7f0000000b80)=""/4089, 0xff9, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x3ff, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='tcp_probe\x00', r5}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) 2m52.516327659s ago: executing program 5 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2m50.217321433s ago: executing program 5 (id=988): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40401) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r3, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x80000, 0xf, 0x0, 0x0, 0x5, 0x2]}}) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2040400) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) 2m33.996666816s ago: executing program 33 (id=988): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40401) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r3, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x80000, 0xf, 0x0, 0x0, 0x5, 0x2]}}) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2040400) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) 2m33.904694289s ago: executing program 0 (id=1032): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r0) 2m31.914330184s ago: executing program 0 (id=1036): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f0000000180), r0, 0x0, 0x4, 0x0) 2m30.514103953s ago: executing program 0 (id=1037): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2, 0x0, 0x2}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m29.037177945s ago: executing program 0 (id=1040): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)}], 0x3) 2m28.737495553s ago: executing program 0 (id=1043): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8955, &(0x7f0000000080)={'bridge_slave_0\x00'}) 2m27.118501768s ago: executing program 0 (id=1047): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x82, 0x0, 0x5, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) eventfd(0x101) io_submit(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m11.004118575s ago: executing program 34 (id=1047): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x82, 0x0, 0x5, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) eventfd(0x101) io_submit(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m6.838675467s ago: executing program 6 (id=1077): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f00000003c0)=[{&(0x7f00000009c0)='l', 0x1}], 0x1, 0x10000080, 0x0, 0x3) 2m6.593405256s ago: executing program 6 (id=1078): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 2m6.21636414s ago: executing program 6 (id=1081): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000480)='./file2\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0x10, 0xd}}, [@TCA_RATE={0xfffffffffffffe2c, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m1.801929111s ago: executing program 6 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd209, 0xd, "10040600e277444000000b00002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m0.331730192s ago: executing program 6 (id=1092): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000001", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x2, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[], 0x0) 1m59.633529398s ago: executing program 6 (id=1093): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x1e, 0x5, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m43.881695599s ago: executing program 35 (id=1093): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x1e, 0x5, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 34.916577221s ago: executing program 2 (id=1293): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8000) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) 32.504804696s ago: executing program 2 (id=1300): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000022c0)={0x11, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) pwrite64(r2, &(0x7f0000000100)="4d0979a6edd455ba7421fca08b7a9ccd8a41bc66db02a241cce6608b1ea2ffe04af0666931049a0cfa38ac", 0x2b, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c091) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) mprotect(&(0x7f00002f7000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) 29.928324534s ago: executing program 2 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x100, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0x48000) 29.670175725s ago: executing program 2 (id=1307): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xf1, {0x77359400}, {0x77359400}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.507111099s ago: executing program 2 (id=1308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r1, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) 29.28013955s ago: executing program 2 (id=1310): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15.33942188s ago: executing program 4 (id=1336): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x28}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(0xffffffffffffffff) unshare(0x44040000) 14.17234977s ago: executing program 36 (id=1310): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.154691963s ago: executing program 4 (id=1343): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x82, 0x0, 0x5, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) eventfd(0x101) io_submit(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.611626526s ago: executing program 3 (id=1350): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x21, 0x1517, &(0x7f0000001240)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0x5, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) unshare(0x2040400) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x4000000e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x20, 0x10, 0x0, 0xff, 0x1, 0xfe, 0xa, 0x2b00}, [@RTA_PRIORITY={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001440)={0x11, 0x9, 0xf, 0x3fc00}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x10, 0x7800, 0xfff, 0x8, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x2, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0x3, "c6"}, @lsrr={0x83, 0x3, 0xdf}, @end, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r6, 0x25, 0x3, @void}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x4, 0x1, {0x2, 0x2d203ae5, 0x6, 0x1, 0x2, 0xd615, 0x7, 0x800001, 0xfffffffe, 0xc000, 0x0, 0x0, 0x0, 0x3fa, 0x1}}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f01) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 2.229879433s ago: executing program 3 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000c80)={0x400002, 0x11, 0x1b}, 0x18) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000cc0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000980)={[], [{@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@subj_type={'subj_type', 0x3d, 'jqfmt=vfsv0'}}, {@fowner_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x66, 0x31, 0x36, 0x34, 0x33, 0x32, 0x34], 0x2d, [0x30, 0x35, 0x34, 0x35], 0x2d, [0xfd, 0x63, 0x62, 0x62], 0x2d, [0x39, 0x1, 0x65, 0x65], 0x2d, [0x39, 0x36, 0x65, 0x62, 0x64, 0x38, 0x35, 0x35]}}}, {@hash}]}, 0x3, 0x58c, &(0x7f00000012c0)="$eJzs3d9vU1UcAPDv7TYGDGUkhKgPZgkPYpCObf7AxAR8NEok0XdstrKQdZSsHWGTBHiQF18MMTFGEuMf4LuPxH/Av4JEMcSQqQ++1Nz2FsrWbt0odNrPJ7n0nN5bzj0993v2vfe2aQADayL9JxfxckR8lUQcbFk3HNnKicZ2aw+vzaZLErXaJ38kkWTPNbdPssexrPJSRPz8RcTx3MZ2KyurC4VSqbiU1Seri5cnKyurJy4uFuaL88VL0zMzp96amX73nbd71tfXz/397cd3Pzj15dG1b36MQ7eTOBMHsnWt/XgKN1orEzGRvScjcWbdhlM9aGw3Sfq9A+zIUBbnI5HOAQdjKIt64P/vekTUgAGViH8YUM08ID3/3dPfVKQvHrzfOAFqXtt4fB1guHFtJPbWz432ryVPnBml57vjPWg/beOn3+7cTpfY4jrE9R60B9B042ZEnBwe3jj/Jdn8t3Mn6xePN7e+jQ7zX2006lMx0EN30/znjXb5T+5R/hNt8p+xNrG7E1vHf+5+D5rpKM3/3ov2/c+MD2W1F+o530hy4WKpeDIiXoyIYzEymtY3u59zau1erf2a38caj438L13S9pu5YLYf94dHn3zVXKFaeIouP+HBzYhXGvnvjXh4LYkN8//eeq67fvzT9+Ncl20cKd55tdO61vy3ff9b9T4Drv0Q8Vrb8X98RyvZ/P7kZP14mGweFRv9devIL53a317/ey8d//2b9388ab1fW9l+G9/v/afYad3W/W9//O9JPq2Xm+esVwvV6tJUxJ7ko43PTz9+bbPe3D7t/7Gjrf1vxn1u0+N/X0R81mX/bx2+1XHT3TD+c9sa/+0X7n34+Xed2u9u/N+sl45lz3Qz/3W7g0/z3gEAAAAAAMBuk4uIA5Hk8o/KuVw+P1T/fMfh2J8rlSvV4xfKy5fmov5d2fEYyTXvdB9s+TzEVPZ52GZ9el19JiIORcTXQ/vq9fxsuTTX784DAAAAAAAAAAAAAAAAAADALjHW9vv/jXW/DvV774Bnzk9+w+DaMv47/NJT8gz2BXi+/P2HwSX+YXCJfxhc4h8Gl/iHwSX+YXCJfxhc4h8AAAAAAAAAAAAAAAAAAAAAAAAAAAB66tzZs+lSW3t4bTatz11ZWV4oXzkxV6ws5BeXZ/Oz5aXL+flyeb5UzM+WF7f6/0rl8uWp6Vi+OlktVqqTlZXV84vl5UvV8xcXC/PF88WR59IrAAAAAAAAAAAAAAAAAAAA+G+prKwuFEql4pJCx8Lp2BW7seNCstUon84Ohh01Mdz/Dip0WRj9s/uN+zwxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECLfwMAAP//S4osFQ==") chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r5, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0xbfd3, 0x0) 1.141818642s ago: executing program 3 (id=1352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.005732948s ago: executing program 3 (id=1353): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 961.969258ms ago: executing program 3 (id=1354): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="2ed59377ea86f3068787f4b0f1b695855aeddd92dd49b1c968edf747b7b6efe0931f2281f919ca46604465a3e9edc7ad1b4ef22c561203ae374654bb3a2b982421f0ca451f2d34b3f40c3f3266fe527a1626ce0d9eb5ac2112a5d93af0c64e157f4ad0fe480c3afb61ae123eaa39c41eb4cdb57dd7d8cc048838cbd68162212a7a8ff35f101097293a847c07f1680ce13b5a91e7eb8580c366d3", @ANYBLOB="206415f61feb09d50b8d790440f145f18a168476dd776995b8eef53475bb5df9f4de66ea23f1eab5f7c419f86e56f663c4c340e52748be766e7fd717a00a2a72501c51acce068d5ba6c691e03380e9f06db61e5e3140b12c4bf8554b8cd9fdee55da4ae2fb6589d1904e35e531c69b14e6e0edf4443db778ba93c77d446a3466baf518531cd5386e3658a80382647c0b32294e31a771c36ef8e523c6e47cbf9d175f9791f1c6e3bd4219f27353260757bbbe3a00c409b6043737", @ANYRES32=r0, @ANYBLOB="80c454d6e830b618e51d4f414db586bf1f5d57c92e90f51c611ffc629c0779473ed4b0f102fd4e"]) 805.317816ms ago: executing program 4 (id=1355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) socket$tipc(0x1e, 0x5, 0x0) 277.318968ms ago: executing program 3 (id=1356): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x82, 0x0, 0x5, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) eventfd(0x101) io_submit(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 183.055193ms ago: executing program 4 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_io_uring_setup(0x21f1, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x200}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x50, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 80.924559ms ago: executing program 4 (id=1358): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 0s ago: executing program 4 (id=1359): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) syz_socket_connect_nvme_tcp() setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.906737][ T5888] usb 3-1: USB disconnect, device number 6 [ 266.927056][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.951140][ T10] usb 6-1: Product: syz [ 266.955340][ T10] usb 6-1: Manufacturer: syz [ 266.965261][ T10] usb 6-1: SerialNumber: syz [ 267.078640][ T7572] fuse: Unknown parameter 'fd00000000000000000000003' [ 267.329629][ T7574] loop1: detected capacity change from 0 to 512 [ 267.409430][ T7574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 267.483544][ T7574] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 267.491693][ T7574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 267.500351][ T7574] System zones: 0-1, 15-15, 18-18, 34-34 [ 267.508703][ T7574] EXT4-fs (loop1): orphan cleanup on readonly fs [ 267.516233][ T7574] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 267.526103][ T7574] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 267.541925][ T7574] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 267.565547][ T7574] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.495: bg 0: block 40: padding at end of block bitmap is not set [ 267.588220][ T7574] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 267.615927][ T7574] EXT4-fs (loop1): 1 truncate cleaned up [ 267.637066][ T7574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.861304][ T10] usb 6-1: cannot find UAC_HEADER [ 268.004583][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 268.043368][ T10] usb 6-1: USB disconnect, device number 7 [ 268.148273][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.273300][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.592920][ T7601] loop5: detected capacity change from 0 to 256 [ 269.632238][ T7601] exfat: Deprecated parameter 'utf8' [ 269.637616][ T7601] exfat: Deprecated parameter 'utf8' [ 269.641341][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 269.733189][ T7601] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 269.827137][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.860524][ T5888] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.917012][ T7603] loop1: detected capacity change from 0 to 256 [ 269.924058][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.189588][ T5888] usb 5-1: config 0 descriptor?? [ 271.020471][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 271.042769][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 272.702718][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 273.105357][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 273.493147][ T5888] usb 5-1: USB disconnect, device number 4 [ 274.332869][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.891248][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.931856][ T7628] fuse: Unknown parameter 'fd00000000000000000000003' [ 275.470510][ T7640] kAFS: No cell specified [ 276.111247][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 276.228119][ T7656] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 276.266105][ T7658] loop5: detected capacity change from 0 to 256 [ 276.301176][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 276.319414][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.378402][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.461127][ T7656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.494883][ T7659] bond1: (slave gretap1): making interface the new active one [ 276.636901][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.649850][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.671275][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.786315][ T7659] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 277.676457][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.983322][ T7659] syz.4.519 (7659) used greatest stack depth: 20120 bytes left [ 278.023132][ T5888] usb 2-1: GET_CAPABILITIES returned 0 [ 278.028689][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 278.198660][ T7673] smc: net device bond0 applied user defined pnetid SYZ2 [ 278.361796][ T7678] fuse: Unknown parameter 'fd00000000000000000000003' [ 279.101683][ T7687] loop5: detected capacity change from 0 to 1024 [ 279.145364][ T7687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.866029][ T5888] usb 2-1: USB disconnect, device number 7 [ 280.177773][ T7700] kAFS: No cell specified [ 281.318884][ T7721] loop1: detected capacity change from 0 to 1024 [ 281.495512][ T7721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.549487][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 281.675689][ T7724] loop5: detected capacity change from 0 to 2048 [ 281.891545][ T5842] loop5: p1 < > p4 [ 281.949964][ T5842] loop5: p4 size 8388608 extends beyond EOD, truncated [ 282.553604][ T7734] loop1: detected capacity change from 0 to 512 [ 282.590909][ T5192] loop5: p1 < > p4 [ 282.642845][ T5192] loop5: p4 size 8388608 extends beyond