last executing test programs: 12.606353716s ago: executing program 3 (id=3414): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) unshare(0x22020400) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(r3, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 11.848286873s ago: executing program 3 (id=3419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x4, 0x0, 0x3, 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010000180"], 0x44}}, 0x0) 11.032623364s ago: executing program 3 (id=3423): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 10.02468379s ago: executing program 3 (id=3427): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 8.92808506s ago: executing program 0 (id=3432): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) cachestat(r1, &(0x7f00000002c0)={0x299, 0x1}, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010026b870000800000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006261746164763000000000000000000008000400d400000014001680100001800c00090097a6000004000000"], 0x50}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x49eb2477, 0x30}, &(0x7f0000000080)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200040004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x8040600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) preadv2(r5, 0x0, 0x0, 0x7, 0x6, 0x8) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0x2) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/95, 0x223000, 0x800, 0x8, 0x3}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0d00000006000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f0000000840), &(0x7f0000000340)=r4}, 0x20) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000380)=0x3) r10 = fcntl$dupfd(r9, 0x0, r9) write$sndseq(r10, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x80000, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000080000000000000000000000000000000001777e7b1d1430922d2d2fc36e038b48e08ac974fd7f7fbe483303041b47892d2ce1b94ae9c5518f52d8680f9af7c63eb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @remote}}, 0x100, 0x3, 0x80000001, 0x608, 0x96, 0x8, 0xb}, &(0x7f0000000100)=0x9c) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 6.997322732s ago: executing program 0 (id=3441): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) unshare(0x22020400) epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(r3, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 6.688083711s ago: executing program 2 (id=3443): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 5.660232609s ago: executing program 2 (id=3445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='@\a('], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x800b2a9, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x300, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x6) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00072800000022a855198e1f9e8f7f28b587692aff7f985dac765205aaf0ba511d2e5d8bc716e0530444003e43190eb6eda4381b98ccac159ec5844f6ee3abd19bec24f51ae80ba53ddd900ce38a614c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000040)=0x2) write$tun(r5, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0xffff, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x20, 0x16, 0xd, "4335798a8d31740d8c71cdb144"}, 0x0, 0x0}) ustat(0x9, &(0x7f0000000080)) 4.539764049s ago: executing program 1 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) setreuid(0x0, 0xee00) 4.464907106s ago: executing program 2 (id=3451): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) cachestat(r1, &(0x7f00000002c0)={0x299, 0x1}, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010026b870000800000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006261746164763000000000000000000008000400d400000014001680100001800c00090097a6000004000000"], 0x50}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x49eb2477, 0x30}, &(0x7f0000000080)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200040004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x8040600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) preadv2(r5, 0x0, 0x0, 0x7, 0x6, 0x8) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0x2) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/95, 0x223000, 0x800, 0x8, 0x3}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0d00000006000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f0000000840), &(0x7f0000000340)=r4}, 0x20) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000380)=0x3) r10 = fcntl$dupfd(r9, 0x0, r9) write$sndseq(r10, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x80000, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000080000000000000000000000000000000001777e7b1d1430922d2d2fc36e038b48e08ac974fd7f7fbe483303041b47892d2ce1b94ae9c5518f52d8680f9af7c63eb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @remote}}, 0x100, 0x3, 0x80000001, 0x608, 0x96, 0x8, 0xb}, &(0x7f0000000100)=0x9c) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 3.952344113s ago: executing program 1 (id=3453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000340)) 3.633961304s ago: executing program 4 (id=3454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000007c0)="10c46de6ca57460438cd729a7e953aa50503789d589bd68927bd9d43be1d70484c8d6c2ce3d8413797b98f9dbad19596fc8224aa2cd6f29ea041c50e6f4b686cebac0c7a0b30e244d073ba621ac898b8952bb1465e629150fe93dc", 0x0}, 0x4c) 3.357838778s ago: executing program 1 (id=3455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 3.284482617s ago: executing program 0 (id=3456): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x4000810) 3.057784848s ago: executing program 2 (id=3457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c8d0}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.741114512s ago: executing program 4 (id=3458): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000218ff00000005000500"], 0x78}, 0x1, 0x7}, 0x0) 2.581594732s ago: executing program 1 (id=3459): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x20001000}}], [], 0x6b}}) 2.119836902s ago: executing program 0 (id=3460): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) 2.044487628s ago: executing program 2 (id=3461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='@\a('], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x800b2a9, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x300, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x6) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00072800000022a855198e1f9e8f7f28b587692aff7f985dac765205aaf0ba511d2e5d8bc716e0530444003e43190eb6eda4381b98ccac159ec5844f6ee3abd19bec24f51ae80ba53ddd900ce38a614c5bed4130a2a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000040)=0x2) write$tun(r5, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0xffff, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x20, 0x16, 0xd, "4335798a8d31740d8c71cdb144"}, 0x0, 0x0}) ustat(0x9, &(0x7f0000000080)) 1.99219543s ago: executing program 1 (id=3462): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1.943020849s ago: executing program 4 (id=3463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) setreuid(0x0, 0xee00) 1.463587507s ago: executing program 0 (id=3464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001900010000000000000000008020000000020005"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0x9, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x20044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x2, 0x4004, 0x4, {0xa, 0x4e24, 0x3, @empty, 0x2}}}, 0x3a) r7 = fspick(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) fsmount(r7, 0x0, 0xf0) writev(r6, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x10) r11 = fcntl$dupfd(r9, 