last executing test programs: 9m56.328695395s ago: executing program 3 (id=517): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 9m55.211816822s ago: executing program 3 (id=523): socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000010c0)={0x2, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000002640)={0x2, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100736f636b65740000140002800800024000000015080001400000000e0900010073797a30"], 0xc4}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4068aea3, &(0x7f0000000180)={0xdc, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m54.873679426s ago: executing program 3 (id=526): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0xc07b}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x2, 0x0, 0x42, 0x0, &(0x7f0000000040)=[{}, {}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m52.191131457s ago: executing program 3 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x128200}}, 0x50) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f00000026c0)={0x2020}, 0x2020) 9m51.409016563s ago: executing program 3 (id=539): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) setresuid(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 9m50.899848151s ago: executing program 3 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 9m50.582116068s ago: executing program 32 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 9m18.012356234s ago: executing program 5 (id=648): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 9m17.887035305s ago: executing program 5 (id=650): add_key(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fcntl$setstatus(r3, 0x4, 0x800) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) 9m14.043401902s ago: executing program 5 (id=662): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 9m13.127778179s ago: executing program 5 (id=666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m12.207544142s ago: executing program 5 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) 9m11.899857441s ago: executing program 5 (id=673): socket(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 9m11.343052424s ago: executing program 33 (id=673): socket(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 7m47.963916718s ago: executing program 4 (id=55): mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x401, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0xff, 0xed, 0x1, 0x0, 0x6, 0xc, 0x3d, 0x3, 0x6, 0x5, 0x9, 0x10, 0x0, 0x7, 0x4, 0xf9, 0x7, 0xba, 0x40, '\x00', 0x7, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m13.664609404s ago: executing program 4 (id=55): mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x401, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0xff, 0xed, 0x1, 0x0, 0x6, 0xc, 0x3d, 0x3, 0x6, 0x5, 0x9, 0x10, 0x0, 0x7, 0x4, 0xf9, 0x7, 0xba, 0x40, '\x00', 0x7, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m23.826980127s ago: executing program 4 (id=55): mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x401, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0xff, 0xed, 0x1, 0x0, 0x6, 0xc, 0x3d, 0x3, 0x6, 0x5, 0x9, 0x10, 0x0, 0x7, 0x4, 0xf9, 0x7, 0xba, 0x40, '\x00', 0x7, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m47.236703694s ago: executing program 4 (id=55): mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x401, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0xff, 0xed, 0x1, 0x0, 0x6, 0xc, 0x3d, 0x3, 0x6, 0x5, 0x9, 0x10, 0x0, 0x7, 0x4, 0xf9, 0x7, 0xba, 0x40, '\x00', 0x7, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m51.91325742s ago: executing program 4 (id=55): mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x401, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0xff, 0xed, 0x1, 0x0, 0x6, 0xc, 0x3d, 0x3, 0x6, 0x5, 0x9, 0x10, 0x0, 0x7, 0x4, 0xf9, 0x7, 0xba, 0x40, '\x00', 0x7, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m3.171545753s ago: executing program 4 (id=55): mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x401, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0xff, 0xed, 0x1, 0x0, 0x6, 0xc, 0x3d, 0x3, 0x6, 0x5, 0x9, 0x10, 0x0, 0x7, 0x4, 0xf9, 0x7, 0xba, 0x40, '\x00', 0x7, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m30.75979776s ago: executing program 6 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r3, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4) syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m29.536581174s ago: executing program 1 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) 3m29.536243522s ago: executing program 6 (id=1568): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r4, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@mcast2, @mcast2, @local, 0x101, 0x101, 0x9, 0xe00, 0xc, 0x1000010, r4}) recvmsg$kcm(r1, 0x0, 0x40) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2000}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500248d7a908b0070600d49e010203010902240002db04c0e6090493040087cebf05090493"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 3m28.114796948s ago: executing program 1 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_io_uring_setup(0xd5, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}}, 0x0) 3m26.642738239s ago: executing program 1 (id=1572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 3m25.480290075s ago: executing program 1 (id=1575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m25.381981345s ago: executing program 6 (id=1576): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYBLOB, @ANYRES16=r0], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a010100"/19], 0x188}}, 0x0) 3m25.271876452s ago: executing program 2 (id=1577): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x100) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0xc07b}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x5}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m24.501825038s ago: executing program 1 (id=1578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 3m23.87179406s ago: executing program 2 (id=1579): r0 = syz_io_uring_setup(0x10c, &(0x7f0000000980)={0x0, 0xdb25, 0x0, 0x0, 0xc0000002}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_setup(0x8, &(0x7f0000000000)=0x0) r4 = eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000900)={0x9, 0x0, 0x1, r7, 0x1}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r7}) io_submit(r3, 0x1de, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000400)="f7624a800e6dc300a7c8af1073f7f80565d85cb0e73f45f4f3d53666f000784332e6113ff3e3a0d49c7ea76f4a31561cf1828eae6bec281c2a70ddd7a233e68eba25eff429708fdad8cd4dc88934bf913ef2a79bd435292a074c9a8a298e27f22767d72c2d10aa827a7c6f0d6779605e2612dfc3dddcdd7a0e", 0x8}]) io_destroy(r3) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') 3m23.775830444s ago: executing program 0 (id=1580): r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008040) 3m23.734349498s ago: executing program 6 (id=1581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) pipe2$watch_queue(0x0, 0x80) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, r1) keyctl$revoke(0x3, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 3m22.955023907s ago: executing program 2 (id=1582): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x71, 0x8000000, r5, 0x0) fanotify_mark(r4, 0x12, 0x8000001, r3, 0x0) 3m22.945088068s ago: executing program 6 (id=1583): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@newtaction={0x118, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x104, 0x1, [@m_nat={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x58, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x2, 0x80000000, 0x9}, 0x4}}]}, {0xc, 0x6, "094c01fde4622359"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x4c, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}]}, {0x15, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x118}}, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m22.862192251s ago: executing program 0 (id=1584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 3m21.648770279s ago: executing program 0 (id=1585): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1}) close(r0) 3m21.64757549s ago: executing program 2 (id=1586): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/124, 0x7c}], 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c1, 0x1, 0x1, 0xd59f80, 0xc, 0x5, 0x6, 0x81, 0xc, 0x3, 0xe6e, 0x5, 0x1, 0x35, 0x0, {0x4, 0x8001}, 0x3, 0xa3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0xe}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 3m20.976378243s ago: executing program 0 (id=1587): iopl(0x3) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) 3m20.797200526s ago: executing program 0 (id=1588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 3m20.568746459s ago: executing program 2 (id=1589): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f09"], 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m19.879804201s ago: executing program 6 (id=1590): socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x120, 0x5802, 0x294, 0x0, 0x294, 0x258, 0x378, 0x378, 0x258, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x100, 0x120, 0x52020000, {0x0, 0x600}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [0x0, 0x0, 0x0, 0xffffff00], [], 'gre0\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @common=@mh={{0x28}, {"0500", 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x9, 0x6, 0x6, 0x200, 0x7fff, 0xffffffff, 0x4800000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 3m19.609604522s ago: executing program 0 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x24c3, 0x101002) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025"], 0x1c}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 3m19.512401123s ago: executing program 1 (id=1592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3m6.968120667s ago: executing program 2 (id=1593): timer_create(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0) 3m2.303353792s ago: executing program 34 (id=1590): socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x120, 0x5802, 0x294, 0x0, 0x294, 0x258, 0x378, 0x378, 0x258, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x100, 0x120, 0x52020000, {0x0, 0x600}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [0x0, 0x0, 0x0, 0xffffff00], [], 'gre0\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @common=@mh={{0x28}, {"0500", 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x9, 0x6, 0x6, 0x200, 0x7fff, 0xffffffff, 0x4800000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 1m58.465850721s ago: executing program 35 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x24c3, 0x101002) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025"], 0x1c}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1m12.726743672s ago: executing program 36 (id=1592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 0s ago: executing program 37 (id=1593): timer_create(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0) kernel console output (not intermixed with test programs): moving interface: batadv_slave_0 [ 254.473170][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.480864][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.517819][ T11] veth1_macvtap: left promiscuous mode [ 254.528075][ T11] veth0_macvtap: left promiscuous mode [ 254.539482][ T11] veth1_vlan: left promiscuous mode [ 254.558495][ T11] veth0_vlan: left promiscuous mode [ 254.814419][ T29] audit: type=1326 audit(1740594966.319:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344cf8d169 code=0x7fc00000 [ 254.856944][ T29] audit: type=1326 audit(1740594966.319:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f344cf8d169 code=0x7fc00000 [ 255.437228][ T29] audit: type=1326 audit(1740594966.959:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344cf8d169 code=0x7fc00000 [ 255.468184][ T29] audit: type=1326 audit(1740594966.959:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344cf8d169 code=0x7fc00000 [ 255.517245][ T29] audit: type=1326 audit(1740594966.959:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344cf8d169 code=0x7fc00000 [ 255.538866][ T29] audit: type=1326 audit(1740594966.959:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344cf8d169 code=0x7fc00000 [ 255.715597][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 255.739216][ T8123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.791166][ T8123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.992564][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.998979][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011951][ T5843] Bluetooth: hci4: command tx timeout [ 256.076074][ T8123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.046036][ T8123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.182197][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 257.207865][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.232208][ T8437] batadv0: mtu less than device minimum [ 257.241958][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.254508][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.267057][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.279557][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.292130][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.304642][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.317060][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.329599][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.342065][ T8437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.375135][ T8437] batadv_slave_0: entered promiscuous mode [ 257.497869][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.524256][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.547048][ T8333] bridge_slave_0: entered allmulticast mode [ 257.576880][ T8333] bridge_slave_0: entered promiscuous mode [ 257.614512][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.621634][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.640793][ T8333] bridge_slave_1: entered allmulticast mode [ 258.360942][ T5843] Bluetooth: hci4: command tx timeout [ 258.368277][ T8333] bridge_slave_1: entered promiscuous mode [ 258.543677][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.364782][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.620349][ T8333] team0: Port device team_slave_0 added [ 259.649271][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.693624][ T8333] team0: Port device team_slave_1 added [ 260.097351][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.404850][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.412025][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.469477][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.515640][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.556413][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.592025][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.611911][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.688214][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.823256][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.830389][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.871392][ T29] audit: type=1326 audit(1740594972.389:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 260.904454][ T29] audit: type=1326 audit(1740594972.419:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 260.933185][ T8333] hsr_slave_0: entered promiscuous mode [ 261.393921][ T29] audit: type=1326 audit(1740594972.419:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 261.718321][ T8333] hsr_slave_1: entered promiscuous mode [ 261.745719][ T8333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.782283][ T8333] Cannot create hsr debugfs directory [ 261.793583][ T29] audit: type=1326 audit(1740594972.419:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 261.815467][ T29] audit: type=1326 audit(1740594972.419:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 261.837544][ T29] audit: type=1326 audit(1740594972.419:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 261.859256][ T29] audit: type=1326 audit(1740594972.419:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 261.881100][ T29] audit: type=1326 audit(1740594972.419:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 261.918218][ T29] audit: type=1326 audit(1740594972.419:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 261.968662][ T29] audit: type=1326 audit(1740594972.429:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 264.002012][ T8333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.066730][ T8333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.114660][ T8333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.152472][ T8333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.417414][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.409021][ T8565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.597'. [ 265.430620][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.598'. [ 265.468773][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 265.504538][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.543999][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.556991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.564191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.685020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.692181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.118613][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.276456][ T8123] veth0_vlan: entered promiscuous mode [ 267.363108][ T8123] veth1_vlan: entered promiscuous mode [ 268.006639][ T8123] veth0_macvtap: entered promiscuous mode [ 268.048591][ T8123] veth1_macvtap: entered promiscuous mode [ 268.127909][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.183945][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.219586][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.254062][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.290622][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.341481][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.392254][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.423020][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.467835][ T8123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.492239][ T8123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.531549][ T8123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.554760][ T8123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.598384][ T8630] block device autoloading is deprecated and will be removed. [ 268.608855][ T8630] syz.2.606: attempt to access beyond end of device [ 268.608855][ T8630] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 268.724266][ T8333] veth0_vlan: entered promiscuous mode [ 268.785372][ T8333] veth1_vlan: entered promiscuous mode [ 268.845698][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.871585][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.926905][ T8333] veth0_macvtap: entered promiscuous mode [ 268.951738][ T8333] veth1_macvtap: entered promiscuous mode [ 269.004189][ T1902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.026698][ T1902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.059158][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.095363][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.121284][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.161955][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.269618][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.277556][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 269.309624][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.078170][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.088854][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.099884][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.187073][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.197857][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.210364][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.278125][ T8333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.323517][ T8333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.335510][ T8333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.346234][ T8333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.665024][ T8662] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 270.691588][ T8662] CIFS: Unable to determine destination address [ 270.952927][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.970774][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.226332][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.392496][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.447430][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.574974][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.711597][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.784744][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.927108][ T11] bridge_slave_1: left allmulticast mode [ 271.941804][ T11] bridge_slave_1: left promiscuous mode [ 271.952531][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.965976][ T11] bridge_slave_0: left allmulticast mode [ 271.971659][ T11] bridge_slave_0: left promiscuous mode [ 271.981559][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.582619][ T8708] [U] [ 272.585532][ T8708] [U] [ 272.588204][ T8708] [U] [ 272.590866][ T8708] [U] [ 272.593533][ T8708] [U] [ 272.596223][ T8708] [U] [ 272.598885][ T8708] [U] [ 272.601559][ T8708] [U] [ 273.434013][ T8708] [U] [ 273.436747][ T8708] [U] [ 273.439423][ T8708] [U] [ 273.493436][ T8706] [U] [ 273.605406][ T8722] 9pnet_fd: Insufficient options for proto=fd [ 273.918656][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.947156][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.975098][ T11] bond0 (unregistering): Released all slaves [ 273.987044][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.997912][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.008535][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.019707][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.027864][ T5139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.035357][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.268588][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 275.396405][ T11] hsr_slave_0: left promiscuous mode [ 275.406475][ T11] hsr_slave_1: left promiscuous mode [ 275.412310][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.419925][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.692903][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.418403][ T5139] Bluetooth: hci3: command tx timeout [ 276.492201][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.276551][ T5843] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 277.285365][ T5843] Bluetooth: hci4: Injecting HCI hardware error event [ 277.294320][ T5843] Bluetooth: hci4: hardware error 0x00 [ 277.525266][ T8786] ip6t_srh: unknown srh invflags 7D00 [ 278.494226][ T5139] Bluetooth: hci3: command tx timeout [ 279.152946][ T11] veth1_macvtap: left promiscuous mode [ 279.158506][ T11] veth0_macvtap: left promiscuous mode [ 279.206339][ T11] veth1_vlan: left promiscuous mode [ 279.222951][ T11] veth0_vlan: left promiscuous mode [ 280.345510][ T5843] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 280.573477][ T5843] Bluetooth: hci3: command tx timeout [ 281.139618][ T11] team0 (unregistering): Port device team_slave_1 removed [ 281.185691][ T11] team0 (unregistering): Port device team_slave_0 removed [ 281.649281][ T8832] lo: entered promiscuous mode [ 281.668123][ T8835] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 281.734695][ T8831] lo: left promiscuous mode [ 281.873630][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 281.889968][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 282.641757][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.684604][ T5843] Bluetooth: hci3: command tx timeout [ 282.866878][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.113326][ T8737] bridge_slave_0: entered allmulticast mode [ 283.145297][ T8737] bridge_slave_0: entered promiscuous mode [ 283.182970][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.190105][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.313938][ T8737] bridge_slave_1: entered allmulticast mode [ 283.357931][ T8737] bridge_slave_1: entered promiscuous mode [ 284.417591][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.463064][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.538784][ T8737] team0: Port device team_slave_0 added [ 284.580408][ T8737] team0: Port device team_slave_1 added [ 284.765210][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.772573][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.228643][ T8737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.661537][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.690519][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.820320][ T8737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.530374][ T8902] netlink: 96 bytes leftover after parsing attributes in process `syz.0.660'. [ 286.737108][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 286.737126][ T29] audit: type=1800 audit(1740594998.259:266): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.666" name="bus" dev="overlay" ino=61 res=0 errno=0 [ 286.823687][ T8737] hsr_slave_0: entered promiscuous mode [ 287.542747][ T8737] hsr_slave_1: entered promiscuous mode [ 287.549641][ T8737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.558619][ T8737] Cannot create hsr debugfs directory [ 287.620410][ T8927] set match dimension is over the limit! [ 288.009448][ T1151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.422232][ T1151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.559431][ T1151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.613718][ T1151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.848456][ T1151] bridge_slave_1: left allmulticast mode [ 290.893672][ T1151] bridge_slave_1: left promiscuous mode [ 290.904090][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.945602][ T1151] bridge_slave_0: left allmulticast mode [ 290.968915][ T5139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.979928][ T5139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.999467][ T5139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.008337][ T5139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.016564][ T5139] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.023935][ T5139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.028078][ T1151] bridge_slave_0: left promiscuous mode [ 291.094096][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.548946][ T8980] rdma_op ffff8880594aa1f0 conn xmit_rdma 0000000000000000 [ 291.772387][ C0] net_ratelimit: 10 callbacks suppressed [ 291.772404][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 292.835788][ T29] audit: type=1326 audit(1740595004.359:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f344cf8d169 code=0x0 [ 293.132314][ T5843] Bluetooth: hci4: command tx timeout [ 294.889166][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.939295][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.984635][ T1151] bond0 (unregistering): Released all slaves [ 295.212461][ T5843] Bluetooth: hci4: command tx timeout [ 295.568612][ T8737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.620341][ T8737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.746286][ T1151] hsr_slave_0: left promiscuous mode [ 295.780554][ T1151] hsr_slave_1: left