EOD, truncated [ 282.700696][ T7734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.778291][ T7734] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.811710][ T5842] udevd[5842]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 282.866848][ T30] audit: type=1800 audit(1747254014.519:36): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.539" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 282.902663][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 283.072890][ T7742] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 283.295333][ T7747] fuse: Bad value for 'fd' [ 283.890587][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.934303][ T7742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.246549][ T5842] udevd[5842]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 284.306044][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 284.327216][ T7746] vlan2: entered allmulticast mode [ 284.367813][ T7746] bond1: entered allmulticast mode [ 284.615074][ T7752] kAFS: No cell specified [ 284.653108][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 285.695640][ T7775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.751464][ T7774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.548928][ T7795] fuse: Bad value for 'fd' [ 289.922457][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 290.004397][ T7815] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 290.038627][ T7815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.242557][ T7815] vlan2: entered allmulticast mode [ 290.254429][ T7815] bond2: entered allmulticast mode [ 290.354159][ T7823] kAFS: No cell specified [ 290.902787][ T7828] ip6gre1: entered allmulticast mode [ 292.204225][ T7834] pim6reg1: entered promiscuous mode [ 292.240503][ T7834] pim6reg1: entered allmulticast mode [ 292.455860][ T7838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.568220][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.759528][ T7846] 9pnet_fd: Insufficient options for proto=fd [ 293.714679][ T5847] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 293.887095][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 294.181603][ T5847] usb 6-1: Using ep0 maxpacket: 16 [ 294.191614][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 294.196037][ T5847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.391432][ T5847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.392489][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.414640][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.430211][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.432289][ T5847] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.446563][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.517473][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.518081][ T5888] usb 2-1: config 0 descriptor?? [ 294.563803][ T5847] usb 6-1: Product: syz [ 294.564379][ T5888] hub 2-1:0.0: USB hub found [ 294.567979][ T5847] usb 6-1: Manufacturer: syz [ 294.568000][ T5847] usb 6-1: SerialNumber: syz [ 294.765722][ T5888] hub 2-1:0.0: 1 port detected [ 296.082543][ T5847] usb 6-1: cannot find UAC_HEADER [ 296.464655][ T5888] hub 2-1:0.0: activate --> -90 [ 296.509404][ T5847] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 296.627128][ T5847] usb 6-1: USB disconnect, device number 8 [ 296.656987][ T5888] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 297.214360][ T24] usb 2-1: USB disconnect, device number 8 [ 297.625895][ T7849] udevd[7849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.924733][ T7918] loop1: detected capacity change from 0 to 1024 [ 299.027142][ T7918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.825142][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.593'. [ 300.218247][ T7928] loop5: detected capacity change from 0 to 2048 [ 300.503843][ T7928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.628435][ T7928] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 300.706600][ T7939] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 300.813582][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.847343][ T7939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.973123][ T7941] bond2: (slave geneve2): making interface the new active one [ 301.048813][ T7941] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 301.146208][ T7939] vlan2: entered allmulticast mode [ 301.171818][ T7939] bond2: entered allmulticast mode [ 301.176978][ T7939] geneve2: entered allmulticast mode [ 301.201632][ T7939] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 303.788603][ T7969] fuse: Unknown parameter '0x0000000000000003' [ 304.154234][ T7976] loop1: detected capacity change from 0 to 512 [ 305.633812][ T7976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 305.675459][ T7976] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 305.683603][ T7976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 305.691758][ T7976] System zones: 0-1, 15-15, 18-18, 34-34 [ 305.699633][ T7976] EXT4-fs (loop1): orphan cleanup on readonly fs [ 305.706200][ T7976] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 305.715735][ T7976] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 305.731835][ T7976] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 305.757305][ T7976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.608: bg 0: block 40: padding at end of block bitmap is not set [ 305.955670][ T7976] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 305.966317][ T7976] EXT4-fs (loop1): 1 truncate cleaned up [ 305.973929][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.388714][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.903541][ T7992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.177773][ T7999] loop1: detected capacity change from 0 to 512 [ 308.564916][ T7999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 308.604227][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.614768][ T7999] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 308.622746][ T7999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 308.630907][ T7999] System zones: 0-1, 15-15, 18-18, 34-34 [ 308.637015][ T7999] EXT4-fs (loop1): orphan cleanup on readonly fs [ 308.643558][ T7999] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 308.653920][ T7999] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 308.668594][ T7999] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 308.676530][ T7999] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.614: bg 0: block 40: padding at end of block bitmap is not set [ 308.704877][ T7999] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 308.723805][ T7999] EXT4-fs (loop1): 1 truncate cleaned up [ 308.731688][ T7999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.122199][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.561193][ T5847] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 310.413043][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 310.433981][ T5847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.481254][ T5847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.510795][ T5847] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.520721][ T8024] loop1: detected capacity change from 0 to 2048 [ 310.530487][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.565544][ T5847] usb 6-1: config 0 descriptor?? [ 310.587123][ T7849] loop1: p1 < > p4 [ 310.596561][ T5847] hub 6-1:0.0: USB hub found [ 310.611658][ T7849] loop1: p4 size 8388608 extends beyond EOD, truncated [ 310.630165][ T8024] loop1: p1 < > p4 [ 310.674056][ T8024] loop1: p4 size 8388608 extends beyond EOD, truncated [ 310.775702][ T5847] hub 6-1:0.0: 1 port detected [ 311.857727][ T5847] hub 6-1:0.0: activate --> -90 [ 311.884907][ T5847] hub 6-1:0.0: hub_ext_port_status failed (err = 0) [ 312.020146][ T7857] udevd[7857]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 312.042642][ T8031] ip6gre1: entered allmulticast mode [ 312.048383][ T7849] udevd[7849]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 312.304346][ T5847] usb 6-1: USB disconnect, device number 9 [ 312.582947][ T7849] udevd[7849]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 312.613259][ T7886] udevd[7886]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 312.712751][ T7849] udevd[7849]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 312.718699][ T7857] udevd[7857]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 312.977235][ T8054] loop1: detected capacity change from 0 to 512 [ 313.052901][ T8054] EXT4-fs (loop1): Test dummy encryption mode enabled [ 313.078710][ T8054] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.164500][ T8054] EXT4-fs (loop1): 1 truncate cleaned up [ 313.191850][ T8054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.641978][ T8073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.754357][ T8072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.280902][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 315.032162][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.061132][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 315.095297][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.134988][ T24] usb 3-1: config 0 descriptor?? [ 315.716765][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 315.731205][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 315.786938][ T24] usb 3-1: USB disconnect, device number 7 [ 316.215535][ T8103] netlink: 'syz.5.650': attribute type 4 has an invalid length. [ 316.477855][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.485630][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.562304][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 316.942421][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 316.949943][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.966427][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 317.021220][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.795735][ T24] usb 3-1: config 0 descriptor?? [ 317.816595][ T24] usb 3-1: can't set config #0, error -71 [ 317.875783][ T24] usb 3-1: USB disconnect, device number 8 [ 318.243260][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.898046][ T8131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.687099][ T8153] ip6gre1: entered allmulticast mode [ 322.571566][ T8163] input: syz0 as /devices/virtual/input/input11 [ 326.472170][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.781607][ T8185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.219957][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.458600][ T8256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 335.770556][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.045600][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.983383][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.011296][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.021184][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.043974][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.061707][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.206277][ T5839] syz_tun (unregistering): left allmulticast mode [ 338.378963][ T30] audit: type=1326 audit(1747254069.799:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.613227][ T30] audit: type=1326 audit(1747254069.799:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.648198][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.715824][ T30] audit: type=1326 audit(1747254069.799:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.751846][ T30] audit: type=1326 audit(1747254069.799:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.775318][ T30] audit: type=1326 audit(1747254069.809:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.821337][ T30] audit: type=1326 audit(1747254069.809:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.877250][ T30] audit: type=1326 audit(1747254069.809:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.935068][ T30] audit: type=1326 audit(1747254069.809:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 338.960285][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.978369][ T30] audit: type=1326 audit(1747254069.809:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 339.018360][ T30] audit: type=1326 audit(1747254069.949:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 339.111235][ T5830] Bluetooth: hci6: command tx timeout [ 340.225221][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.708834][ T8326] veth0_vlan: entered allmulticast mode [ 341.244340][ T5830] Bluetooth: hci6: command tx timeout [ 341.772981][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.197771][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 343.271287][ T5830] Bluetooth: hci6: command tx timeout [ 343.917804][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.946592][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.959657][ T8265] bridge_slave_0: entered allmulticast mode [ 343.968890][ T8265] bridge_slave_0: entered promiscuous mode [ 344.143393][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.161460][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.594094][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 344.594138][ T30] audit: type=1326 audit(1747254075.999:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 344.837040][ T8265] bridge_slave_1: entered allmulticast mode [ 344.845224][ T8265] bridge_slave_1: entered promiscuous mode [ 344.874683][ T30] audit: type=1326 audit(1747254075.999:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 344.915667][ T30] audit: type=1326 audit(1747254076.009:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 344.968199][ T30] audit: type=1326 audit(1747254076.009:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 345.010518][ T30] audit: type=1326 audit(1747254076.009:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 345.042235][ T30] audit: type=1326 audit(1747254076.009:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 345.081367][ T36] bridge_slave_1: left allmulticast mode [ 345.088843][ T36] bridge_slave_1: left promiscuous mode [ 345.126272][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.139632][ T30] audit: type=1326 audit(1747254076.009:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 345.199567][ T30] audit: type=1326 audit(1747254076.009:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 345.223402][ T30] audit: type=1326 audit(1747254076.019:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 345.223460][ T30] audit: type=1326 audit(1747254076.159:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 345.312463][ T36] bridge_slave_0: left allmulticast mode [ 345.318210][ T36] bridge_slave_0: left promiscuous mode [ 345.330114][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.351806][ T5830] Bluetooth: hci6: command tx timeout [ 347.170325][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.205430][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.232533][ T36] bond0 (unregistering): Released all slaves [ 347.380893][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.977463][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.189989][ T8265] team0: Port device team_slave_0 added [ 349.620637][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 349.620681][ T30] audit: type=1326 audit(1747254081.069:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 349.898311][ T30] audit: type=1326 audit(1747254081.069:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 