0x406, r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r11, 0x100000, 0xfffffffffffffffe}, 0x10) 1.384803658s ago: executing program 4 (id=3465): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 1.248225494s ago: executing program 1 (id=3466): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) unshare(0x22020400) epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), 0x0}, 0x20) getpeername$l2tp(r3, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.087968414s ago: executing program 3 (id=3467): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x8) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0x2, 0x0, 0x0) 937.734153ms ago: executing program 4 (id=3468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000007c0)="10c46de6ca57460438cd729a7e953aa50503789d589bd68927bd9d43be1d70484c8d6c2ce3d8413797b98f9dbad19596fc8224aa2cd6f29ea041c50e6f4b686cebac0c7a0b30e244d073ba621ac898b8952bb1465e629150fe93dc", 0x0}, 0x4c) 611.640127ms ago: executing program 2 (id=3469): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000218ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 259.101434ms ago: executing program 3 (id=3470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000000280)=0x5) setuid(r6) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000440)={0xffffffffffffff06, 0xffffffff80000000, 0x5, 0x4, 0x4, 0x2, 0x4, 0x6, 0x5}) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x7]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r7 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r7, 0xf, &(0x7f00000004c0)=""/26) ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="b2", 0x1}], 0x1}, 0x1000000}], 0x2, 0x4004040) 72.195243ms ago: executing program 4 (id=3471): getpid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678", 0x34000}], 0x1}}], 0x1, 0x0) 0s ago: executing program 0 (id=3472): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x20001000}}], [], 0x6b}}) kernel console output (not intermixed with test programs): 68 bytes leftover after parsing attributes in process `syz.3.2679'. [ 1197.423600][T13711] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2679'. [ 1197.770199][T13713] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1197.779014][T13713] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1197.788088][T13713] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1198.321474][T13723] tmpfs: Bad value for 'mpol' [ 1198.413658][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 1198.961713][T13732] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.972104][T13732] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.218877][T13732] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.229222][T13732] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.409652][T13732] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.421580][T13732] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.545635][T13732] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.556252][T13732] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.943133][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 1199.996116][T13732] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.004973][T13732] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.045188][T13732] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.055117][T13732] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.107204][T13732] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.116137][T13732] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.157127][T13732] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.165921][T13732] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.863000][T13766] batadv_slave_0: entered promiscuous mode [ 1201.928064][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'. [ 1201.942295][T13766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1202.045031][T13766] batadv_slave_0 (unregistering): left promiscuous mode [ 1202.052841][T13766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.527943][T13772] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1206.897631][T13826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2723'. [ 1208.506326][T13841] batadv_slave_0: entered promiscuous mode [ 1208.553876][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1208.643230][T13841] batadv_slave_0 (unregistering): left promiscuous mode [ 1209.476936][T13858] netlink: 'syz.3.2735': attribute type 27 has an invalid length. [ 1209.892658][T13858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.901533][T13858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.998911][T13858] batadv0: left promiscuous mode [ 1210.599245][T13858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1211.004742][T13858] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.014052][T13858] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.024572][T13858] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.041497][T13858] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.124991][T13858] vlan2: left promiscuous mode [ 1211.201509][T13858] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.210626][T13858] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.219597][T13858] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.229682][T13858] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1212.170525][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 1212.733696][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.740791][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1214.306089][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2758'. [ 1214.903347][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 1215.070646][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 1215.448534][T13935] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.590022][T13935] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.839231][T13935] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.991705][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1215.991797][ T30] audit: type=1326 audit(1750747531.081:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.059011][T13935] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.081545][ T30] audit: type=1326 audit(1750747531.121:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.202050][ T30] audit: type=1326 audit(1750747531.221:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.226041][ T30] audit: type=1326 audit(1750747531.241:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.248805][ T30] audit: type=1326 audit(1750747531.241:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.273380][ T30] audit: type=1326 audit(1750747531.241:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.298845][ T30] audit: type=1326 audit(1750747531.241:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.322551][ T30] audit: type=1326 audit(1750747531.241:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.345164][ T30] audit: type=1326 audit(1750747531.281:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.372276][ T30] audit: type=1326 audit(1750747531.281:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.0.2765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1216.686178][T13935] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.726810][T13935] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.765501][T13935] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.808432][T13935] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.792386][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 1218.851666][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 1219.290553][T13976] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2779'. [ 