promiscuous mode [ 295.786668][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.501057][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.514405][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.528080][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.582003][ T1151] veth1_macvtap: left promiscuous mode [ 296.592251][ T1151] veth0_macvtap: left promiscuous mode [ 296.608157][ T1151] veth1_vlan: left promiscuous mode [ 296.615755][ T1151] veth0_vlan: left promiscuous mode [ 297.363692][ T5843] Bluetooth: hci4: command tx timeout [ 299.393807][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 299.397403][ T5843] Bluetooth: hci4: command tx timeout [ 299.486485][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 300.374203][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 300.607014][ T8737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.656748][ T9058] bridge_slave_0: left allmulticast mode [ 300.666360][ T9058] bridge_slave_0: left promiscuous mode [ 300.673396][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.699109][ T9058] bridge_slave_1: left allmulticast mode [ 300.710498][ T9058] bridge_slave_1: left promiscuous mode [ 300.717366][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.730252][ T9058] bond0: (slave bond_slave_0): Releasing backup interface [ 300.746802][ T9058] bond0: (slave bond_slave_1): Releasing backup interface [ 300.786616][ T9058] team0: Port device team_slave_0 removed [ 300.808639][ T9058] team0: Port device team_slave_1 removed [ 300.820280][ T9058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.828450][ T9058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.843793][ T9058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.861653][ T9058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.955627][ T9060] team0: Mode changed to "loadbalance" [ 300.989504][ T8737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.449066][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.630640][ T8737] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.937233][ T8971] chnl_net:caif_netlink_parms(): no params data found [ 302.435197][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.442396][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.463177][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.470329][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.900060][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 302.912248][ T9113] xt_connbytes: Forcing CT accounting to be enabled [ 302.919242][ T9113] Cannot find del_set index 1 as target [ 303.658004][ T2151] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 303.814871][ T2151] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 303.992218][ T2151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.022046][ T2151] usb 3-1: config 0 descriptor?? [ 304.431271][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.462354][ T2151] ath6kl: Failed to submit usb control message: -71 [ 304.469024][ T2151] ath6kl: unable to send the bmi data to the device: -71 [ 304.476263][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.485399][ T8971] bridge_slave_0: entered allmulticast mode [ 304.492314][ T2151] ath6kl: Unable to send get target info: -71 [ 304.499630][ T8971] bridge_slave_0: entered promiscuous mode [ 304.505666][ T2151] ath6kl: Failed to init ath6kl core: -71 [ 304.514167][ T2151] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 304.549607][ T8737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.591777][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.599643][ T2151] usb 3-1: USB disconnect, device number 15 [ 304.618346][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.635908][ T8971] bridge_slave_1: entered allmulticast mode [ 304.653045][ T8971] bridge_slave_1: entered promiscuous mode [ 305.519761][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.593725][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.748309][ T8971] team0: Port device team_slave_0 added [ 305.789871][ T8971] team0: Port device team_slave_1 added [ 305.884715][ T9149] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 305.896759][ T9155] sctp: [Deprecated]: syz.0.714 (pid 9155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.896759][ T9155] Use struct sctp_sack_info instead [ 305.975264][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.006325][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.041268][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.080779][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.090272][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.119676][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 306.138755][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.244278][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.323178][ T8971] hsr_slave_0: entered promiscuous mode [ 306.392897][ T8971] hsr_slave_1: entered promiscuous mode [ 306.422295][ T8971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.429915][ T8971] Cannot create hsr debugfs directory [ 306.794478][ T8971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.827955][ T8971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.881183][ T8971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.939042][ T8971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.993168][ T8737] veth0_vlan: entered promiscuous mode [ 307.250927][ T8737] veth1_vlan: entered promiscuous mode [ 308.268317][ T8737] veth0_macvtap: entered promiscuous mode [ 308.309108][ T8737] veth1_macvtap: entered promiscuous mode [ 308.382931][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.400348][ T9211] sctp: [Deprecated]: syz.1.724 (pid 9211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.400348][ T9211] Use struct sctp_sack_info instead [ 308.436520][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.472374][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.502854][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.533404][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.622875][ T8971] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.658717][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.665857][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.714587][ T8737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.731763][ T8737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.749556][ T8737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.759112][ T8737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.833952][ T8971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.881046][ T8971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.971901][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.979116][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.941043][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'. [ 310.075619][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.140666][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.308163][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.574080][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.593349][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.892751][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 311.901405][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 312.009327][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 312.085737][ T9256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.223290][ T9256] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.268841][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 313.551238][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 313.663527][ T8971] veth0_vlan: entered promiscuous mode [ 314.369788][ T6362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.398535][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 314.413662][ T8971] veth1_vlan: entered promiscuous mode [ 314.453947][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 314.464469][ T8971] veth0_macvtap: entered promiscuous mode [ 314.530284][ T6362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.559978][ T8971] veth1_macvtap: entered promiscuous mode [ 314.574080][ T9256] wlan0 speed is unknown, defaulting to 1000 [ 314.654328][ T6362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.703385][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.742014][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.767975][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.794483][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.815858][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.842096][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.861891][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.883066][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.924708][ T6362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.949782][ T8971] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.958832][ T8971] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.968376][ T8971] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.978339][ T8971] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.199374][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.211078][ T6362] bridge_slave_1: left allmulticast mode [ 315.220982][ T6362] bridge_slave_1: left promiscuous mode [ 315.222680][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.234965][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.250543][ T6362] bridge_slave_0: left allmulticast mode [ 315.256943][ T6362] bridge_slave_0: left promiscuous mode [ 315.263225][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.776504][ T6362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.788640][ T6362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.800265][ T6362] bond0 (unregistering): Released all slaves [ 315.819066][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.829621][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.838645][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.849411][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.871671][ T5139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 315.881459][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.964385][ T6376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.982003][ T6376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.250958][ T9308] wlan0 speed is unknown, defaulting to 1000 [ 317.089458][ T6362] hsr_slave_0: left promiscuous mode [ 317.146246][ T6362] hsr_slave_1: left promiscuous mode [ 317.156666][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.407462][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.414206][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.469385][ T5843] Bluetooth: hci3: command tx timeout [ 318.469514][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.767671][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.775653][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.917491][ T6362] veth1_macvtap: left promiscuous mode [ 318.944928][ T9341] netlink: 120 bytes leftover after parsing attributes in process `syz.6.744'. [ 318.951960][ T6362] veth0_macvtap: left promiscuous mode [ 318.959726][ T9341] netlink: 128 bytes leftover after parsing attributes in process `syz.6.744'. [ 318.984201][ T6362] veth1_vlan: left promiscuous mode [ 318.989824][ T6362] veth0_vlan: left promiscuous mode [ 320.652050][ T5843] Bluetooth: hci3: command tx timeout [ 320.978028][ T9364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'. [ 321.200127][ T9363] slcan: can't register candev [ 321.237898][ T9363] Falling back ldisc for ptm0. [ 321.506737][ T9373] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 321.707508][ T6362] team0 (unregistering): Port device team_slave_1 removed [ 321.750867][ T6362] team0 (unregistering): Port device team_slave_0 removed [ 322.791960][ T5843] Bluetooth: hci3: command tx timeout [ 323.485252][ T9308] chnl_net:caif_netlink_parms(): no params data found [ 323.922403][ T9397] capability: warning: `syz.2.760' uses deprecated v2 capabilities in a way that may be insecure [ 324.009486][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.053274][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.060503][ T9308] bridge_slave_0: entered allmulticast mode [ 324.103197][ T9308] bridge_slave_0: entered promiscuous mode [ 324.181995][ T5909] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 324.232440][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.269239][ T9409] openvswitch: netlink: Missing key (keys=40, expected=100) [ 324.291285][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.407782][ T9308] bridge_slave_1: entered allmulticast mode [ 324.637686][ T9308] bridge_slave_1: entered promiscuous mode [ 324.814072][ T5843] Bluetooth: hci3: command tx timeout [ 324.931966][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 324.939269][ T5909] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 324.951955][ T5909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.962171][ T5909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.972380][ T5909] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.020845][ T5909] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.041427][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.054158][ T9308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.107087][ T9308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.254701][ T9308] team0: Port device team_slave_0 added [ 325.507592][ T5909] usb 7-1: GET_CAPABILITIES returned 0 [ 325.526811][ T5909] usbtmc 7-1:16.0: can't read capabilities [ 326.533048][ T9308] team0: Port device team_slave_1 added [ 326.962120][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.979462][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.092049][ T9308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.126320][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.135638][ T1205] usb 7-1: USB disconnect, device number 2 [ 327.137999][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.228300][ T9308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.298595][ T9308] hsr_slave_0: entered promiscuous mode [ 327.314069][ T9308] hsr_slave_1: entered promiscuous mode [ 327.314083][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.772'. [ 327.320283][ T9308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.343322][ T9308] Cannot create hsr debugfs directory [ 328.227694][ T9308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.249599][ T9308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.264699][ T9308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.285876][ T9308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.427076][ T9308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.456715][ T9308] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.473801][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.480965][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.520478][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.527665][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.836144][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.780'. [ 328.845837][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 329.836441][ T9308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.155031][ T9514] xt_l2tp: v2 doesn't support IP mode [ 332.462107][ T9308] veth0_vlan: entered promiscuous mode [ 332.474651][ T9308] veth1_vlan: entered promiscuous mode [ 332.496721][ T9308] veth0_macvtap: entered promiscuous mode [ 332.550320][ T9308] veth1_macvtap: entered promiscuous mode [ 332.566389][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.581558][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.732597][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 332.742900][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.518928][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.530329][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.661962][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.703452][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.750334][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.838413][ T9308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.873166][ T9308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.898875][ T9308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.952090][ T9308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.310658][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 334.521582][ T29] audit: type=1326 audit(1740595045.999:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x0 [ 334.716860][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.757309][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.851261][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.883078][ T9569] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[9569] [ 334.893185][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.214266][ T9580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 337.816736][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.863356][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 338.104304][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.251668][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.453820][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.659403][ T64] bridge_slave_1: left allmulticast mode [ 338.665457][ T64] bridge_slave_1: left promiscuous mode [ 338.671199][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.726991][ T64] bridge_slave_0: left allmulticast mode [ 338.752036][ T64] bridge_slave_0: left promiscuous mode [ 338.762466][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.979091][ T9644] netlink: 56 bytes leftover after parsing attributes in process `syz.2.814'. [ 338.988540][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 340.073888][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.083759][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.094545][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.108449][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.121132][ T5139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.128937][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.360672][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.371685][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.383438][ T64] bond0 (unregistering): Released all slaves [ 340.444173][ T9655] wlan0 speed is unknown, defaulting to 1000 [ 340.541278][ T9658] wlan0 speed is unknown, defaulting to 1000 [ 340.718744][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.818'. [ 342.423202][ T5843] Bluetooth: hci3: command tx timeout [ 342.743594][ T9700] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 342.932033][ T64] hsr_slave_0: left promiscuous mode [ 342.947395][ T64] hsr_slave_1: left promiscuous mode [ 342.956782][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.968086][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.786913][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.796014][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.828059][ T64] veth1_macvtap: left promiscuous mode [ 343.833935][ T64] veth0_macvtap: left promiscuous mode [ 343.839926][ T64] veth1_vlan: left promiscuous mode [ 343.845452][ T64] veth0_vlan: left promiscuous mode [ 343.872323][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.827'. [ 345.356833][ T5843] Bluetooth: hci3: command tx timeout [ 346.671678][ T64] team0 (unregistering): Port device team_slave_1 removed [ 346.721642][ T64] team0 (unregistering): Port device team_slave_0 removed [ 347.193923][ T9704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.229500][ T9706] veth5: entered promiscuous mode [ 347.247020][ T9706] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 347.390338][ T5843] Bluetooth: hci3: command tx timeout [ 347.708517][ T9735] xt_CT: No such helper "syz0" [ 347.720720][ T9658] chnl_net:caif_netlink_parms(): no params data found [ 348.824451][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.855203][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.194851][ T9658] bridge_slave_0: entered allmulticast mode [ 349.284786][ T9658] bridge_slave_0: entered promiscuous mode [ 349.612431][ T5843] Bluetooth: hci3: command tx timeout [ 349.697197][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.743696][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.760296][ T9658] bridge_slave_1: entered allmulticast mode [ 349.807697][ T9779] fuse: Bad value for 'fd' [ 349.823832][ T9658] bridge_slave_1: entered promiscuous mode [ 349.992127][ T29] audit: type=1804 audit(1740595317.504:269): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.843" name="/newroot/22/bus/file0" dev="overlay" ino=139 res=1 errno=0 [ 350.054095][ T9658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.274941][ T9658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.228195][ T9658] team0: Port device team_slave_0 added [ 351.472739][ T9658] team0: Port device team_slave_1 added [ 352.901413][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.912197][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.980847][ T9658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.013008][ T9820] tipc: Started in network mode [ 353.017985][ T9820] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 353.026626][ T9820] tipc: Enabled bearer , priority 10 [ 353.048545][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.079448][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.271980][ T9658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.144735][ T25] tipc: Node number set to 15444650 [ 354.364082][ T9658] hsr_slave_0: entered promiscuous mode [ 354.610748][ T9658] hsr_slave_1: entered promiscuous mode [ 354.640864][ T9658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.672263][ T9658] Cannot create hsr debugfs directory [ 357.223207][ T9] libceph: connect (1)[c::]:6789 error -101 [ 357.229862][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 357.239890][ T9868] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.248821][ T9868] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.257645][ T9868] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.266390][ T9868] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.326880][ T9868] vxlan0: entered allmulticast mode [ 357.355636][ T9868] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 357.479027][ T9869] ceph: No mds server is up or the cluster is laggy [ 357.597248][ T9878] netlink: 168 bytes leftover after parsing attributes in process `syz.2.866'. [ 358.513297][ T29] audit: type=1326 audit(1740595326.034:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.524650][ T9658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.602041][ T29] audit: type=1326 audit(1740595326.034:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.660240][ T29] audit: type=1326 audit(1740595326.034:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.692897][ T29] audit: type=1326 audit(1740595326.034:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.722454][ T29] audit: type=1326 audit(1740595326.034:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.752023][ T29] audit: type=1326 audit(1740595326.034:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.781142][ T29] audit: type=1326 audit(1740595326.034:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.813819][ T29] audit: type=1326 audit(1740595326.034:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.843661][ T29] audit: type=1326 audit(1740595326.064:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 358.873142][ T29] audit: type=1326 audit(1740595326.074:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9879 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 360.140926][ T9658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.169977][ T9658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.345425][ T9658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.540848][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 360.668720][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.530125][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.577203][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.584364][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.296865][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.304048][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.526252][ T9658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.716958][ T9658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.778344][ T9967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.247615][ T9658] veth0_vlan: entered promiscuous mode [ 366.293844][ T9658] veth1_vlan: entered promiscuous mode [ 366.371893][ T9658] veth0_macvtap: entered promiscuous mode [ 366.457245][ T9658] veth1_macvtap: entered promiscuous mode [ 366.489584][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.531291][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.806906][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.646000][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.672223][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.689981][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.701229][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.720294][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.751296][ T9658] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.779149][ T9658] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.791031][ T9658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.814957][ T9658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.973553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.017085][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.053473][T10029] netlink: 165 bytes leftover after parsing attributes in process `syz.2.897'. [ 368.094737][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.118787][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.278645][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 370.472286][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 370.578161][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 370.714860][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 370.804025][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.962897][ T9] usb 7-1: config 0 descriptor?? [ 371.019207][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input6 [ 371.072247][T10078] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 371.145143][T10081] xt_connbytes: Forcing CT accounting to be enabled [ 371.234764][ T5185] bcm5974 7-1:0.0: could not read from device [ 371.321255][ T9] bcm5974 7-1:0.0: could not read from device [ 371.344025][ T5185] bcm5974 7-1:0.0: could not read from device [ 371.368641][ T9] input: failed to attach handler mousedev to device input6, error: -5 [ 371.389895][ T5185] bcm5974 7-1:0.0: could not read from device [ 371.428685][ T9] usb 7-1: USB disconnect, device number 3 [ 372.620778][ T6376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.901495][ T6376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.993536][ T6376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.083020][ T6376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.257130][ T6376] bridge_slave_1: left allmulticast mode [ 373.273711][ T6376] bridge_slave_1: left promiscuous mode [ 373.280786][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.308945][ T6376] bridge_slave_0: left allmulticast mode [ 373.319081][ T6376] bridge_slave_0: left promiscuous mode [ 