349.985589][ T30] audit: type=1326 audit(1747254081.079:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.045111][ T8439] netlink: 'syz.5.745': attribute type 1 has an invalid length. [ 350.110006][ T30] audit: type=1326 audit(1747254081.079:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.161961][ T30] audit: type=1326 audit(1747254081.079:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.187572][ T30] audit: type=1326 audit(1747254081.079:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.223962][ T8265] team0: Port device team_slave_1 added [ 350.293895][ T30] audit: type=1326 audit(1747254081.079:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.357685][ T30] audit: type=1326 audit(1747254081.079:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.392896][ T30] audit: type=1326 audit(1747254081.079:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.436550][ T30] audit: type=1326 audit(1747254081.219:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 350.456176][ T8439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.492522][ T8443] bond2: (slave geneve2): making interface the new active one [ 350.507441][ T8443] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 350.703860][ T8447] veth3: entered promiscuous mode [ 350.724362][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.420719][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.466148][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.516454][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.536607][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.652771][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.085969][ T36] hsr_slave_0: left promiscuous mode [ 352.122846][ T36] hsr_slave_1: left promiscuous mode [ 352.159671][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.196852][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.253380][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.291517][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.423783][ T8485] netlink: 'syz.0.759': attribute type 6 has an invalid length. [ 352.494409][ T36] veth1_macvtap: left promiscuous mode [ 352.513596][ T36] veth0_macvtap: left promiscuous mode [ 352.530373][ T36] veth1_vlan: left promiscuous mode [ 356.496918][ T8524] loop5: detected capacity change from 0 to 512 [ 356.538307][ T8524] EXT4-fs: Ignoring removed nobh option [ 357.463505][ T8524] EXT4-fs (loop5): orphan cleanup on readonly fs [ 357.478930][ T8524] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.768: invalid indirect mapped block 256 (level 2) [ 357.534188][ T8524] EXT4-fs (loop5): 2 truncates cleaned up [ 357.565093][ T8524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.875097][ T36] team0 (unregistering): Port device team_slave_1 removed [ 357.924336][ T36] team0 (unregistering): Port device team_slave_0 removed [ 358.718667][ T8265] hsr_slave_0: entered promiscuous mode [ 358.784288][ T8265] hsr_slave_1: entered promiscuous mode [ 358.811955][ T8265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.819599][ T8265] Cannot create hsr debugfs directory [ 358.938368][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 358.970799][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 359.002345][ T8546] netlink: 'syz.2.770': attribute type 4 has an invalid length. [ 359.610909][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.154447][ T8265] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.889831][ T8265] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.013116][ T8265] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.106182][ T8582] geneve2: entered promiscuous mode [ 361.141262][ T8582] geneve2: entered allmulticast mode [ 361.757397][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 361.757442][ T30] audit: type=1326 audit(1747254093.249:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.091298][ T30] audit: type=1326 audit(1747254093.249:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.140694][ T8265] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.158506][ T30] audit: type=1326 audit(1747254093.249:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.330236][ T30] audit: type=1326 audit(1747254093.249:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.356658][ T30] audit: type=1326 audit(1747254093.249:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.457275][ T30] audit: type=1326 audit(1747254093.249:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.633361][ T30] audit: type=1326 audit(1747254093.249:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.937984][ T30] audit: type=1326 audit(1747254093.249:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.960701][ T30] audit: type=1326 audit(1747254093.259:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 362.984365][ T30] audit: type=1326 audit(1747254093.389:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 364.665199][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.779384][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.797549][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.804773][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.823903][ T8633] netlink: 'syz.3.795': attribute type 13 has an invalid length. [ 366.294261][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.301972][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.529517][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 367.529542][ T30] audit: type=1326 audit(1747254098.629:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.127907][ T8633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.158734][ T8633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.193608][ T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 368.244255][ T30] audit: type=1326 audit(1747254098.629:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.266508][ T30] audit: type=1326 audit(1747254098.629:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.288858][ T30] audit: type=1326 audit(1747254098.629:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.313465][ T30] audit: type=1326 audit(1747254098.629:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.336123][ T30] audit: type=1326 audit(1747254098.629:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.363511][ T30] audit: type=1326 audit(1747254098.629:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.387773][ T30] audit: type=1326 audit(1747254098.629:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.416063][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 368.438186][ T52] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 368.450009][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 368.462174][ T30] audit: type=1326 audit(1747254098.629:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.486334][ T30] audit: type=1326 audit(1747254098.659:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385d18e969 code=0x7ffc0000 [ 368.513107][ T52] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 368.522427][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.530487][ T52] usb 5-1: Product: syz [ 368.537553][ T52] usb 5-1: Manufacturer: syz [ 368.551795][ T52] usb 5-1: SerialNumber: syz [ 368.566066][ T52] usb 5-1: config 0 descriptor?? [ 368.582368][ T52] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 368.669785][ T8633] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.679111][ T8633] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.688738][ T8633] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.698545][ T8633] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.010035][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.018503][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.300678][ T5833] usb 5-1: USB disconnect, device number 5 [ 376.592402][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 376.592427][ T30] audit: type=1326 audit(1747254107.349:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 376.978202][ T30] audit: type=1326 audit(1747254107.349:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.036620][ T30] audit: type=1326 audit(1747254107.349:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.065979][ T30] audit: type=1326 audit(1747254107.349:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.156966][ T30] audit: type=1326 audit(1747254107.349:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.261118][ T30] audit: type=1326 audit(1747254107.359:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.318262][ T30] audit: type=1326 audit(1747254107.359:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.374457][ T30] audit: type=1326 audit(1747254107.359:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.397301][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.465014][ T30] audit: type=1326 audit(1747254107.359:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.569625][ T30] audit: type=1326 audit(1747254107.499:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d658e969 code=0x7ffc0000 [ 377.621118][ T5888] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 378.426559][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.432976][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.461109][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 378.481938][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 378.511081][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 378.642401][ T5888] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 378.695016][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.710566][ T5888] usb 6-1: Product: syz [ 378.729133][ T5888] usb 6-1: Manufacturer: syz [ 378.739249][ T5888] usb 6-1: SerialNumber: syz [ 380.001637][ T5888] usb 6-1: config 0 descriptor?? [ 380.061577][ T5888] streamzap 6-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 380.818677][ T8265] veth0_vlan: entered promiscuous mode [ 380.909857][ T8265] veth1_vlan: entered promiscuous mode [ 381.038608][ T8265] veth0_macvtap: entered promiscuous mode [ 381.549381][ T8265] veth1_macvtap: entered promiscuous mode [ 381.793883][ T52] usb 6-1: USB disconnect, device number 10 [ 381.832566][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.916452][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.951135][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.151553][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.166361][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.004394][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.020814][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.088192][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.206344][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.472185][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.588837][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.599357][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.610491][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.620402][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.630952][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.640865][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.651446][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.667769][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.386969][ T8833] loop5: detected capacity change from 0 to 1024 [ 384.459410][ T8265] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.846691][ T8265] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.859358][ T8833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.866734][ T8265] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.948839][ T8265] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.518738][ T8844] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 387.193003][ T8844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.337988][ T8854] bond3: (slave geneve2): making interface the new active one [ 387.372963][ T8854] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 387.932240][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.950523][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.834466][ T7618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.852837][ T7618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.905902][ T8888] netlink: 'syz.0.851': attribute type 4 has an invalid length. [ 394.776725][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 394.776745][ T30] audit: type=1326 audit(1747254126.389:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.211131][ T30] audit: type=1326 audit(1747254126.389:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.234801][ T30] audit: type=1326 audit(1747254126.389:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.257105][ T30] audit: type=1326 audit(1747254126.389:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.341351][ T30] audit: type=1326 audit(1747254126.389:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.426795][ T8941] geneve2: entered promiscuous mode [ 395.479390][ T8941] geneve2: entered allmulticast mode [ 395.487115][ T30] audit: type=1326 audit(1747254126.389:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.548154][ T30] audit: type=1326 audit(1747254126.389:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.716875][ T30] audit: type=1326 audit(1747254126.399:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.818455][ T30] audit: type=1326 audit(1747254126.399:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 395.876925][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 395.992899][ T30] audit: type=1326 audit(1747254126.429:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd438e969 code=0x7ffc0000 [ 396.286742][ T8965] geneve2: entered promiscuous mode [ 396.343430][ T8965] geneve2: entered allmulticast mode [ 397.041188][ T52] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 397.202137][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 397.337394][ T52] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.504196][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.741311][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.863529][ T52] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.901379][ T8991] squashfs: Unknown parameter '4÷}ì²Ô-ʼn¥y…£dR' [ 398.019459][ T52] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.133625][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.668975][ T52] usb 5-1: GET_CAPABILITIES returned 0 [ 398.691278][ T52] usbtmc 5-1:16.0: can't read capabilities [ 399.412314][ T9007] loop6: detected capacity change from 0 to 1024 [ 399.679462][ T9007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.209985][ T9010] loop5: detected capacity change from 0 to 1024 [ 400.274175][ T9010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.293027][ T9010] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 401.029822][ T9010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 401.081824][ T5888] usb 5-1: USB disconnect, device number 6 [ 401.235722][ T9010] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.887: lblock 2 mapped to illegal pblock 2 (length 1) [ 401.331422][ T9010] EXT4-fs (loop5): Remounting filesystem read-only [ 401.351294][ T9010] __quota_error: 4 callbacks suppressed [ 401.351313][ T9010] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 401.447479][ T9010] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 401.542627][ T9010] EXT4-fs (loop5): 1 orphan inode deleted [ 401.569048][ T9010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.788486][ T9042] squashfs: Unknown parameter '4÷}ì²Ô-ʼn¥y…£dR' [ 403.027080][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.786924][ T9054] loop6: detected capacity change from 0 to 2048 [ 403.878893][ T9054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.923111][ T9054] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 404.190251][ T8265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.486863][ T9085] loop6: detected capacity change from 0 to 256 [ 404.528018][ T9085] exfat: Deprecated parameter 'utf8' [ 404.541944][ T9085] exfat: Deprecated parameter 'utf8' [ 404.658346][ T9085] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 410.512064][ T9170] trusted_key: encrypted_key: key user:syz not found [ 412.102743][ T9173] loop6: detected capacity change from 0 to 512 [ 412.219265][ T9173] EXT4-fs (loop6): Test dummy encryption mode enabled [ 412.255704][ T9173] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 412.313838][ T9173] EXT4-fs (loop6): 1 truncate cleaned up [ 412.331742][ T9173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.891943][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 420.411084][ T52] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 420.581188][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 420.594093][ T52] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.658870][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.723195][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.780725][ T52] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.864963][ T9279] syzkaller0: entered promiscuous mode [ 420.870530][ T9279] syzkaller0: entered allmulticast mode [ 420.908192][ T52] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.961152][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.287974][ T52] usb 3-1: usb_control_msg returned -32 [ 421.338995][ T52] usbtmc 3-1:16.0: can't read capabilities [ 421.407469][ T52] usb 3-1: USB disconnect, device number 9 [ 426.301237][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 426.474087][ T5888] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 426.487034][ T5888] usb 3-1: config 0 has no interface number 0 [ 426.495299][ T5888] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 426.527940][ T5888] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 426.548963][ T5888] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 426.576976][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.586674][ T5888] usb 3-1: Product: syz [ 426.590933][ T5888] usb 3-1: Manufacturer: syz [ 426.601547][ T5888] usb 3-1: SerialNumber: syz [ 426.623682][ T5888] usb 3-1: config 0 descriptor?? [ 426.687774][ T5888] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input12 [ 427.329077][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023dc8800: rx timeout, send abort [ 427.698207][ T9224] Set syz1 is full, maxelem 65536 reached [ 427.820120][ T9293] geneve2: entered promiscuous mode [ 427.829638][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023dc9000: rx timeout, send abort [ 427.838599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023dc8800: abort rx timeout. Force session deactivation [ 427.839354][ T9293] geneve2: entered allmulticast mode [ 428.337933][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023dc9000: abort rx timeout. Force session deactivation [ 428.983959][ T9359] input: syz0 as /devices/virtual/input/input13 [ 429.449507][ T9369] loop5: detected capacity change from 0 to 4096 [ 429.582023][ T9369] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 429.641492][ T9369] UDF-fs: Scanning with blocksize 512 failed [ 429.741049][ T9369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.243461][ T9381] geneve2: entered promiscuous mode [ 431.309296][ T9381] geneve2: entered allmulticast mode [ 433.018818][ T9401] infiniband syz0: set active [ 433.023851][ T9401] infiniband syz0: added bond0 [ 433.069166][ T9401] RDS/IB: syz0: added [ 433.074560][ T9401] smc: adding ib device syz0 with port count 1 [ 433.081267][ T9401] smc: ib device syz0 port 1 has pnetid [ 434.547842][ T9417] syzkaller0: entered promiscuous mode [ 434.641430][ T9417] syzkaller0: entered allmulticast mode [ 436.858358][ T5874] usb 3-1: USB disconnect, device number 10 [ 437.403270][ T9456] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1002'. [ 437.604406][ T9470] netlink: 'syz.3.1003': attribute type 4 has an invalid length. [ 437.932453][ T9480] netlink: 'syz.0.1008': attribute type 13 has an invalid length. [ 439.371199][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.378943][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.747513][ T9484] mmap: syz.2.1009 (9484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 441.553929][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.561938][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.195200][ T9480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.255416][ T9480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.843534][ T9480] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.905889][ T9480] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.955588][ T9480] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.001880][ T9480] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.150360][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 443.471993][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 443.822756][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 443.870782][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 443.891960][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 443.922169][ T9] usb 3-1: config 1 has no interface number 0 [ 443.944982][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.977851][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 444.031203][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 444.040298][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.085757][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 444.317601][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 445.672528][ T5945] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 445.799390][ T5847] usb 3-1: USB disconnect, device number 11 [ 445.838095][ T5847] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 453.886334][ T9605] netlink: 'syz.2.1041': attribute type 4 has an invalid length. [ 453.921190][ T5886] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 453.940519][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.949964][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.960438][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.976864][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.984627][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.176929][ T5886] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 454.365287][ T5886] usb 5-1: config 0 has no interface number 0 [ 454.372307][ T5886] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 454.386056][ T5886] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 454.401466][ T5886] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 454.421173][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.454478][ T5886] usb 5-1: Product: syz [ 454.458857][ T5886] usb 5-1: Manufacturer: syz [ 455.291069][ T5886] usb 5-1: SerialNumber: syz [ 455.317062][ T5886] usb 5-1: config 0 descriptor?? [ 455.366931][ T5886] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input14 [ 456.741117][ T5830] Bluetooth: hci3: command tx timeout [ 457.835980][ T9632] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 459.246462][ T5830] Bluetooth: hci3: command tx timeout [ 460.517010][ T972] usb 5-1: USB disconnect, device number 7 [ 461.273104][ T5837] Bluetooth: hci3: command tx timeout [ 462.251659][ T5837] Bluetooth: hci6: command 0x0406 tx timeout [ 463.351110][ T5830] Bluetooth: hci3: command tx timeout [ 464.104446][ T9606] chnl_net:caif_netlink_parms(): no params data found [ 464.654097][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.678012][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.701228][ T9606] bridge_slave_0: entered allmulticast mode [ 464.723406][ T9606] bridge_slave_0: entered promiscuous mode [ 464.733992][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.741488][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.748976][ T9606] bridge_slave_1: entered allmulticast mode [ 464.759369][ T9606] bridge_slave_1: entered promiscuous mode [ 465.115567][ T9606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.145735][ T9606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.227828][ T9606] team0: Port device team_slave_0 added [ 466.267140][ T9606] team0: Port device team_slave_1 added [ 467.504670][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1063'. [ 467.687795][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.733766][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.809028][ T9606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.561632][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.568635][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.636735][ T9606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.741613][ T9750] input: syz0 as /devices/virtual/input/input15 [ 470.442625][ T9401] syz_tun (unregistering): left allmulticast mode [ 470.602795][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1069'. [ 471.949563][ T9606] hsr_slave_0: entered promiscuous mode [ 472.903518][ T9606] hsr_slave_1: entered promiscuous mode [ 472.910012][ T9606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.918353][ T9606] Cannot create hsr debugfs directory [ 473.325478][ T1304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.700425][ T9790] netlink: 'syz.6.1076': attribute type 1 has an invalid length. [ 474.833492][ T9793] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1076'. [ 474.949090][ T1304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.413376][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.441498][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.451465][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.459902][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.469141][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.488351][ T9793] batadv1: entered promiscuous mode [ 475.529357][ T9793] batadv1: entered allmulticast mode [ 475.760866][ T1304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.952645][ T1304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.651926][ T9821] netlink: 'syz.6.1081': attribute type 13 has an invalid length. [ 476.838574][ T9820] input: syz0 as /devices/virtual/input/input16 [ 477.041713][ T9825] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1082'. [ 477.518132][ T5830] Bluetooth: hci1: command tx timeout [ 478.225900][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.234471][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.452194][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.485482][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.595038][ T5830] Bluetooth: hci1: command tx timeout [ 480.608746][ T9821] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.626701][ T9821] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.650199][ T9821] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.659686][ T9821] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.754125][ T5830] Bluetooth: hci1: command tx timeout [ 482.577472][ T1304] bridge_slave_1: left allmulticast mode [ 482.600532][ T1304] bridge_slave_1: left promiscuous mode [ 482.619448][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.669635][ T1304] bridge_slave_0: left allmulticast mode [ 482.702542][ T1304] bridge_slave_0: left promiscuous mode [ 482.721259][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.395509][ T1304] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 483.449474][ T9872] rdma_rxe: rxe_newlink: failed to add bond0 [ 483.554347][ T1304] bond2 (unregistering): (slave geneve2): Releasing active interface [ 483.596422][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 483.836505][ T5830] Bluetooth: hci1: command tx timeout [ 483.928051][ T5907] smc: removing ib device syz0 [ 483.934384][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.953754][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.964229][ T1304] bond0 (unregistering): Released all slaves [ 484.059337][ T1304] bond1 (unregistering): Released all slaves [ 484.148491][ T1304] bond2 (unregistering): Released all slaves [ 484.182789][ T9606] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 484.230415][ T9606] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 484.396341][ T9606] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 484.650785][ T9606] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 485.420833][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 485.818584][ T9900] netlink: 'syz.4.1102': attribute type 13 has an invalid length. [ 486.527140][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.534791][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.058079][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.088693][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.606535][ T9920] netlink: 'syz.3.1105': attribute type 4 has an invalid length. [ 488.834774][ T9900] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.872897][ T9900] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.901228][ T9900] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.910163][ T9900] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.476405][ T9798] chnl_net:caif_netlink_parms(): no params data found [ 492.506366][ T9606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.992172][ T9961] netlink: 'syz.3.1113': attribute type 4 has an invalid length. [ 493.793862][ T9606] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.035644][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.043019][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.288573][ T1304] hsr_slave_0: left promiscuous mode [ 495.313015][ T1304] hsr_slave_1: left promiscuous mode [ 495.327528][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.342592][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.358430][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.376471][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.485991][ T1304] veth1_macvtap: left promiscuous mode [ 495.499163][ T1304] veth0_macvtap: left promiscuous mode [ 495.505940][ T1304] veth1_vlan: left promiscuous mode [ 495.512610][ T1304] veth0_vlan: left promiscuous mode [ 497.946995][T10030] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 497.947318][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 497.995549][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 498.510778][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.517999][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.527237][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.537446][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.552469][ T9798] bridge_slave_0: entered allmulticast mode [ 498.569219][ T9798] bridge_slave_0: entered promiscuous mode [ 498.579437][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.587248][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.595601][ T9798] bridge_slave_1: entered allmulticast mode [ 498.603987][ T9798] bridge_slave_1: entered promiscuous mode [ 498.650755][T10030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.818747][ T9798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.895616][ T9798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.146959][ T9798] team0: Port device team_slave_0 added [ 499.189804][ T9798] team0: Port device team_slave_1 added [ 499.392687][ T9864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.705763][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.714512][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.726573][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.742059][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.751774][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.517557][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.561154][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.667504][ T9798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.773364][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'. [ 500.801580][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.808692][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.842081][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.831384][ T5830] Bluetooth: hci2: command tx timeout [ 502.006472][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.113749][ T9798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.353193][T10062] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 502.359328][T10062] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 502.366068][T10062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 502.372111][T10062] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 502.392609][T10062] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 502.453633][T10062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.459618][T10062] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 502.503321][T10062] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 502.511860][T10062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 502.517812][T10062] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 502.547463][T10062] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 502.603515][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 502.701420][T10078] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 502.775811][ T9798] hsr_slave_0: entered promiscuous mode [ 502.798682][ T9798] hsr_slave_1: entered promiscuous mode [ 502.820854][ T9798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.846341][ T9798] Cannot create hsr debugfs directory [ 503.217534][T10078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.707682][T10079] bond1: (slave geneve2): making interface the new active one [ 503.732011][T10079] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 504.391525][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 504.398526][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 504.404957][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 504.471303][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 504.581195][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 504.645468][ T9606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.471284][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 506.551249][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 506.635257][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 507.564086][T10050] chnl_net:caif_netlink_parms(): no params data found [ 508.006744][ T9798] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 508.132467][ T9798] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 508.307460][T10152] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 508.316489][ T9798] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 508.551359][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 508.577087][T10152] 8021q: adding VLAN 0 to HW filter on device bond4 [ 508.626738][ T9798] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 508.634153][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 508.711106][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 509.203442][T10168] veth1_to_bond: entered allmulticast mode [ 509.324253][T10170] veth1_to_bond: entered promiscuous mode [ 509.331591][T10170] veth1_to_bond: left promiscuous mode [ 509.405133][T10170] veth1_to_bond: left allmulticast mode [ 509.443038][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.502369][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.510100][T10050] bridge_slave_0: entered allmulticast mode [ 509.551232][T10050] bridge_slave_0: entered promiscuous mode [ 509.572627][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.642119][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.649439][T10050] bridge_slave_1: entered allmulticast mode [ 509.702830][T10050] bridge_slave_1: entered promiscuous mode [ 509.948902][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.961612][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.970106][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 510.000807][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.014246][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.811423][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 510.888970][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.930921][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.062091][T10193] fuse: Bad value for 'fd' [ 511.315315][T10199] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 511.551582][T10199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.584238][T10050] team0: Port device team_slave_0 added [ 511.619640][T10050] team0: Port device team_slave_1 added [ 511.840326][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 512.071170][ T5837] Bluetooth: hci3: command tx timeout [ 512.285995][T10214] bridge_slave_1 (unregistering): left allmulticast mode [ 512.321129][T10214] bridge_slave_1 (unregistering): left promiscuous mode [ 512.328426][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.562236][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.587895][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.657786][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.710557][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.729284][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.818858][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.873328][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 513.795992][ T1304] bridge_slave_1: left allmulticast mode [ 513.819311][ T1304] bridge_slave_1: left promiscuous mode [ 513.837275][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.869168][ T1304] bridge_slave_0: left allmulticast mode [ 513.884672][ T1304] bridge_slave_0: left promiscuous mode [ 513.890887][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.967432][ T1304] bridge_slave_1: left allmulticast mode [ 513.999263][ T1304] bridge_slave_1: left promiscuous mode [ 514.016653][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.059081][ T1304] bridge_slave_0: left allmulticast mode [ 514.089097][ T1304] bridge_slave_0: left promiscuous mode [ 514.112347][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.151282][ T5837] Bluetooth: hci3: command tx timeout [ 514.784333][T10246] fuse: Bad value for 'fd' [ 516.089730][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.100145][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.112922][ T1304] bond0 (unregistering): Released all slaves [ 516.231432][ T5837] Bluetooth: hci3: command tx timeout [ 516.284358][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.297734][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.307909][ T1304] bond0 (unregistering): Released all slaves [ 516.348511][T10050] hsr_slave_0: entered promiscuous mode [ 516.368788][T10050] hsr_slave_1: entered promiscuous mode [ 516.382481][T10050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.404957][T10050] Cannot create hsr debugfs directory [ 516.481399][T10253] IPVS: Error connecting to the multicast addr [ 516.543142][ T9798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.311122][ T5837] Bluetooth: hci3: command tx timeout [ 518.774026][ T9798] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.470599][T10180] chnl_net:caif_netlink_parms(): no params data found [ 519.508900][T10284] fuse: Invalid rootmode [ 519.527310][T10286] netlink: 'syz.3.1181': attribute type 13 has an invalid length. [ 519.564853][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.572095][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.701945][ T30] audit: type=1326 audit(1747254253.309:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 521.792310][ T30] audit: type=1326 audit(1747254253.309:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 521.876746][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.884129][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.313345][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.390560][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.424998][T10180] bridge_slave_0: entered allmulticast mode [ 523.471432][T10180] bridge_slave_0: entered promiscuous mode [ 523.978893][T10327] fuse: Invalid rootmode [ 524.065122][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.141594][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.159214][T10180] bridge_slave_1: entered allmulticast mode [ 524.192884][T10180] bridge_slave_1: entered promiscuous mode [ 524.580397][ T1304] hsr_slave_0: left promiscuous mode [ 524.587149][ T1304] hsr_slave_1: left promiscuous mode [ 524.595691][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.622750][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.899996][ T1304] hsr_slave_0: left promiscuous mode [ 524.906967][ T1304] hsr_slave_1: left promiscuous mode [ 524.915148][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.698556][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.780750][T10347] netlink: 'syz.4.1195': attribute type 13 has an invalid length. [ 526.730050][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 526.795007][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 528.060300][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 528.105039][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 528.833856][T10050] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 528.934914][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.996777][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.116444][T10050] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 529.215321][T10050] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 530.022654][ T30] audit: type=1326 audit(1747254261.179:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.053386][ T30] audit: type=1326 audit(1747254261.179:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.076311][ T30] audit: type=1326 audit(1747254261.189:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.118563][T10050] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 530.148816][ T30] audit: type=1326 audit(1747254261.189:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.173509][ T30] audit: type=1326 audit(1747254261.189:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.196982][ T30] audit: type=1326 audit(1747254261.189:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.290426][ T5847] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 530.343547][ T30] audit: type=1326 audit(1747254261.189:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.384966][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.439427][T10180] team0: Port device team_slave_0 added [ 530.465635][ T30] audit: type=1326 audit(1747254261.189:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.488934][T10180] team0: Port device team_slave_1 added [ 530.495172][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 530.521422][ T5847] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 530.551746][ T5847] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 530.570335][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 530.580397][ T5847] usb 3-1: config 1 has no interface number 0 [ 530.586881][ T5847] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.614003][ T5847] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 530.639953][T10386] fuse: Invalid rootmode [ 530.659009][ T5847] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 530.749287][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.758391][ T30] audit: type=1326 audit(1747254261.199:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.781963][ T30] audit: type=1326 audit(1747254261.369:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09ad8e969 code=0x7ffc0000 [ 530.854480][ T5847] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 530.902125][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.136892][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.603401][ T5847] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 531.609954][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.838205][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.859309][ T5847] usb 3-1: USB disconnect, device number 12 [ 531.880419][ T5847] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 531.901307][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.981089][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.024540][T10180] hsr_slave_0: entered promiscuous mode [ 533.081175][T10180] hsr_slave_1: entered promiscuous mode [ 533.556652][T10414] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1207'. [ 533.960040][T10422] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 534.101367][T10425] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1209'. [ 534.270320][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.290711][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 534.305423][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 534.315309][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 534.333225][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 534.390227][T10425] batadv1: entered promiscuous mode [ 534.415877][T10425] batadv1: entered allmulticast mode [ 537.052081][ T5837] Bluetooth: hci1: command tx timeout [ 537.185706][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.112448][ T5837] Bluetooth: hci1: command tx timeout [ 540.085454][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 540.085500][ T30] audit: type=1326 audit(1747254271.569:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 540.537574][ T30] audit: type=1326 audit(1747254271.569:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 540.575256][T10050] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.582061][ T30] audit: type=1326 audit(1747254271.579:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 540.626585][T10482] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 540.661447][ T30] audit: type=1326 audit(1747254271.579:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 540.726055][ T30] audit: type=1326 audit(1747254271.579:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 540.736179][T10485] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1221'. [ 540.798588][ T30] audit: type=1326 audit(1747254271.579:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 540.941246][ T30] audit: type=1326 audit(1747254271.579:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 540.989360][ T30] audit: type=1326 audit(1747254271.579:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 541.020224][ T30] audit: type=1326 audit(1747254271.579:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 