1221.756007][T14010] bond0: option mode: unable to set because the bond device is up [ 1222.335146][T14019] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2795'. [ 1224.209279][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 1224.262753][T14038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1224.466087][T14033] vlan0: entered allmulticast mode [ 1224.471910][T14033] bond2: entered allmulticast mode [ 1227.612325][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'. [ 1227.671930][ T30] audit: type=1326 audit(1750747542.751:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1227.691049][T14084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2820'. [ 1227.695775][ T30] audit: type=1326 audit(1750747542.761:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1227.731657][ T30] audit: type=1326 audit(1750747542.761:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1227.754289][ T30] audit: type=1326 audit(1750747542.761:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1227.777106][ T30] audit: type=1326 audit(1750747542.841:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1230.831198][ T30] audit: type=1326 audit(1750747545.921:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14119 comm="syz.4.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1230.854642][ T30] audit: type=1326 audit(1750747545.931:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14119 comm="syz.4.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1230.877896][ T30] audit: type=1326 audit(1750747545.931:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14119 comm="syz.4.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1230.903591][ T30] audit: type=1326 audit(1750747545.931:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14119 comm="syz.4.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1230.927736][ T30] audit: type=1326 audit(1750747546.001:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14119 comm="syz.4.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1231.101965][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 1231.369415][T14128] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1232.049153][T14133] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1232.159147][T14133] netlink: 1 bytes leftover after parsing attributes in process `+}[@'. [ 1233.253144][T14144] sctp: [Deprecated]: syz.3.2842 (pid 14144) Use of int in max_burst socket option. [ 1233.253144][T14144] Use struct sctp_assoc_value instead [ 1233.361762][T14150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.374297][T14150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.785962][T14150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.796824][T14150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.047444][T14150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.058340][T14150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.300911][T14150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.313145][T14150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.826765][T14150] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.835734][T14150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.874582][T14150] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.883564][T14150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.929922][T14150] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.938767][T14150] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.978729][T14150] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.987673][T14150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.035195][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2848'. [ 1235.812958][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'. [ 1236.609134][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 1236.621443][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 1237.211434][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 1237.221724][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 1238.608309][T14216] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.778735][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1238.778831][ T30] audit: type=1326 audit(1750747553.871:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.0.2866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1238.814527][ T30] audit: type=1326 audit(1750747553.871:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.0.2866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1238.838727][ T30] audit: type=1326 audit(1750747553.881:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.0.2866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1238.861904][ T30] audit: type=1326 audit(1750747553.891:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.0.2866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1238.884528][ T30] audit: type=1326 audit(1750747553.891:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.0.2866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1238.909858][ T30] audit: type=1326 audit(1750747553.941:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.0.2866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1238.947300][T14216] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.131430][T14216] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.234062][T14216] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.462773][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'. [ 1239.826611][T14216] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.865210][T14216] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.903609][T14216] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.948179][T14216] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.992223][T14236] bond0: option mode: unable to set because the bond device has slaves [ 1240.760640][T14243] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.772390][T14243] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.009822][T14243] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.020571][T14243] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.176458][T14243] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.186780][T14243] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.387991][T14243] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.398458][T14243] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.881738][T14243] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.890635][T14243] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.928255][T14243] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.937089][T14243] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.980171][T14243] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.989123][T14243] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.027233][T14243] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.036344][T14243] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.535960][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1242.555746][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 1242.586159][ T30] audit: type=1326 audit(1750747557.681:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1242.679537][ T30] audit: type=1326 audit(1750747557.721:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1242.702727][ T30] audit: type=1326 audit(1750747557.721:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1242.725580][ T30] audit: type=1326 audit(1750747557.721:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1244.002773][T14289] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2887'. [ 