373.327895][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.957885][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.915'. [ 375.648327][T10168] rdma_op ffff88805c90a1f0 conn xmit_rdma 0000000000000000 [ 376.456409][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.486296][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.510830][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.527132][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.536285][ T5139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 376.554303][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.620362][ T6376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.639254][ T6376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.668103][ T6376] bond0 (unregistering): Released all slaves [ 376.679658][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.919'. [ 376.892780][T10199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.924'. [ 377.077548][T10191] team0 (unregistering): Port device team_slave_0 removed [ 377.089042][T10191] team0 (unregistering): Port device team_slave_1 removed [ 377.124162][T10178] bridge_slave_0: left allmulticast mode [ 377.129906][T10178] bridge_slave_0: left promiscuous mode [ 377.139807][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.160145][T10178] bridge_slave_1: left allmulticast mode [ 377.165986][T10178] bridge_slave_1: left promiscuous mode [ 377.171672][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.186930][T10178] bond0: (slave bond_slave_0): Releasing backup interface [ 377.205140][T10178] bond0: (slave bond_slave_1): Releasing backup interface [ 377.224184][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.231585][T10178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.243660][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.251077][T10178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.273802][T10186] vlan0: entered promiscuous mode [ 377.359964][T10197] batman_adv: batadv0: Adding interface: geneve2 [ 377.369878][T10197] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 377.400534][T10179] wlan0 speed is unknown, defaulting to 1000 [ 377.520486][ T6376] hsr_slave_0: left promiscuous mode [ 377.537158][ T6376] hsr_slave_1: left promiscuous mode [ 377.546760][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.558919][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.571401][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.586353][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.636826][ T6376] veth1_macvtap: left promiscuous mode [ 377.647724][ T6376] veth0_macvtap: left promiscuous mode [ 377.656174][ T6376] veth1_vlan: left promiscuous mode [ 377.661575][ T6376] veth0_vlan: left promiscuous mode [ 378.340191][T10250] TCP: out of memory -- consider tuning tcp_mem [ 379.252291][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.260492][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.351976][ T5139] Bluetooth: hci3: command tx timeout [ 379.504734][T10258] kvm: pic: non byte read [ 379.520610][T10258] kvm: pic: single mode not supported [ 379.520796][T10258] kvm: pic: level sensitive irq not supported [ 379.529460][T10258] kvm: pic: single mode not supported [ 379.535645][T10258] kvm: pic: level sensitive irq not supported [ 379.681465][ T6376] team0 (unregistering): Port device team_slave_1 removed [ 379.758908][ T6376] team0 (unregistering): Port device team_slave_0 removed [ 381.403475][ T5139] Bluetooth: hci3: command tx timeout [ 381.846197][T10282] netlink: 344 bytes leftover after parsing attributes in process `syz.1.943'. [ 381.888017][T10179] chnl_net:caif_netlink_parms(): no params data found [ 382.247027][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.254609][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.270303][T10179] bridge_slave_0: entered allmulticast mode [ 382.292795][T10179] bridge_slave_0: entered promiscuous mode [ 382.310026][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.333199][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.349775][T10179] bridge_slave_1: entered allmulticast mode [ 382.412141][T10179] bridge_slave_1: entered promiscuous mode [ 383.438527][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.451997][ T5139] Bluetooth: hci3: command tx timeout [ 383.464597][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.964770][T10321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.951'. [ 383.973865][T10321] netlink: 72 bytes leftover after parsing attributes in process `syz.1.951'. [ 383.982762][T10321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.951'. [ 383.991613][T10321] netlink: 72 bytes leftover after parsing attributes in process `syz.1.951'. [ 384.291598][T10179] team0: Port device team_slave_0 added [ 384.398642][T10179] team0: Port device team_slave_1 added [ 384.471170][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 384.471236][ T29] audit: type=1326 audit(1740595351.974:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10325 comm="syz.1.953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f344cf8d169 code=0x0 [ 385.226201][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.954'. [ 385.237378][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.258496][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.322256][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.363845][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.378775][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.429582][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.954'. [ 385.442352][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.514524][T10351] overlayfs: failed to clone upperpath [ 385.532998][ T5139] Bluetooth: hci3: command tx timeout [ 385.646090][T10179] hsr_slave_0: entered promiscuous mode [ 385.663158][T10179] hsr_slave_1: entered promiscuous mode [ 385.689682][T10179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.739719][T10179] Cannot create hsr debugfs directory [ 387.873859][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 389.293544][ T29] audit: type=1804 audit(1740595356.824:283): pid=10390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.970" name="/newroot/52/file0" dev="tmpfs" ino=300 res=1 errno=0 [ 390.879763][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 390.969088][T10427] Cannot find set identified by id 0 to match [ 392.140567][T10419] netlink: 550 bytes leftover after parsing attributes in process `syz.2.979'. [ 392.305146][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 393.904359][T10179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.703059][T10179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.762426][T10179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 394.889655][T10179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.829094][T10179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.885471][T10179] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.922497][T10472] netlink: 'syz.6.994': attribute type 10 has an invalid length. [ 395.937574][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.944734][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.010087][T10472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 396.073987][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.081114][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.239590][T10179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.852536][ T29] audit: type=1107 audit(1740595365.374:284): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 398.661764][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 398.685014][T10179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.685153][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 398.995268][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 399.285549][T10179] veth0_vlan: entered promiscuous mode [ 400.042554][T10179] veth1_vlan: entered promiscuous mode [ 400.129385][T10179] veth0_macvtap: entered promiscuous mode [ 400.198236][T10179] veth1_macvtap: entered promiscuous mode [ 400.260488][T10179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.290826][T10179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.368005][T10520] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1005'. [ 401.042646][T10179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.054551][T10179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.065212][T10179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.074002][T10179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.083269][T10179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.092317][T10179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.209937][T10526] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1006'. [ 401.407348][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.447661][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.530217][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.539313][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.614069][T10569] No such timeout policy "syz1" [ 406.514872][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.009065][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.195229][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.355745][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.723402][ T11] bridge_slave_1: left allmulticast mode [ 407.736859][ T11] bridge_slave_1: left promiscuous mode [ 407.762336][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.775864][ T11] bridge_slave_0: left allmulticast mode [ 407.792417][ T11] bridge_slave_0: left promiscuous mode [ 407.798216][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.302823][T10624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1026'. [ 409.243870][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 409.262195][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 409.494460][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.504737][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.513517][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.523593][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.531132][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 409.540517][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.722420][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.738613][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.758180][ T11] bond0 (unregistering): Released all slaves [ 409.895832][T10634] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 409.933780][T10634] ip6gretap0: entered promiscuous mode [ 409.964471][T10634] hsr2: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 410.084420][T10634] hsr2: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 410.640423][T10636] ipvlan2: entered promiscuous mode [ 410.673842][T10636] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 410.681332][T10636] team0: Device ipvlan2 is already an upper device of the team interface [ 411.730553][T10650] syz.6.1032 (10650): drop_caches: 2 [ 411.744394][ T5139] Bluetooth: hci3: command tx timeout [ 412.300187][T10670] team0: Port device virt_wifi0 added [ 413.027094][T10637] wlan0 speed is unknown, defaulting to 1000 [ 413.705695][ T11] hsr_slave_0: left promiscuous mode [ 413.718596][ T11] hsr_slave_1: left promiscuous mode [ 413.731113][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.852423][ T5139] Bluetooth: hci3: command tx timeout [ 414.217467][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.602543][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.610585][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.890371][ T11] veth1_macvtap: left promiscuous mode [ 414.900575][ T11] veth0_macvtap: left promiscuous mode [ 414.917017][ T11] veth1_vlan: left promiscuous mode [ 414.984361][T10707] overlayfs: failed to clone lowerpath [ 415.613336][ T11] veth0_vlan: left promiscuous mode [ 416.176051][ T5843] Bluetooth: hci3: command tx timeout [ 416.817452][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 418.252103][ T5139] Bluetooth: hci3: command tx timeout [ 420.610076][ T11] team0 (unregistering): Port device team_slave_1 removed [ 420.767765][ T11] team0 (unregistering): Port device team_slave_0 removed [ 422.738052][ T29] audit: type=1800 audit(1740595390.264:285): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1065" name="file1" dev="tmpfs" ino=1618 res=0 errno=0 [ 426.842149][ T35] 0: reclassify loop, rule prio 0, protocol 800 [ 427.905486][T10637] chnl_net:caif_netlink_parms(): no params data found [ 428.420954][T10637] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.440312][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.500860][T10637] bridge_slave_0: entered allmulticast mode [ 428.528563][T10637] bridge_slave_0: entered promiscuous mode [ 428.559859][T10637] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.567155][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.574472][T10637] bridge_slave_1: entered allmulticast mode [ 428.581388][T10637] bridge_slave_1: entered promiscuous mode [ 429.430099][T10637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.471974][T10881] hsr0: entered promiscuous mode [ 429.497392][T10883] hsr_slave_0: left promiscuous mode [ 429.515826][T10883] hsr_slave_1: left promiscuous mode [ 429.609619][T10889] 0: reclassify loop, rule prio 0, protocol 800 [ 429.660258][T10895] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 429.767424][T10637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.360873][T10900] libceph: resolve '. [ 430.360873][T10900] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 430.360873][T10900] ' (ret=-3): failed [ 430.662337][T10904] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 430.695202][T10637] team0: Port device team_slave_0 added [ 430.723496][T10637] team0: Port device team_slave_1 added [ 430.825879][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'. [ 431.733747][T10910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 431.744474][T10910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 431.798825][T10910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 431.829703][T10910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 431.846826][T10910] bond2: (slave geneve3): making interface the new active one [ 432.093219][T10910] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 433.582797][T10913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.893026][T10637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.900023][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.949918][T10637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.962857][T10637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.969825][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.058390][T10637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.266567][T10946] netlink: 'syz.2.1097': attribute type 4 has an invalid length. [ 435.382713][T10637] hsr_slave_0: entered promiscuous mode [ 435.392940][T10637] hsr_slave_1: entered promiscuous mode [ 435.399023][T10637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.421576][T10637] Cannot create hsr debugfs directory [ 436.930917][T10977] overlayfs: failed to clone upperpath [ 440.275872][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.282430][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.678661][T10637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.884960][T10637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.918959][T10637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.954386][T10637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 444.534884][T10637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.610328][T10637] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.648530][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.655712][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.701049][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.708147][T10837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.071446][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 446.486670][T10637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.731537][T10637] veth0_vlan: entered promiscuous mode [ 448.771519][T10637] veth1_vlan: entered promiscuous mode [ 448.882629][T10637] veth0_macvtap: entered promiscuous mode [ 448.905898][T10637] veth1_macvtap: entered promiscuous mode [ 448.955228][T10637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.009702][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.045358][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.080800][T10637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.138223][T10637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.176679][T10637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.202037][T10637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.221159][T10637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.575996][T11148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.438089][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.512788][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.651097][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.281079][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.339345][T11159] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 455.897300][ T47] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 455.939208][ T47] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.976091][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 456.152450][ T5829] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 456.179989][ T6378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.340534][ T6378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.369036][ T5829] usb 7-1: Using ep0 maxpacket: 16 [ 456.377116][ T5829] usb 7-1: config 0 has no interfaces? [ 456.390090][ T5829] usb 7-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 456.417870][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.443778][ T5829] usb 7-1: config 0 descriptor?? [ 456.510369][ T6378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.609564][ T6378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.993588][ T5829] usb 7-1: USB disconnect, device number 4 [ 457.870111][ T6378] bridge_slave_1: left allmulticast mode [ 457.884406][ T6378] bridge_slave_1: left promiscuous mode [ 457.978781][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.428344][ T6378] bridge_slave_0: left allmulticast mode [ 458.441275][ T6378] bridge_slave_0: left promiscuous mode [ 458.470848][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.814247][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.824859][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.842025][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 460.126863][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 460.145359][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 460.153704][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.252643][ T5139] Bluetooth: hci3: command tx timeout [ 463.605534][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.632743][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.649413][ T6378] bond0 (unregistering): Released all slaves [ 463.694906][T11243] bond0: (slave wlan1): Releasing backup interface [ 463.869105][T11254] wlan0 speed is unknown, defaulting to 1000 [ 464.351529][ T5139] Bluetooth: hci3: command tx timeout [ 465.824893][ T6378] hsr_slave_0: left promiscuous mode [ 466.572189][ T5139] Bluetooth: hci3: command tx timeout [ 466.702227][ T6378] hsr_slave_1: left promiscuous mode [ 466.754269][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.781125][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.828033][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.840306][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.858843][T11318] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 466.944281][ T6378] veth1_macvtap: left promiscuous mode [ 466.949872][ T6378] veth0_macvtap: left promiscuous mode [ 466.962742][ T6378] veth1_vlan: left promiscuous mode [ 466.976986][ T6378] veth0_vlan: left promiscuous mode [ 467.520809][T11328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1173'. [ 468.101655][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 468.228217][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 468.655275][ T5843] Bluetooth: hci3: command tx timeout [ 470.660661][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 470.689785][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.743255][T11328] dummy0: entered promiscuous mode [ 470.832824][T11328] dummy0: left promiscuous mode [ 471.618428][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'. [ 472.598951][T11254] chnl_net:caif_netlink_parms(): no params data found [ 473.810011][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.918247][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.989602][T11254] bridge_slave_0: entered allmulticast mode [ 473.998806][T11254] bridge_slave_0: entered promiscuous mode [ 474.013745][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.020857][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.028662][T11254] bridge_slave_1: entered allmulticast mode [ 474.035997][T11254] bridge_slave_1: entered promiscuous mode [ 474.160116][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.314314][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.273695][T11254] team0: Port device team_slave_0 added [ 475.385270][T11254] team0: Port device team_slave_1 added [ 475.723778][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.730756][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.851357][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.889745][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.993933][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.040519][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.144420][T11254] hsr_slave_0: entered promiscuous mode [ 476.230009][T11254] hsr_slave_1: entered promiscuous mode [ 476.307391][T11254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.321164][T11254] Cannot create hsr debugfs directory [ 479.078314][T11467] lo speed is unknown, defaulting to 1000 [ 479.086829][T11467] lo speed is unknown, defaulting to 1000 [ 479.094499][T11467] lo speed is unknown, defaulting to 1000 [ 479.162450][T11474] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1205'. [ 479.171635][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1205'. [ 479.211988][T11467] infiniband sz1: set active [ 479.216902][T11467] infiniband sz1: added lo [ 479.222500][T11467] sz1: rxe_create_cq: returned err = -12 [ 479.228452][T11467] infiniband sz1: Couldn't create ib_mad CQ [ 479.234627][T11467] infiniband sz1: Couldn't open port 1 [ 479.254703][T11467] RDS/IB: sz1: added [ 479.259106][T11467] smc: adding ib device sz1 with port count 1 [ 479.265469][T11467] smc: ib device sz1 port 1 has pnetid [ 479.273724][T11467] lo speed is unknown, defaulting to 1000 [ 479.333176][T11467] lo speed is unknown, defaulting to 1000 [ 479.394865][T11467] lo speed is unknown, defaulting to 1000 [ 479.453277][T11467] lo speed is unknown, defaulting to 1000 [ 479.511819][T11467] lo speed is unknown, defaulting to 1000 [ 479.625799][ T47] lo speed is unknown, defaulting to 1000 [ 479.645925][ T47] lo speed is unknown, defaulting to 1000 [ 479.795933][T11254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.809840][T11254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.834688][T11254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.843760][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 479.868775][T11254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 480.160733][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.202708][T11493] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 481.533913][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.946101][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.953259][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.014916][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.022111][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.038332][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 482.418728][T11254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.261916][T11254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.879161][T11559] IPv6: Can't replace route, no match found [ 485.735727][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.164640][T11254] veth0_vlan: entered promiscuous mode [ 487.710238][T11254] veth1_vlan: entered promiscuous mode [ 489.758161][T11254] veth0_macvtap: entered promiscuous mode [ 489.786959][T11254] veth1_macvtap: entered promiscuous mode [ 489.800384][T11615] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 489.881335][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.426459][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.461500][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.490757][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.517845][T11254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.534354][T11254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.555013][T11254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.574522][T11254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.798960][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.848688][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.921530][T10837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.136921][T10837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.253550][T11644] batman_adv: batadv0: Adding interface: geneve2 [ 492.289793][T11644] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 492.349971][T11644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1249'. [ 492.403745][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1240'. [ 492.426236][ T5918] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 492.592035][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 492.634667][ T5918] usb 7-1: config 0 has an invalid interface number: 190 but max is 0 [ 492.654912][ T5918] usb 7-1: config 0 has no interface number 0 [ 492.691582][ T6362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.717908][ T5918] usb 7-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 492.737371][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.761798][ T5918] usb 7-1: Product: syz [ 492.778728][ T5918] usb 7-1: Manufacturer: syz [ 492.792663][ T5918] usb 7-1: SerialNumber: syz [ 492.827873][ T5918] usb 7-1: config 0 descriptor?? [ 492.874121][ T5918] ums-alauda 7-1:0.190: USB Mass Storage device detected [ 492.939002][ T6362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.085659][ T6362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.090450][ T1205] usb 7-1: USB disconnect, device number 5 [ 493.215692][ T6362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.386250][ T6362] bridge_slave_1: left allmulticast mode [ 493.396955][ T6362] bridge_slave_1: left promiscuous mode [ 493.406558][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.420703][ T6362] bridge_slave_0: left allmulticast mode [ 493.430110][ T6362] bridge_slave_0: left promiscuous mode [ 493.439684][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.907029][ T6362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.917420][ T6362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.931245][ T6362] bond0 (unregistering): Released all slaves [ 494.182047][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1245'. [ 