541.060202][T10428] chnl_net:caif_netlink_parms(): no params data found [ 541.141100][ T30] audit: type=1326 audit(1747254271.719:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bf38e969 code=0x7ffc0000 [ 541.145184][T10485] batadv1: entered promiscuous mode [ 541.197693][ T5837] Bluetooth: hci1: command tx timeout [ 541.224165][T10485] batadv1: entered allmulticast mode [ 542.073137][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.080335][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.167543][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.174807][ T6086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.308264][ T5837] Bluetooth: hci1: command tx timeout [ 544.415058][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1230'. [ 546.314223][T10428] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.331686][T10428] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.339639][T10428] bridge_slave_0: entered allmulticast mode [ 546.359867][T10428] bridge_slave_0: entered promiscuous mode [ 546.478148][T10428] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.507202][T10428] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.531791][T10428] bridge_slave_1: entered allmulticast mode [ 546.555364][T10428] bridge_slave_1: entered promiscuous mode [ 546.840461][T10428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.926801][T10428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.029035][ T1304] bridge_slave_1: left allmulticast mode [ 547.039669][ T1304] bridge_slave_1: left promiscuous mode [ 547.058494][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.090256][ T1304] bridge_slave_0: left allmulticast mode [ 547.103382][ T1304] bridge_slave_0: left promiscuous mode [ 547.118651][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.149938][ T1304] bridge_slave_1: left allmulticast mode [ 547.163547][ T1304] bridge_slave_1: left promiscuous mode [ 547.176271][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.225912][ T1304] bridge_slave_0: left allmulticast mode [ 547.234192][ T1304] bridge_slave_0: left promiscuous mode [ 547.240158][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.118982][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.130052][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.141280][ T1304] bond0 (unregistering): Released all slaves [ 550.245212][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.260028][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.274169][ T1304] bond0 (unregistering): Released all slaves [ 550.289761][T10180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 550.326984][T10428] team0: Port device team_slave_0 added [ 550.481236][T10180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 550.544855][T10180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 550.588195][T10428] team0: Port device team_slave_1 added [ 550.652482][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 550.652503][ T30] audit: type=1326 audit(1747254282.289:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 550.716923][ T30] audit: type=1326 audit(1747254282.289:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 550.740201][ T30] audit: type=1326 audit(1747254282.289:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 550.766277][ T1304] hsr_slave_0: left promiscuous mode [ 550.774169][ T30] audit: type=1326 audit(1747254282.289:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 550.804583][ T30] audit: type=1326 audit(1747254282.299:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 550.816180][ T1304] hsr_slave_1: left promiscuous mode [ 550.836472][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.867721][ T30] audit: type=1326 audit(1747254282.359:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 550.907682][ T30] audit: type=1326 audit(1747254282.359:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9278e969 code=0x7ffc0000 [ 550.972395][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.998181][ T1304] hsr_slave_0: left promiscuous mode [ 551.012543][ T1304] hsr_slave_1: left promiscuous mode [ 551.018792][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.048109][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.298242][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 553.509788][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 553.555317][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 554.415673][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 554.473117][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 554.793981][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1256'. [ 555.777304][T10180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 555.989872][T10428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.010205][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.722035][T10428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.743203][T10428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.750221][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.781392][T10428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.849815][T10050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.006624][T10428] hsr_slave_0: entered promiscuous mode [ 558.027176][T10428] hsr_slave_1: entered promiscuous mode [ 558.061931][T10428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.080043][T10428] Cannot create hsr debugfs directory [ 558.251474][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 558.422164][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 558.448208][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 558.479739][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 558.509747][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 558.537775][ T10] usb 5-1: config 1 has no interface number 0 [ 558.553001][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.577369][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 558.605747][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 558.634398][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.722351][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 558.871640][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.949025][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 559.207203][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.422924][ T10] usb 5-1: USB disconnect, device number 8 [ 559.472167][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 559.479786][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.487036][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.778422][T10180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 559.811014][T10180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.726216][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.733435][ T6086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.110581][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.123978][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.136779][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.145671][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.161230][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.249466][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.258685][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.281311][ T5837] Bluetooth: hci2: command tx timeout [ 564.540346][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 565.356611][ T5837] Bluetooth: hci2: command tx timeout [ 566.225032][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1289'. [ 566.323687][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.345671][T10762] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1289'. [ 566.350535][T10428] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 566.375949][T10428] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 566.385576][T10761] netlink: 'syz.4.1290': attribute type 10 has an invalid length. [ 566.451860][T10689] chnl_net:caif_netlink_parms(): no params data found [ 566.670728][T10428] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 566.707190][T10762] batadv1: entered promiscuous mode [ 566.712662][T10762] batadv1: entered allmulticast mode [ 566.753258][T10761] team0: Port device dummy0 added [ 567.476135][ T5837] Bluetooth: hci2: command tx timeout [ 567.555143][T10428] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 567.613653][T10769] lo speed is unknown, defaulting to 1000 [ 567.619642][T10769] lo speed is unknown, defaulting to 1000 [ 567.627360][T10769] lo speed is unknown, defaulting to 1000 [ 567.640326][T10769] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 567.658699][T10769] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 567.837586][T10769] lo speed is unknown, defaulting to 1000 [ 567.916401][T10769] lo speed is unknown, defaulting to 1000 [ 568.082465][T10769] lo speed is unknown, defaulting to 1000 [ 568.090812][T10769] lo speed is unknown, defaulting to 1000 [ 568.140335][T10769] lo speed is unknown, defaulting to 1000 [ 568.191313][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.198504][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.210265][T10689] bridge_slave_0: entered allmulticast mode [ 568.218574][T10689] bridge_slave_0: entered promiscuous mode [ 568.233707][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.242053][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.249312][T10689] bridge_slave_1: entered allmulticast mode [ 568.268048][T10689] bridge_slave_1: entered promiscuous mode [ 568.289570][T10769] lo speed is unknown, defaulting to 1000 [ 568.297480][T10769] lo speed is unknown, defaulting to 1000 [ 568.390747][T10180] veth0_vlan: entered promiscuous mode [ 569.621047][ T5837] Bluetooth: hci2: command tx timeout [ 570.356891][ T1304] bridge_slave_1: left allmulticast mode [ 570.371413][ T1304] bridge_slave_1: left promiscuous mode [ 570.386361][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.578815][ T1304] bridge_slave_0: left allmulticast mode [ 570.625737][ T1304] bridge_slave_0: left promiscuous mode [ 570.671697][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.942125][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 572.167769][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 572.203459][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 572.220079][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 572.234327][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 572.260187][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.309354][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.328529][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.340470][ T1304] bond0 (unregistering): Released all slaves [ 572.357681][T10180] veth1_vlan: entered promiscuous mode [ 572.373198][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.446057][T10797] lo speed is unknown, defaulting to 1000 [ 572.453525][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.870180][T10689] team0: Port device team_slave_0 added [ 572.905517][T10689] team0: Port device team_slave_1 added [ 573.028079][T10827] netlink: 'syz.3.1306': attribute type 16 has an invalid length. [ 573.036126][ T1304] hsr_slave_0: left promiscuous mode [ 573.051047][ T1304] hsr_slave_1: left promiscuous mode [ 573.057126][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.078943][T10827] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1306'. [ 573.099929][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.847647][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 573.955137][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 574.315305][ T55] Bluetooth: hci6: command tx timeout [ 574.670155][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.679585][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.712959][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.731885][T10815] lo speed is unknown, defaulting to 1000 [ 574.772247][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.780411][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.818314][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.747530][T10858] siw: device registration error -23 [ 576.138428][T10689] hsr_slave_0: entered promiscuous mode [ 576.171414][T10689] hsr_slave_1: entered promiscuous mode [ 576.192277][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.199900][T10689] Cannot create hsr debugfs directory [ 576.402714][ T55] Bluetooth: hci6: command tx timeout [ 577.132030][T10844] infiniband syz!: set active [ 577.157001][T10844] infiniband syz!: added team_slave_0 [ 577.189472][T10428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.243276][T10844] syz!: rxe_create_cq: returned err = -12 [ 577.270620][T10844] infiniband syz!: Couldn't create ib_mad CQ [ 577.279736][T10844] infiniband syz!: Couldn't open port 1 [ 577.347343][T10844] RDS/IB: syz!: added [ 577.361874][T10844] smc: adding ib device syz! with port count 1 [ 577.399843][T10844] smc: ib device syz! port 1 has pnetid [ 577.472602][T10428] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.065141][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.072386][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.147794][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.155018][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.446790][T10815] chnl_net:caif_netlink_parms(): no params data found [ 578.481911][ T55] Bluetooth: hci6: command tx timeout [ 580.020048][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 580.309878][T10908] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.543580][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.550852][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.561228][ T55] Bluetooth: hci6: command tx timeout [ 580.564919][T10815] bridge_slave_0: entered allmulticast mode [ 580.574878][T10914] netlink: 'syz.4.1321': attribute type 16 has an invalid length. [ 580.582911][T10914] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1321'. [ 580.587227][T10815] bridge_slave_0: entered promiscuous mode [ 580.620518][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.634439][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.662652][T10815] bridge_slave_1: entered allmulticast mode [ 580.681897][T10815] bridge_slave_1: entered promiscuous mode [ 580.936168][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.009062][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.174353][ T1304] bridge_slave_1: left allmulticast mode [ 581.180061][ T1304] bridge_slave_1: left promiscuous mode [ 581.211196][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.262220][ T1304] bridge_slave_0: left allmulticast mode [ 581.267938][ T1304] bridge_slave_0: left promiscuous mode [ 581.293422][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.579093][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 582.119046][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 582.161298][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.174361][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.192918][ T1304] bond0 (unregistering): Released all slaves [ 582.298539][T10815] team0: Port device team_slave_0 added [ 582.497350][T10815] team0: Port device team_slave_1 added [ 582.615556][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1327'. [ 582.704333][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.708231][T10938] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1327'. [ 582.730378][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.826029][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.857677][T10938] batadv1: entered promiscuous mode [ 582.869157][T10938] batadv1: entered allmulticast mode [ 582.895930][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'. [ 582.929991][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.941524][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.985169][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.718162][T10815] hsr_slave_0: entered promiscuous mode [ 585.735611][T10815] hsr_slave_1: entered promiscuous mode [ 586.484540][T10815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.523628][T10815] Cannot create hsr debugfs directory [ 586.714354][T10689] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 586.837040][T10428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.875343][T10689] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 586.937333][T10970] netlink: 'syz.3.1335': attribute type 1 has an invalid length. [ 587.007187][T10974] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1335'. [ 587.047136][T10689] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 587.270522][T10970] bond5: entered promiscuous mode [ 587.332366][T10970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.501416][T10974] batadv1: entered promiscuous mode [ 587.529251][T10974] batadv1: entered allmulticast mode [ 587.547080][T10974] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 587.565423][T10974] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 587.671205][T10689] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 588.977583][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 589.334072][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 589.348310][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 589.357567][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 589.367135][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 589.375948][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 590.452629][T10428] veth0_vlan: entered promiscuous mode [ 590.535115][T10428] veth1_vlan: entered promiscuous mode [ 590.758098][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.788957][T10815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 591.049975][T10428] veth0_macvtap: entered promiscuous mode [ 591.073645][T10815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.095683][T10815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 591.115819][T10815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 591.169885][T10428] veth1_macvtap: entered promiscuous mode [ 591.209681][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.275463][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.282817][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.354108][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.361349][ T7619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.417341][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.434580][ T5837] Bluetooth: hci3: command tx timeout [ 591.453421][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.472934][T10428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.505211][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.526342][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.553820][T10428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.634436][T10428] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.651499][T10428] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.660366][T10428] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.681140][T10428] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.708265][T10983] lo speed is unknown, defaulting to 1000 [ 591.721357][T11011] lo speed is unknown, defaulting to 1000 [ 591.792540][T10996] lo speed is unknown, defaulting to 1000 [ 591.940446][T10844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.049964][ T1304] hsr_slave_0: left promiscuous mode [ 593.068743][ T1304] hsr_slave_1: left promiscuous mode [ 593.075447][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.104678][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.136431][ T1304] veth1_vlan: left promiscuous mode [ 593.143668][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.152414][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.152869][ T1304] veth0_vlan: left promiscuous mode [ 593.165973][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.175345][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.186466][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.521480][ T5837] Bluetooth: hci3: command tx timeout [ 593.550257][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 593.620847][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 594.499264][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.539845][T11029] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 594.583835][T11025] lo speed is unknown, defaulting to 1000 [ 594.882142][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.136117][T11031] lo speed is unknown, defaulting to 1000 [ 595.197894][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.205245][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.225587][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.232963][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.745276][T10996] chnl_net:caif_netlink_parms(): no params data found [ 595.894763][ T5837] Bluetooth: hci0: command tx timeout [ 595.901190][ T5837] Bluetooth: hci3: command tx timeout [ 596.020137][T10815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 596.037372][T10815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 597.344852][ T1304] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.490326][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.703082][T10996] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.710537][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.721721][T10996] bridge_slave_0: entered allmulticast mode [ 597.729929][T10996] bridge_slave_0: entered promiscuous mode [ 598.156268][ T55] Bluetooth: hci3: command tx timeout [ 598.165303][ T5837] Bluetooth: hci0: command tx timeout [ 598.463913][ T1304] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.536603][T10996] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.546574][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.557745][T10996] bridge_slave_1: entered allmulticast mode [ 598.573242][T10996] bridge_slave_1: entered promiscuous mode [ 598.660213][T10996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.690333][T10996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.909365][ T1304] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.013689][T10996] team0: Port device team_slave_0 added [ 599.063018][T10996] team0: Port device team_slave_1 added [ 599.138643][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.329758][ T1304] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.104674][T10996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.111898][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.140519][T10996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.209657][T10996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.229679][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.260752][T10996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.274534][ T5837] Bluetooth: hci0: command tx timeout [ 600.979943][T10996] hsr_slave_0: entered promiscuous mode [ 600.988958][T10996] hsr_slave_1: entered promiscuous mode [ 601.096520][T11025] chnl_net:caif_netlink_parms(): no params data found [ 601.195234][T10689] veth0_vlan: entered promiscuous mode [ 601.253357][ T1304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.396777][ T1304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.428222][T10689] veth1_vlan: entered promiscuous mode [ 601.544234][ T1304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.698687][ T1304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.717796][T10815] veth0_vlan: entered promiscuous mode [ 601.819263][T11025] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.832132][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.839613][T11025] bridge_slave_0: entered allmulticast mode [ 601.848660][T11025] bridge_slave_0: entered promiscuous mode [ 601.909844][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.921429][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.928737][T11025] bridge_slave_1: entered allmulticast mode [ 601.936685][T11025] bridge_slave_1: entered promiscuous mode [ 601.962392][T10815] veth1_vlan: entered promiscuous mode [ 602.006111][T11025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.016780][T10689] veth0_macvtap: entered promiscuous mode [ 602.160046][T11025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.233370][T10689] veth1_macvtap: entered promiscuous mode [ 602.279523][T11025] team0: Port device team_slave_0 added [ 602.293586][T11025] team0: Port device team_slave_1 added [ 602.311123][ T5837] Bluetooth: hci0: command tx timeout [ 602.354127][T11102] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 602.430496][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.444675][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.457582][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.468570][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.488850][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.505416][ T1304] bridge_slave_1: left allmulticast mode [ 602.512140][ T1304] bridge_slave_1: left promiscuous mode [ 602.517959][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.530749][ T1304] bridge_slave_0: left allmulticast mode [ 602.545865][ T1304] bridge_slave_0: left promiscuous mode [ 602.555555][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.580314][ T1304] bridge_slave_1: left allmulticast mode [ 602.595780][ T1304] bridge_slave_1: left promiscuous mode [ 602.605085][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.619758][ T1304] bridge_slave_0: left allmulticast mode [ 602.626019][ T1304] bridge_slave_0: left promiscuous mode [ 602.632755][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.896921][T11114] netlink: 'syz.4.1359': attribute type 27 has an invalid length. [ 603.168706][ T1304] bond1 (unregistering): (slave geneve2): Releasing active interface [ 603.392389][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.404309][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.415257][ T1304] bond0 (unregistering): Released all slaves [ 603.558111][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.570553][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.581557][ T1304] bond0 (unregistering): Released all slaves [ 603.699359][ T1304] bond1 (unregistering): Released all slaves [ 603.716010][T11025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.723245][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.749849][T11025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.789161][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.802611][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.812970][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.824617][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.854914][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.888534][T11114] [ 603.890920][T11114] ====================================================== [ 603.898034][T11114] WARNING: possible circular locking dependency detected [ 603.905044][T11114] 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 Not tainted [ 603.912152][T11114] ------------------------------------------------------ [ 603.919220][T11114] syz.4.1359/11114 is trying to acquire lock: [ 603.925315][T11114] ffff888033598e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 603.935287][T11114] [ 603.935287][T11114] but task is already holding lock: [ 603.942656][T11114] ffff888034618d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x370/0x40d0 [ 603.952403][T11114] [ 603.952403][T11114] which lock already depends on the new lock. [ 603.952403][T11114] [ 603.962834][T11114] [ 603.962834][T11114] the existing dependency chain (in reverse order) is: [ 603.971934][T11114] [ 603.971934][T11114] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 603.980410][T11114] lock_acquire+0x120/0x360 [ 603.985606][T11114] __mutex_lock+0x182/0xe80 [ 603.990658][T11114] dev_set_mtu+0x10e/0x260 [ 603.995703][T11114] team_add_slave+0x8b8/0x2840 [ 604.001017][T11114] do_set_master+0x533/0x6d0 [ 604.006143][T11114] do_setlink+0xd47/0x40d0 [ 604.011177][T11114] rtnl_newlink+0x160b/0x1c70 [ 604.016405][T11114] rtnetlink_rcv_msg+0x7cf/0xb70 [ 604.021989][T11114] netlink_rcv_skb+0x21c/0x490 [ 604.027816][T11114] netlink_unicast+0x75b/0x8d0 [ 604.033108][T11114] netlink_sendmsg+0x805/0xb30 [ 604.038404][T11114] __sock_sendmsg+0x21c/0x270 [ 604.043611][T11114] ____sys_sendmsg+0x505/0x830 [ 604.048912][T11114] ___sys_sendmsg+0x21f/0x2a0 [ 604.054144][T11114] __x64_sys_sendmsg+0x19b/0x260 [ 604.059877][T11114] do_syscall_64+0xf6/0x210 [ 604.064920][T11114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.071367][T11114] [ 604.071367][T11114] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 604.079587][T11114] validate_chain+0xb9b/0x2140 [ 604.084875][T11114] __lock_acquire+0xaac/0xd20 [ 604.090086][T11114] lock_acquire+0x120/0x360 [ 604.095129][T11114] __mutex_lock+0x182/0xe80 [ 604.100164][T11114] team_device_event+0x182/0xa20 [ 604.105631][T11114] notifier_call_chain+0x1b6/0x3e0 [ 604.111271][T11114] __dev_notify_flags+0x18d/0x2e0 [ 604.116830][T11114] netif_change_flags+0xe8/0x1a0 [ 604.122301][T11114] do_setlink+0xcb9/0x40d0 [ 604.127244][T11114] rtnl_newlink+0x149f/0x1c70 [ 604.132448][T11114] rtnetlink_rcv_msg+0x7cf/0xb70 [ 604.137912][T11114] netlink_rcv_skb+0x21c/0x490 [ 604.143211][T11114] netlink_unicast+0x75b/0x8d0 [ 604.148510][T11114] netlink_sendmsg+0x805/0xb30 [ 604.153831][T11114] __sock_sendmsg+0x21c/0x270 [ 604.159124][T11114] ____sys_sendmsg+0x505/0x830 [ 604.164509][T11114] ___sys_sendmsg+0x21f/0x2a0 [ 604.169725][T11114] __x64_sys_sendmsg+0x19b/0x260 [ 604.175247][T11114] do_syscall_64+0xf6/0x210 [ 604.180285][T11114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.186702][T11114] [ 604.186702][T11114] other info that might help us debug this: [ 604.186702][T11114] [ 604.196933][T11114] Possible unsafe locking scenario: [ 604.196933][T11114] [ 604.204414][T11114] CPU0 CPU1 [ 604.209776][T11114] ---- ---- [ 604.215138][T11114] lock(&dev_instance_lock_key#3); [ 604.220353][T11114] lock(team->team_lock_key#3); [ 604.227828][T11114] lock(&dev_instance_lock_key#3); [ 604.235571][T11114] lock(team->team_lock_key#3); [ 604.240526][T11114] [ 604.240526][T11114] *** DEADLOCK *** [ 604.240526][T11114] [ 604.248678][T11114] 2 locks held by syz.4.1359/11114: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 604.253872][T11114] #0: ffffffff8f2f72c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 604.262968][T11114] #1: ffff888034618d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x370/0x40d0 [ 604.273112][T11114] [ 604.273112][T11114] stack backtrace: [ 604.279088][T11114] CPU: 1 UID: 0 PID: 11114 Comm: syz.4.1359 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 604.279116][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.279131][T11114] Call Trace: [ 604.279142][T11114] [ 604.279153][T11114] dump_stack_lvl+0x189/0x250 [ 604.279192][T11114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.279224][T11114] ? __pfx__printk+0x10/0x10 [ 