1245.035595][T14296] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.268572][T14296] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.394836][T14296] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.560118][T14296] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.186006][T14296] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.224675][T14296] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.268717][T14296] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.307365][T14296] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.940190][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 1247.382856][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1247.401699][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1247.435882][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1247.451579][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1247.482538][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1247.737524][T14328] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2900'. [ 1248.067864][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1249.590717][ T5800] Bluetooth: hci5: command tx timeout [ 1249.629326][T14322] chnl_net:caif_netlink_parms(): no params data found [ 1249.749142][T14350] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.066189][T14350] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.243352][T14350] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.456163][T14350] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.210183][T14322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.218395][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.226728][T14322] bridge_slave_0: entered allmulticast mode [ 1251.237116][T14322] bridge_slave_0: entered promiscuous mode [ 1251.487667][T14322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.495771][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.504174][T14322] bridge_slave_1: entered allmulticast mode [ 1251.514564][T14322] bridge_slave_1: entered promiscuous mode [ 1251.691363][ T5800] Bluetooth: hci5: command tx timeout [ 1251.921755][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2912'. [ 1252.004478][T14322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.057549][T14350] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.095722][T14350] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.126417][T14322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.424054][T14350] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.622565][T14350] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.644148][T14322] team0: Port device team_slave_0 added [ 1252.706725][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 1252.761015][T14322] team0: Port device team_slave_1 added [ 1252.937495][T14322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.945240][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.972351][T14322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.127434][T14322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.134910][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.161799][T14322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.695312][T14322] hsr_slave_0: entered promiscuous mode [ 1253.706710][T14322] hsr_slave_1: entered promiscuous mode [ 1253.716536][T14322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1253.725158][T14322] Cannot create hsr debugfs directory [ 1253.753546][ T5800] Bluetooth: hci5: command tx timeout [ 1253.763806][T14387] IPVS: stopping backup sync thread 14388 ... [ 1254.545659][T14394] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1254.560632][T14394] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.677075][T14394] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1254.687491][T14394] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.828017][T14394] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1254.839738][T14394] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.074097][T14394] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.084644][T14394] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.585092][T14322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.595942][T14322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.834575][ T5800] Bluetooth: hci5: command tx timeout [ 1255.906531][T14394] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.920642][T14394] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.937873][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2925'. [ 1255.979396][T14394] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.994756][T14394] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.042890][T14394] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.051797][T14394] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.096461][T14394] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.107107][T14394] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.226079][T14322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.237074][T14322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.425316][T14322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.436266][T14322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.642208][T14322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.653273][T14322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.130519][T14418] bond0: option mode: unable to set because the bond device is up [ 1257.168643][T14322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1257.246415][T14322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1257.307511][T14322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1257.341591][T14322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1258.660057][T14322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.818524][T14322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.980047][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.988110][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.092812][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.100565][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.525149][T14322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.152956][T14322] veth0_vlan: entered promiscuous mode [ 1262.178198][T14468] bond0: option mode: unable to set because the bond device has slaves [ 1262.277487][T14322] veth1_vlan: entered promiscuous mode [ 1262.571987][T14322] veth0_macvtap: entered promiscuous mode [ 1262.642688][T14322] veth1_macvtap: entered promiscuous mode [ 1262.808744][T14322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.923529][T14322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.999545][T14322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.009582][T14322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.018788][T14322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.028134][T14322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.315367][T14480] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.325874][T14480] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.376291][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1263.386577][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1263.605779][T14480] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.616713][T14480] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.652940][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1263.863496][T14480] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.878388][T14480] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.898392][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1263.902106][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1263.908815][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1263.981213][ T4612] bridge_slave_1: left allmulticast mode [ 1263.990591][ T4612] bridge_slave_1: left promiscuous mode [ 1264.000011][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.027168][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 1264.027253][ T30] audit: type=1326 audit(1750747579.111:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1264.132243][ T4612] bridge_slave_0: left allmulticast mode [ 1264.138364][ T4612] bridge_slave_0: left promiscuous mode [ 1264.145590][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.177634][ T30] audit: type=1326 audit(1750747579.161:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1264.203334][ T30] audit: type=1326 audit(1750747579.161:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1264.227770][ T30] audit: type=1326 audit(1750747579.161:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1264.250875][ T30] audit: type=1326 audit(1750747579.161:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1264.275804][ T30] audit: type=1326 audit(1750747579.161:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1264.301967][ T30] audit: type=1326 audit(1750747579.161:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1265.027889][ T4612] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1265.074867][ T4612] vxlan0 (unregistering): left promiscuous mode [ 1265.224979][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.262487][ T4612] bond_slave_0: left promiscuous mode [ 1265.290024][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.313397][ T4612] bond_slave_1: left promiscuous mode [ 1265.325111][ T4612] bond0 (unregistering): Released all slaves [ 1265.351017][ T4612] bond1 (unregistering): Released all slaves [ 1265.378208][ T4612] bond2 (unregistering): Released all slaves [ 1265.586469][T14480] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1265.596876][T14480] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.145196][T14480] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.155355][T14480] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.392214][T14480] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.401173][T14480] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.443672][T14480] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.452679][T14480] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.565509][ T4612] hsr_slave_0: left promiscuous mode [ 1266.593752][ T4612] hsr_slave_1: left promiscuous mode [ 1266.661807][ T4612] veth1_vlan: left promiscuous mode [ 1266.667868][ T4612] veth0_vlan: left promiscuous mode [ 1267.391244][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 1267.421220][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 1267.842995][T14480] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.851901][T14480] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.466853][T14523] bond0: option mode: unable to set because the bond device is up [ 1269.916850][T14547] netlink: 'syz.2.2966': attribute type 12 has an invalid length. [ 1271.831000][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.839256][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.968506][ T3727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.976962][ T3727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.012790][T14571] bond0: entered allmulticast mode [ 1272.022434][T14571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.476726][T14587] netlink: 'syz.1.2980': attribute type 12 has an invalid length. [ 1273.845901][ T30] audit: type=1326 audit(1750747588.921:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14591 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1273.868849][ T30] audit: type=1326 audit(1750747588.951:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14591 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1273.891730][ T30] audit: type=1326 audit(1750747588.951:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14591 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1273.917308][ T30] audit: type=1326 audit(1750747589.001:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14591 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1274.178933][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.186530][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.223481][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1274.234590][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1274.247361][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1274.261714][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1274.273507][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1274.792253][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2986'. [ 1274.974425][T14604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1275.173239][T14605] bond2 (unregistering): Released all slaves [ 1275.775253][T14615] bond0: option mode: unable to set because the bond device has slaves [ 1275.964607][T14596] chnl_net:caif_netlink_parms(): no params data found [ 1276.195287][ T30] audit: type=1326 audit(1750747591.281:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.0.2990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 1276.329504][ T5807] Bluetooth: hci0: command tx timeout [ 1276.759830][ T997] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.873143][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1276.949392][ T997] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.986649][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1277.099378][ T997] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.348687][ T997] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.614762][T14596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.622704][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.631023][T14596] bridge_slave_0: entered allmulticast mode [ 1277.641700][T14596] bridge_slave_0: entered promiscuous mode [ 1277.847163][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.855932][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.864131][T14596] bridge_slave_1: entered allmulticast mode [ 1277.874431][T14596] bridge_slave_1: entered promiscuous mode [ 1278.391305][ T5807] Bluetooth: hci0: command tx timeout [ 1279.197781][T14651] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1279.262853][ T30] audit: type=1326 audit(1750747594.331:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1279.287595][ T30] audit: type=1326 audit(1750747594.361:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1279.311167][ T30] audit: type=1326 audit(1750747594.371:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1279.336435][ T30] audit: type=1326 audit(1750747594.381:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1279.360382][ T30] audit: type=1326 audit(1750747594.381:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1279.443190][ T997] bond0 (unregistering): Released all slaves [ 1279.470511][ T997] bond1 (unregistering): Released all slaves [ 1279.506620][ T997] bond2 (unregistering): Released all slaves [ 1279.906625][T14657] bond0: option mode: unable to set because the bond device is up [ 1279.937499][T14596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.022603][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'. [ 1280.136274][T14596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.219304][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3006'. [ 1280.481196][ T5807] Bluetooth: hci0: command tx timeout [ 1280.633372][T14596] team0: Port device team_slave_0 added [ 1280.660940][ T997] team0: left promiscuous mode [ 1280.711236][ T997] hsr_slave_0: left promiscuous mode [ 1280.719831][ T997] hsr_slave_1: left promiscuous mode [ 1280.753882][ T997] veth1_macvtap: left promiscuous mode [ 1280.759757][ T997] veth0_macvtap: left promiscuous mode [ 1280.766159][ T997] veth1_vlan: left promiscuous mode [ 1280.775848][ T997] veth0_vlan: left promiscuous mode [ 1281.504193][T14676] fuse: Bad value for 'fd' [ 1282.128305][T14596] team0: Port device team_slave_1 added [ 1282.289592][T14142] infiniband syz1: ib_query_port failed (-19) [ 1282.555272][ T997] IPVS: stop unused estimator thread 0... [ 1282.581132][ T5807] Bluetooth: hci0: command tx timeout [ 1282.598204][T14596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.605956][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.634701][T14596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.754698][T14596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.764007][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.791013][T14596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.167744][T14596] hsr_slave_0: entered promiscuous mode [ 1283.181215][T14596] hsr_slave_1: entered promiscuous mode [ 1283.190587][T14596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1283.198455][T14596] Cannot create hsr debugfs directory [ 1283.250443][ T30] audit: type=1326 audit(1750747598.321:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1283.273285][ T30] audit: type=1326 audit(1750747598.361:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1283.304582][ T30] audit: type=1326 audit(1750747598.361:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1283.327500][ T30] audit: type=1326 audit(1750747598.371:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1283.354206][ T30] audit: type=1326 audit(1750747598.371:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1283.741999][T14691] bond0: option mode: unable to set because the bond device has slaves [ 1283.779655][T14690] netlink: 'syz.3.3018': attribute type 12 has an invalid length. [ 1283.886553][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1283.902136][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1284.743929][T14705] netlink: 'syz.1.3023': attribute type 27 has an invalid length. [ 1284.792033][T14705] bond0: left allmulticast mode [ 1284.802110][T14705] geneve0: left allmulticast mode [ 1284.830729][T14705] bond1: left promiscuous mode [ 1284.836016][T14705] bond1: left allmulticast mode [ 1285.111286][T14705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.127836][T14705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.232099][T14705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1285.302939][T14710] fuse: Bad value for 'fd' [ 1285.459864][T14596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1285.501768][T14596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1285.609725][T14596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1285.668986][T14596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1286.036530][T14714] ALSA: seq fatal error: cannot create timer (-19) [ 1286.203416][T14720] netlink: 'syz.2.3029': attribute type 4 has an invalid length. [ 1286.292420][ T30] audit: type=1326 audit(1750747601.371:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.3030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1286.318499][ T30] audit: type=1326 audit(1750747601.371:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.3030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1286.342118][ T30] audit: type=1326 audit(1750747601.391:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.3030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1286.365195][ T30] audit: type=1326 audit(1750747601.391:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.3030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1286.388119][ T30] audit: type=1326 audit(1750747601.391:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.3030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1286.876830][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1286.914435][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1286.986314][T14596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.010713][T14725] netlink: 'syz.0.3031': attribute type 12 has an invalid length. [ 1287.164368][T14596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.212761][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 1287.243157][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.250998][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.371609][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.379340][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.889833][T14754] netlink: 'syz.3.3041': attribute type 4 has an invalid length. [ 1289.463949][T14596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.647879][ T30] audit: type=1326 audit(1750747604.721:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 1289.670836][ T30] audit: type=1326 audit(1750747604.731:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 1289.696165][ T30] audit: type=1326 audit(1750747604.731:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 1289.748001][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 1289.793435][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3044'. [ 1289.984949][ T30] audit: type=1326 audit(1750747604.831:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 1290.009222][ T30] audit: type=1326 audit(1750747604.831:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 1290.624760][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 1290.749889][T14776] bond0: option mode: unable to set because the bond device has slaves [ 1291.750931][T14789] loop0: detected capacity change from 0 to 164 [ 1291.814949][T14789] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1292.181911][ T30] audit: type=1326 audit(1750747607.261:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14792 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1292.205806][ T30] audit: type=1326 audit(1750747607.261:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14792 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1292.228522][ T30] audit: type=1326 audit(1750747607.261:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14792 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1292.254204][ T30] audit: type=1326 audit(1750747607.261:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14792 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1292.263304][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'. [ 1292.278037][ T30] audit: type=1326 audit(1750747607.261:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14792 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1292.308037][T14596] veth0_vlan: entered promiscuous mode [ 1292.349176][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3056'. [ 1292.440115][T14596] veth1_vlan: entered promiscuous mode [ 1292.862994][T14596] veth0_macvtap: entered promiscuous mode [ 1292.941554][T14596] veth1_macvtap: entered promiscuous mode [ 1293.147329][T14596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.217691][T14596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.265074][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1293.271798][T14596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.285229][T14596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.298169][T14596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.307522][T14596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.001945][T14814] bond0: option mode: unable to set because the bond device has slaves [ 1294.198370][T14817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.424789][T14817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.457067][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 