494.191668][T11696] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 494.482305][T11699] netlink: 'syz.0.1242': attribute type 3 has an invalid length. [ 494.490136][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 497.085915][T11722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 497.249570][T11722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 497.261047][T11722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.329009][T11722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 497.339720][T11722] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 497.353460][T11722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.032106][ T6362] hsr_slave_0: left promiscuous mode [ 498.039233][ T6362] hsr_slave_1: left promiscuous mode [ 498.072488][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.080051][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.094544][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.139127][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.253400][ T6362] veth1_macvtap: left promiscuous mode [ 498.258978][ T6362] veth0_macvtap: left promiscuous mode [ 498.308560][ T6362] veth1_vlan: left promiscuous mode [ 498.334540][ T6362] veth0_vlan: left promiscuous mode [ 499.454249][T11722] Bluetooth: hci3: command tx timeout [ 501.541966][T11722] Bluetooth: hci3: command tx timeout [ 501.696933][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.724815][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.926340][ T6362] team0 (unregistering): Port device team_slave_1 removed [ 502.102808][ T6362] team0 (unregistering): Port device team_slave_0 removed [ 502.928308][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1262'. [ 503.457066][T11720] wlan0 speed is unknown, defaulting to 1000 [ 503.540630][T11720] lo speed is unknown, defaulting to 1000 [ 503.612231][T11722] Bluetooth: hci3: command tx timeout [ 503.737366][T11773] vlan2: entered promiscuous mode [ 503.777951][T11773] team0: entered promiscuous mode [ 503.823478][T11773] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 504.107048][T11773] team0: Device vlan2 is already an upper device of the team interface [ 504.353022][T11773] team0: left promiscuous mode [ 504.957085][T11773] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 505.429596][T11800] netlink: 'syz.2.1269': attribute type 4 has an invalid length. [ 505.722148][T11722] Bluetooth: hci3: command tx timeout [ 506.134682][ T2151] lo speed is unknown, defaulting to 1000 [ 506.141018][ T2151] lo speed is unknown, defaulting to 1000 [ 507.383330][T11722] Bluetooth: hci2: unexpected cc 0x042f length: 1 < 7 [ 507.391215][T11722] Bluetooth: hci2: unexpected event for opcode 0x042f [ 508.305686][T11720] chnl_net:caif_netlink_parms(): no params data found [ 509.706082][T11850] x_tables: unsorted underflow at hook 3 [ 510.550456][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.557754][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.565987][T11720] bridge_slave_0: entered allmulticast mode [ 510.573133][T11720] bridge_slave_0: entered promiscuous mode [ 510.581140][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.588556][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.696545][T11720] bridge_slave_1: entered allmulticast mode [ 510.713447][T11720] bridge_slave_1: entered promiscuous mode [ 510.799964][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.856450][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.240278][T11720] team0: Port device team_slave_0 added [ 512.424997][T11720] team0: Port device team_slave_1 added [ 512.506245][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 512.515232][T11884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1289'. [ 512.573778][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.594913][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.035260][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.583225][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.590558][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.667394][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.896678][T11919] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 516.282514][T11720] hsr_slave_0: entered promiscuous mode [ 516.300636][T11720] hsr_slave_1: entered promiscuous mode [ 517.308171][T11720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.342091][T11720] Cannot create hsr debugfs directory [ 518.153323][T11937] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1300'. [ 522.182406][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 522.194028][T11983] netlink: zone id is out of range [ 522.210360][T11983] netlink: zone id is out of range [ 522.218683][T11983] netlink: zone id is out of range [ 522.244413][T11983] netlink: zone id is out of range [ 522.249734][T11983] netlink: zone id is out of range [ 522.255208][T11983] netlink: zone id is out of range [ 522.260854][T11983] netlink: zone id is out of range [ 522.266352][T11983] netlink: zone id is out of range [ 522.271579][T11983] netlink: zone id is out of range [ 523.007795][T11991] xt_socket: unknown flags 0x4 [ 526.909006][T11720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 526.931231][T11720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 526.982791][T11720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 527.052592][T11720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.226165][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.277882][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.165837][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.173028][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.182450][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.189561][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.688253][T11720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.679047][T12090] capability: warning: `syz.0.1330' uses 32-bit capabilities (legacy support in use) [ 533.698361][T12088] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1331'. [ 533.709425][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 533.807228][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.021089][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 535.378533][T12110] ptrace attach of "./syz-executor exec"[5822] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 537.438012][T12125] virtio-fs: tag <(null)> not found [ 537.632746][T12132] netlink: 'syz.1.1341': attribute type 12 has an invalid length. [ 539.468467][T11720] veth0_vlan: entered promiscuous mode [ 539.480822][T11720] veth1_vlan: entered promiscuous mode [ 539.613038][T11720] veth0_macvtap: entered promiscuous mode [ 540.084306][T11720] veth1_macvtap: entered promiscuous mode [ 540.284200][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.297728][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.308432][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.320542][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.334931][T11720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.344197][T11720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.325877][T11720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.334888][T11720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.073546][ T6372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.141976][ T6372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.218183][T10837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.226141][T10837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.348758][ T6378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.517171][ T6378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.597397][ T6378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.667627][ T6378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.820800][ T6378] bridge_slave_1: left allmulticast mode [ 548.827827][ T6378] bridge_slave_1: left promiscuous mode [ 548.834448][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.844638][ T6378] bridge_slave_0: left allmulticast mode [ 548.850288][ T6378] bridge_slave_0: left promiscuous mode [ 548.856456][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.202898][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.220173][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.230415][ T6378] bond0 (unregistering): Released all slaves [ 549.587290][ T6378] hsr_slave_0: left promiscuous mode [ 549.596600][ T6378] hsr_slave_1: left promiscuous mode [ 549.610936][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.630570][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.639041][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.653574][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.683698][ T6378] veth1_macvtap: left promiscuous mode [ 549.689266][ T6378] veth0_macvtap: left promiscuous mode [ 549.695590][ T6378] veth1_vlan: left promiscuous mode [ 549.701014][ T6378] veth0_vlan: left promiscuous mode [ 553.238908][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 553.290741][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.302505][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.311551][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.323246][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.341033][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 553.353473][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 553.658642][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 554.440552][ T29] audit: type=1326 audit(1740595521.184:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12291 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 554.477527][ T29] audit: type=1326 audit(1740595521.184:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12291 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 554.530049][ T29] audit: type=1326 audit(1740595521.184:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12291 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 554.557072][ T29] audit: type=1326 audit(1740595521.184:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12291 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 554.884515][ T29] audit: type=1326 audit(1740595521.194:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12291 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 554.951783][ T29] audit: type=1326 audit(1740595521.194:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12291 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec1b8d169 code=0x7ffc0000 [ 555.020544][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 555.135432][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 555.452734][ T5843] Bluetooth: hci3: command tx timeout [ 557.531990][ T5843] Bluetooth: hci3: command tx timeout [ 558.352915][T12289] wlan0 speed is unknown, defaulting to 1000 [ 558.359886][T12289] lo speed is unknown, defaulting to 1000 [ 560.102823][T12341] net_ratelimit: 5 callbacks suppressed [ 560.102901][T12341] openvswitch: netlink: Missing valid actions attribute. [ 560.116024][T12341] openvswitch: netlink: Actions may not be safe on all matching packets [ 560.210409][ T5843] Bluetooth: hci3: command tx timeout [ 561.511525][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'. [ 562.439526][ T5843] Bluetooth: hci3: command tx timeout [ 563.501291][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.542026][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.718066][T12289] chnl_net:caif_netlink_parms(): no params data found [ 565.136307][T12289] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.164585][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.199054][T12289] bridge_slave_0: entered allmulticast mode [ 565.270368][T12289] bridge_slave_0: entered promiscuous mode [ 565.281138][T12289] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.294668][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.307839][T12289] bridge_slave_1: entered allmulticast mode [ 565.329199][T12289] bridge_slave_1: entered promiscuous mode [ 565.423688][T12289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.465167][T12289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.742070][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1409'. [ 567.849226][T12289] team0: Port device team_slave_0 added [ 568.610745][T12289] team0: Port device team_slave_1 added [ 569.574334][T12289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.747661][T12289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.762549][T12289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.784202][T12289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.791190][T12289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.054723][T12289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.124356][T12289] hsr_slave_0: entered promiscuous mode [ 571.309635][T12289] hsr_slave_1: entered promiscuous mode [ 571.419867][T12470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1415'. [ 571.453221][T12289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.582076][T12289] Cannot create hsr debugfs directory [ 578.554669][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'. [ 578.677640][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 578.709852][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 580.005704][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 581.792270][T12570] wlan0 speed is unknown, defaulting to 1000 [ 582.360929][T12289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 583.131626][T12289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 583.217051][T12289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 583.361931][T12289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 583.513554][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1444'. [ 