604.279249][T11114] ? print_lock_name+0xde/0x100 [ 604.279289][T11114] print_circular_bug+0x2ee/0x310 [ 604.279316][T11114] check_noncircular+0x134/0x160 [ 604.279344][T11114] validate_chain+0xb9b/0x2140 [ 604.279371][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.279397][T11114] ? __lock_acquire+0xaac/0xd20 [ 604.279432][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.279462][T11114] __lock_acquire+0xaac/0xd20 [ 604.279497][T11114] ? team_device_event+0x182/0xa20 [ 604.279522][T11114] lock_acquire+0x120/0x360 [ 604.279554][T11114] ? team_device_event+0x182/0xa20 [ 604.279582][T11114] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 604.279612][T11114] __mutex_lock+0x182/0xe80 [ 604.279641][T11114] ? team_device_event+0x182/0xa20 [ 604.279671][T11114] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 604.279703][T11114] ? team_device_event+0x182/0xa20 [ 604.279730][T11114] ? __pfx___mutex_lock+0x10/0x10 [ 604.279764][T11114] ? __timer_delete_sync+0x218/0x2d0 [ 604.279795][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.279824][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.279854][T11114] team_device_event+0x182/0xa20 [ 604.279882][T11114] notifier_call_chain+0x1b6/0x3e0 [ 604.279911][T11114] __dev_notify_flags+0x18d/0x2e0 [ 604.279943][T11114] ? __pfx___dev_notify_flags+0x10/0x10 [ 604.279971][T11114] ? __dev_change_flags+0x4cc/0x6d0 [ 604.280004][T11114] ? __pfx___dev_change_flags+0x10/0x10 [ 604.280032][T11114] ? netif_state_change+0x256/0x3a0 [ 604.280060][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280088][T11114] netif_change_flags+0xe8/0x1a0 [ 604.280121][T11114] do_setlink+0xcb9/0x40d0 [ 604.280159][T11114] ? __pfx_do_setlink+0x10/0x10 [ 604.280185][T11114] ? do_raw_spin_lock+0x121/0x290 [ 604.280218][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280244][T11114] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.280273][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280298][T11114] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 604.280324][T11114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.280351][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280377][T11114] ? rcu_is_watching+0x15/0xb0 [ 604.280399][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280425][T11114] ? __mutex_lock+0xa6d/0xe80 [ 604.280454][T11114] ? __mutex_lock+0x51b/0xe80 [ 604.280486][T11114] ? rtnl_newlink+0x8db/0x1c70 [ 604.280513][T11114] ? __pfx___mutex_lock+0x10/0x10 [ 604.280540][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280572][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280598][T11114] ? ns_capable+0x8a/0xf0 [ 604.280619][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280645][T11114] ? rtnl_link_get_net_capable+0x16a/0x350 [ 604.280676][T11114] rtnl_newlink+0x149f/0x1c70 [ 604.280708][T11114] ? __pfx_rtnl_newlink+0x10/0x10 [ 604.280738][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280764][T11114] ? __lock_acquire+0xaac/0xd20 [ 604.280800][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280829][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280855][T11114] ? __lock_acquire+0xaac/0xd20 [ 604.280890][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280920][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.280946][T11114] ? __lock_acquire+0xaac/0xd20 [ 604.280987][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281015][T11114] ? is_bpf_text_address+0x26/0x2b0 [ 604.281051][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281076][T11114] ? is_bpf_text_address+0x292/0x2b0 [ 604.281109][T11114] ? is_bpf_text_address+0x26/0x2b0 [ 604.281146][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281171][T11114] ? aa_get_newest_label+0xf7/0x5d0 [ 604.281199][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281224][T11114] ? __lock_acquire+0xaac/0xd20 [ 604.281264][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281295][T11114] ? __pfx_rtnl_newlink+0x10/0x10 [ 604.281320][T11114] rtnetlink_rcv_msg+0x7cf/0xb70 [ 604.281344][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281370][T11114] ? kasan_save_track+0x4f/0x80 [ 604.281398][T11114] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 604.281423][T11114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 604.281448][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281473][T11114] ? __lock_acquire+0xaac/0xd20 [ 604.281513][T11114] netlink_rcv_skb+0x21c/0x490 [ 604.281540][T11114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 604.281566][T11114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.281590][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281626][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281653][T11114] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.281679][T11114] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.281708][T11114] netlink_unicast+0x75b/0x8d0 [ 604.281747][T11114] netlink_sendmsg+0x805/0xb30 [ 604.281780][T11114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.281808][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281835][T11114] ? aa_sock_msg_perm+0x94/0x160 [ 604.281860][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281886][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.281912][T11114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.281939][T11114] __sock_sendmsg+0x21c/0x270 [ 604.281963][T11114] ____sys_sendmsg+0x505/0x830 [ 604.281998][T11114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.282034][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.282060][T11114] ? import_iovec+0x74/0xa0 [ 604.282095][T11114] ___sys_sendmsg+0x21f/0x2a0 [ 604.282128][T11114] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.282179][T11114] ? __fget_files+0x2a/0x420 [ 604.282209][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.282235][T11114] ? __fget_files+0x3a0/0x420 [ 604.282271][T11114] __x64_sys_sendmsg+0x19b/0x260 [ 604.282304][T11114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.282346][T11114] ? do_syscall_64+0xba/0x210 [ 604.282378][T11114] do_syscall_64+0xf6/0x210 [ 604.282408][T11114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.282434][T11114] ? exc_page_fault+0x91/0x110 [ 604.282462][T11114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.282484][T11114] RIP: 0033:0x7fe09ad8e969 [ 604.282504][T11114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.282523][T11114] RSP: 002b:00007fe09bb16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.282546][T11114] RAX: ffffffffffffffda RBX: 00007fe09afb6240 RCX: 00007fe09ad8e969 [ 604.282563][T11114] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 604.282578][T11114] RBP: 00007fe09ae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 604.282593][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.282606][T11114] R13: 0000000000000000 R14: 00007fe09afb6240 R15: 00007ffc10d61e28 [ 604.282631][T11114] [ 605.076606][T11114] veth0_vlan: left allmulticast mode [ 605.129991][T11114] ip6gre1: left allmulticast mode [ 605.184179][T11025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.191362][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.219124][T11025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.255795][T11103] lo speed is unknown, defaulting to 1000 [ 606.218876][ T1304] hsr_slave_0: left promiscuous mode [ 606.224813][ T1304] hsr_slave_1: left promiscuous mode [ 606.230673][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.238703][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.252458][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.259995][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.271701][ T1304] hsr_slave_0: left promiscuous mode [ 606.277444][ T1304] hsr_slave_1: left promiscuous mode [ 606.283630][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.291298][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.299133][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.307186][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.323071][ T1304] veth1_macvtap: left promiscuous mode [ 606.328639][ T1304] veth0_macvtap: left promiscuous mode [ 606.334463][ T1304] veth1_vlan: left promiscuous mode [ 606.339796][ T1304] veth0_vlan: left promiscuous mode [ 606.345772][ T1304] veth1_macvtap: left promiscuous mode [ 606.351914][ T1304] veth0_macvtap: left promiscuous mode [ 606.357486][ T1304] veth1_vlan: left promiscuous mode [ 606.530201][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 606.568942][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 606.842604][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 606.869678][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 606.877887][ T6227] smc: removing ib device syz! [ 608.925265][ T1304] bridge_slave_1: left allmulticast mode [ 608.931810][ T1304] bridge_slave_1: left promiscuous mode [ 608.937844][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.949552][ T1304] bridge_slave_0: left allmulticast mode [ 608.956855][ T1304] bridge_slave_0: left promiscuous mode [ 608.963198][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.975929][ T1304] bridge_slave_1: left allmulticast mode [ 608.981710][ T1304] bridge_slave_1: left promiscuous mode [ 608.987435][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.002863][ T1304] bridge_slave_0: left allmulticast mode [ 609.008555][ T1304] bridge_slave_0: left promiscuous mode [ 609.016806][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.026199][ T1304] bridge_slave_1: left allmulticast mode [ 609.034492][ T1304] bridge_slave_1: left promiscuous mode [ 609.040192][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.050563][ T1304] bridge_slave_0: left allmulticast mode [ 609.058972][ T1304] bridge_slave_0: left promiscuous mode [ 609.064776][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.077258][ T1304] bridge_slave_1: left allmulticast mode [ 609.083725][ T1304] bridge_slave_1: left promiscuous mode [ 609.089426][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.103749][ T1304] bridge_slave_0: left allmulticast mode [ 609.109433][ T1304] bridge_slave_0: left promiscuous mode [ 609.121118][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.130279][ T1304] bridge_slave_1: left allmulticast mode [ 609.138140][ T1304] bridge_slave_1: left promiscuous mode [ 609.144248][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.156687][ T1304] bridge_slave_0: left allmulticast mode [ 609.163874][ T1304] bridge_slave_0: left promiscuous mode [ 609.169688][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.182866][ T1304] bridge_slave_0: left allmulticast mode [ 609.188538][ T1304] bridge_slave_0: left promiscuous mode [ 609.195487][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.689122][ T1304] bond1 (unregistering): (slave gretap1): Releasing active interface [ 609.756236][ T1304] bond2 (unregistering): (slave geneve2): Releasing active interface [ 609.764597][ T1304] geneve2 (unregistering): left allmulticast mode [ 609.808577][ T1304] bond3 (unregistering): (slave geneve2): Releasing active interface [ 610.225053][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.235580][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.244811][ T1304] bond0 (unregistering): Released all slaves [ 610.312546][ T1304] bond1 (unregistering): Released all slaves [ 610.387136][ T1304] bond2 (unregistering): Released all slaves [ 610.454056][ T1304] bond3 (unregistering): Released all slaves [ 610.537534][ T1304] bond4 (unregistering): Released all slaves [ 610.550110][ T1304] bond5 (unregistering): (slave batadv1): Releasing backup interface [ 610.559953][ T1304] bond5 (unregistering): Released all slaves [ 610.570727][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.581057][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.590594][ T1304] bond0 (unregistering): Released all slaves [ 610.607215][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.619918][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.631899][ T1304] bond0 (unregistering): Released all slaves [ 610.643550][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.653822][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.664897][ T1304] bond0 (unregistering): Released all slaves [ 610.680022][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.690544][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.700130][ T1304] bond0 (unregistering): Released all slaves [ 610.774590][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.784107][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.793510][ T1304] bond0 (unregistering): Released all slaves [ 610.860077][ T1304] bond1 (unregistering): Released all slaves [ 610.923602][ T1304] bond2 (unregistering): Released all slaves [ 610.987826][ T1304] bond3 (unregistering): Released all slaves [ 611.052123][ T1304] bond4 (unregistering): Released all slaves [ 611.460611][ T1304] hsr_slave_0: left promiscuous mode [ 611.470312][ T1304] hsr_slave_1: left promiscuous mode [ 611.476342][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.484915][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.495900][ T1304] hsr_slave_0: left promiscuous mode [ 611.504386][ T1304] hsr_slave_1: left promiscuous mode [ 611.510198][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.526464][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.537607][ T1304] hsr_slave_0: left promiscuous mode [ 611.546312][ T1304] hsr_slave_1: left promiscuous mode [ 611.553038][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.560587][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.570674][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.580240][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.588502][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.597602][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.608536][ T1304] hsr_slave_0: left promiscuous mode [ 611.615586][ T1304] hsr_slave_1: left promiscuous mode [ 611.623092][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.630772][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.645787][ T1304] hsr_slave_0: left promiscuous mode [ 611.652988][ T1304] hsr_slave_1: left promiscuous mode [ 611.658883][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.668189][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.684630][ T1304] veth1_macvtap: left promiscuous mode [ 611.690169][ T1304] veth0_macvtap: left promiscuous mode [ 611.696080][ T1304] veth1_vlan: left promiscuous mode [ 611.704849][ T1304] veth0_vlan: left promiscuous mode [ 611.710670][ T1304] veth1_vlan: left promiscuous mode [ 611.716232][ T1304] veth0_vlan: left promiscuous mode [ 612.144639][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 612.179307][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 612.526749][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 612.545862][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 612.728142][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 612.753147][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 612.848621][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 612.865519][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 613.027798][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 613.050257][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 613.347445][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 613.375506][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 613.515430][ T1304] team0 (unregistering): Port device dummy0 removed