1294.586985][T14817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.772748][T14817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.193276][T14817] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.205466][T14830] batadv0: entered promiscuous mode [ 1295.217064][T14830] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1295.234884][ T30] audit: type=1326 audit(1750747610.291:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1295.258576][ T30] audit: type=1326 audit(1750747610.311:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1295.283620][ T30] audit: type=1326 audit(1750747610.311:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1295.338637][T14817] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.375744][T14817] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.416986][T14817] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.444997][ T30] audit: type=1326 audit(1750747610.401:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1295.468894][ T30] audit: type=1326 audit(1750747610.411:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1296.852885][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3073'. [ 1297.569337][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'. [ 1297.614662][T14864] bond0: option mode: unable to set because the bond device is up [ 1298.067012][ T30] audit: type=1326 audit(1750747613.161:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1298.092674][ T30] audit: type=1326 audit(1750747613.191:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1298.116564][ T30] audit: type=1326 audit(1750747613.191:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1298.139652][ T30] audit: type=1326 audit(1750747613.191:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1298.162539][ T30] audit: type=1326 audit(1750747613.191:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 1298.475909][T14871] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.698837][T14871] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.829748][T14871] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.863813][T14877] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1298.924731][T14871] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.321583][T14871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.359691][T14871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.398007][T14871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.440801][T14871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.981212][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.989457][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.018762][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3086'. [ 1300.205579][T14516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.214320][T14516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.459188][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'. [ 1301.122426][T14903] loop4: detected capacity change from 0 to 164 [ 1301.208521][T14903] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1302.045865][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1302.056301][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1302.081600][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1302.099784][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1302.132282][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1302.235584][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1302.926134][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1304.037068][T14935] netlink: 'syz.1.3102': attribute type 2 has an invalid length. [ 1304.140831][T14911] chnl_net:caif_netlink_parms(): no params data found [ 1304.167809][T14937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3102'. [ 1304.231360][ T5800] Bluetooth: hci1: command tx timeout [ 1305.132134][T14951] netlink: 33912 bytes leftover after parsing attributes in process `syz.4.3106'. [ 1305.309720][ T4114] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.320282][ T4114] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.537989][ T4114] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.550074][ T4114] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.657812][ T4114] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.668798][ T4114] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.838577][ T4114] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.849079][ T4114] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.319612][ T5800] Bluetooth: hci1: command tx timeout [ 1306.362503][T14911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.375987][T14911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.384157][T14911] bridge_slave_0: entered allmulticast mode [ 1306.394557][T14911] bridge_slave_0: entered promiscuous mode [ 1306.413001][T14911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.424017][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.432151][T14911] bridge_slave_1: entered allmulticast mode [ 1306.442529][T14911] bridge_slave_1: entered promiscuous mode [ 1306.798259][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 1306.948389][T14911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.010130][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 1307.101949][T14911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.157907][ T4114] bridge_slave_1: left allmulticast mode [ 1307.164268][ T4114] bridge_slave_1: left promiscuous mode [ 1307.171489][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.235930][ T4114] bridge_slave_0: left allmulticast mode [ 1307.242179][ T4114] bridge_slave_0: left promiscuous mode [ 1307.249016][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.981983][ T4114] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1308.016328][ T4114] vxlan0 (unregistering): left promiscuous mode [ 1308.178428][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.202981][ T4114] bond_slave_0: left promiscuous mode [ 1308.242797][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.259776][ T4114] bond_slave_1: left promiscuous mode [ 1308.273407][ T4114] bond0 (unregistering): Released all slaves [ 1308.364139][ T30] audit: type=1326 audit(1750747623.451:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1308.387450][ T30] audit: type=1326 audit(1750747623.451:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1308.391840][ T5800] Bluetooth: hci1: command tx timeout [ 1308.476175][ T30] audit: type=1326 audit(1750747623.561:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1308.499399][ T30] audit: type=1326 audit(1750747623.571:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1308.658538][ T30] audit: type=1326 audit(1750747623.641:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1308.681693][ T30] audit: type=1326 audit(1750747623.641:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.3.