584.332811][T12289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.348828][T12289] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.380689][T12289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.413882][T12289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.467122][T12604] netlink: 'syz.6.1445': attribute type 1 has an invalid length. [ 584.535475][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.542680][ T6372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.635447][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.642637][ T6372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.798521][T12289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.986341][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1457'. [ 590.791703][T12675] uprobe: syz.1.1461:12675 failed to unregister, leaking uprobe [ 591.656884][T12289] veth0_vlan: entered promiscuous mode [ 591.694130][T12289] veth1_vlan: entered promiscuous mode [ 591.777203][T12289] veth0_macvtap: entered promiscuous mode [ 592.888008][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1463'. [ 594.096611][T12289] veth1_macvtap: entered promiscuous mode [ 594.149535][T12289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.159837][T12289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.170402][T12289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.183144][T12289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.193652][T12289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.204402][T12289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.228223][T12289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.237652][T12289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.374001][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 594.929595][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.969741][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.059346][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'. [ 595.107788][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.166208][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.267226][ T29] audit: type=1326 audit(1740595562.794:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 595.521925][ T29] audit: type=1326 audit(1740595562.794:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 595.564647][ T29] audit: type=1326 audit(1740595562.814:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 595.588275][ T29] audit: type=1326 audit(1740595562.814:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 595.691486][ T29] audit: type=1326 audit(1740595562.834:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 596.272353][ T29] audit: type=1326 audit(1740595562.834:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 596.302409][ T29] audit: type=1326 audit(1740595562.834:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 596.324415][ T29] audit: type=1326 audit(1740595562.834:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 596.396130][ T29] audit: type=1326 audit(1740595562.964:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 596.444439][ T29] audit: type=1326 audit(1740595562.964:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb98d8d169 code=0x7ffc0000 [ 596.674599][T12763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1481'. [ 596.926254][ T6362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.089208][ T6362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.157737][ T6362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.226034][ T6362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.370367][ T6362] bridge_slave_1: left allmulticast mode [ 597.376345][ T6362] bridge_slave_1: left promiscuous mode [ 597.389164][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.414480][ T6362] bridge_slave_0: left allmulticast mode [ 597.420980][ T6362] bridge_slave_0: left promiscuous mode [ 597.432715][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.032359][ T6362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.043758][ T6362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.053929][ T6362] bond0 (unregistering): Released all slaves [ 598.603291][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'. [ 598.826026][T12839] overlayfs: failed to clone upperpath [ 598.943461][T12835] kvm: kvm [12827]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x92fc [ 598.962185][T12835] kvm: kvm [12827]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xd2fc [ 599.051417][T12835] kvm: kvm [12827]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x53be [ 599.197072][ T6362] hsr_slave_0: left promiscuous mode [ 599.429662][ T6362] hsr_slave_1: left promiscuous mode [ 599.653227][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.660679][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.682118][T12835] kvm: kvm [12827]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x13be [ 599.759298][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.810939][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.928272][ T6362] veth1_macvtap: left promiscuous mode [ 599.952066][ T6362] veth0_macvtap: left promiscuous mode [ 599.957703][ T6362] veth1_vlan: left promiscuous mode [ 600.011817][ T6362] veth0_vlan: left promiscuous mode [ 601.011418][T12866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1493'. [ 601.090603][T11722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.101109][T11722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.110039][T11722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.132461][T11722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.173187][T11722] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 601.192598][T11722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 603.926455][T11722] Bluetooth: hci3: command tx timeout [ 604.099218][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 604.114335][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 604.489009][ T6362] team0 (unregistering): Port device team_slave_1 removed [ 604.555433][T12906] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 604.584274][ T6362] team0 (unregistering): Port device team_slave_0 removed [ 605.818522][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1506'. [ 606.104990][T11722] Bluetooth: hci3: command tx timeout [ 607.270659][T12906] team0: Port device dummy0 added [ 607.368713][T12867] wlan0 speed is unknown, defaulting to 1000 [ 607.385089][T12867] lo speed is unknown, defaulting to 1000 [ 608.172450][T11722] Bluetooth: hci3: command tx timeout [ 610.138431][T11722] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 610.199409][T12867] chnl_net:caif_netlink_parms(): no params data found [ 610.252001][T11722] Bluetooth: hci3: command tx timeout [ 611.157442][T12977] netlink: 'syz.1.1519': attribute type 3 has an invalid length. [ 611.181811][T12977] netlink: 'syz.1.1519': attribute type 3 has an invalid length. [ 611.191471][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'. [ 611.292533][T12867] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.794475][T12867] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.802503][T12867] bridge_slave_0: entered allmulticast mode [ 611.809569][T12867] bridge_slave_0: entered promiscuous mode [ 611.817838][T12867] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.928849][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.053397][T12867] bridge_slave_1: entered allmulticast mode [ 612.061133][T12867] bridge_slave_1: entered promiscuous mode [ 614.374785][T12867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.977556][T13004] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 615.248589][T12867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.446279][T13004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.470258][T13014] bond2: (slave gretap1): making interface the new active one [ 617.066266][T13014] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 617.370077][T13014] syz.2.1526 (13014) used greatest stack depth: 17488 bytes left [ 617.495473][T12867] team0: Port device team_slave_0 added [ 617.505631][T12867] team0: Port device team_slave_1 added [ 617.587350][T13026] netlink: 'syz.0.1532': attribute type 1 has an invalid length. [ 619.071055][T12867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.091111][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.124863][T12867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.285803][T12867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.301510][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.350008][T12867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.505645][T12867] hsr_slave_0: entered promiscuous mode [ 621.522937][T12867] hsr_slave_1: entered promiscuous mode [ 621.529081][T12867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.395164][T12867] Cannot create hsr debugfs directory [ 622.921367][T13071] lo: entered allmulticast mode [ 623.140465][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1545'. [ 623.206028][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1545'. [ 623.376905][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 623.792533][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.880413][T13080] dummy0: entered promiscuous mode [ 623.952845][T13080] dummy0: left promiscuous mode [ 624.047498][T13082] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1546'. [ 624.592355][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.600955][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.999149][T13112] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 625.007437][T13112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 625.017571][T13112] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 625.025473][T13112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 629.245749][T12867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 629.364634][T12867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.103656][T13163] netlink: 'syz.0.1565': attribute type 4 has an invalid length. [ 630.111608][T13163] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1565'. [ 630.190603][T12867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 630.330563][T12867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.970239][T13180] macvlan1: entered promiscuous mode [ 631.990794][T13180] macvlan1: entered allmulticast mode [ 633.672883][ T47] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 634.197512][T12867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.337787][T12867] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.352088][ T47] usb 7-1: device descriptor read/all, error -71 [ 634.413985][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.421127][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.296432][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.303611][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.453460][T13219] netlink: 372 bytes leftover after parsing attributes in process `syz.6.1576'. [ 635.815021][T12867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 635.831966][T12867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.855747][T12867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.915247][T13274] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 639.005467][T12867] veth0_vlan: entered promiscuous mode [ 639.081576][T12867] veth1_vlan: entered promiscuous mode [ 639.289121][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1578'. [ 639.706305][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1578'. [ 639.730552][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1578'. [ 639.784059][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1578'. [ 639.888000][T12867] veth0_macvtap: entered promiscuous mode [ 639.935513][T12867] veth1_macvtap: entered promiscuous mode [ 640.054193][T12867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.146318][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.208209][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.267233][T12867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.335514][T12867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.365221][T12867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.396546][T12867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.544960][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 640.750047][T12867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.765331][T13303] sched: DL replenish lagged too much [ 686.177498][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.194021][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.254181][T11722] Bluetooth: hci3: command 0x0406 tx timeout [ 748.256533][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.379034][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.416812][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.438588][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.059263][ T30] INFO: task kworker/u8:3:10829 blocked for more than 147 seconds. [ 869.073507][ T30] Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 869.081179][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 870.608681][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.626375][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.145289][ T30] task:kworker/u8:3 state:D stack:21104 pid:10829 tgid:10829 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 873.859170][ T30] Workqueue: events_unbound linkwatch_event [ 873.878012][ T30] Call Trace: [ 873.881349][ T30] [ 875.679562][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 875.697813][ T30] send6+0x2af/0xaf0 [ 875.701752][ T30] ? preempt_schedule+0xe1/0xf0 [ 877.513783][ T30] ? preempt_schedule_common+0x84/0xd0 [ 877.519312][ T30] ? preempt_schedule+0xe1/0xf0 [ 878.498222][ T30] ? kvm_sched_clock_read+0x11/0x20 [ 878.567910][ T30] ? psi_task_switch+0x41d/0x7a0