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1308.923532][T14911] team0: Port device team_slave_0 added [ 1308.942898][ T4114] tipc: Left network mode [ 1309.008452][T14911] team0: Port device team_slave_1 added [ 1309.511207][T14986] loop8: detected capacity change from 0 to 16384 [ 1309.580415][T14987] netlink: 'syz.4.3116': attribute type 2 has an invalid length. [ 1309.605759][T14911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.614167][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.632829][T14987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1309.641562][T14911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.829595][ T4114] hsr_slave_0: left promiscuous mode [ 1309.870098][ T4114] hsr_slave_1: left promiscuous mode [ 1309.882382][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.891332][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.993953][ T4114] veth1_macvtap: left promiscuous mode [ 1309.999873][ T4114] veth0_macvtap: left promiscuous mode [ 1310.006140][ T4114] veth1_vlan: left promiscuous mode [ 1310.011961][ T4114] veth0_vlan: left promiscuous mode [ 1310.161183][T14988] loop8: detected capacity change from 16384 to 0 [ 1310.190996][ C0] I/O error, dev loop8, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 1310.472632][ T5800] Bluetooth: hci1: command tx timeout [ 1310.641892][T14994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3119'. [ 1310.918722][T14997] loop0: detected capacity change from 0 to 164 [ 1310.991425][T14997] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1311.359682][T14911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.367269][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.397558][T14911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.802985][T14911] hsr_slave_0: entered promiscuous mode [ 1311.814156][T14911] hsr_slave_1: entered promiscuous mode [ 1311.823763][T14911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.831976][T14911] Cannot create hsr debugfs directory [ 1313.198572][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 1313.807148][T14911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1313.889643][T14911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1313.922926][T14911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1314.007959][T14911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1314.493314][T15032] loop4: detected capacity change from 0 to 512 [ 1314.572839][T15035] loop0: detected capacity change from 0 to 164 [ 1314.635674][T15035] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1314.704815][T15032] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1314.718983][T15032] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1314.731037][T15032] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3129: Failed to acquire dquot type 1 [ 1314.862420][T15032] EXT4-fs (loop4): 1 truncate cleaned up [ 1314.872954][T15032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.886258][T15032] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.332411][T14596] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.558291][T14911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.747014][T14911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.809184][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.817200][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.941101][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.948768][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.069688][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3138'. [ 1317.916187][T14911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.290134][T15076] loop4: detected capacity change from 0 to 164 [ 1318.404537][T15076] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1318.429592][T14911] veth0_vlan: entered promiscuous mode [ 1318.509631][T14911] veth1_vlan: entered promiscuous mode [ 1319.143656][T14911] veth0_macvtap: entered promiscuous mode [ 1319.202303][T14911] veth1_macvtap: entered promiscuous mode [ 1319.639811][T14911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.756921][T14911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.041732][T14911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.051369][T14911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.060662][T14911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.069764][T14911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.562551][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1321.892860][T15116] vlan3: entered allmulticast mode [ 1321.898316][T15116] bridge_slave_0: entered allmulticast mode [ 1326.970058][T15178] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.049272][T14516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.059477][T14516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.208864][T15178] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.422542][T15178] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.466089][ T3751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.475751][ T3751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.542291][T15178] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.927710][T15178] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.966960][T15178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.011568][T15178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.050085][T15178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.520599][ T30] audit: type=1326 audit(1750747643.601:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1328.619369][ T30] audit: type=1326 audit(1750747643.641:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1328.642692][ T30] audit: type=1326 audit(1750747643.641:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1328.665472][ T30] audit: type=1326 audit(1750747643.641:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1328.688388][ T30] audit: type=1326 audit(1750747643.671:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1330.075341][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1330.088863][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1330.101448][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1330.129133][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1330.142357][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1331.181488][T15205] chnl_net:caif_netlink_parms(): no params data found [ 1332.235944][ T5807] Bluetooth: hci4: command tx timeout [ 1332.830985][ T30] audit: type=1326 audit(1750747647.881:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15226 comm="syz.2.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1332.853833][ T30] audit: type=1326 audit(1750747647.881:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15226 comm="syz.2.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1332.877033][ T30] audit: type=1326 audit(1750747647.881:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15226 comm="syz.2.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1332.904572][ T30] audit: type=1326 audit(1750747647.901:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15226 comm="syz.2.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1332.968971][T15229] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.146957][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.156791][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.165213][T15205] bridge_slave_0: entered allmulticast mode [ 1333.175571][T15205] bridge_slave_0: entered promiscuous mode [ 1333.240961][ T5804] syz_tun (unregistering): left allmulticast mode [ 1333.327167][T15229] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.410420][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.418373][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.426579][T15205] bridge_slave_1: entered allmulticast mode [ 1333.445933][T15205] bridge_slave_1: entered promiscuous mode [ 1333.480436][T15229] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.805810][T15229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.133949][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.192430][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3196'. [ 1334.203326][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 1334.255243][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.347850][ T5807] Bluetooth: hci4: command tx timeout [ 1334.693780][T15205] team0: Port device team_slave_0 added [ 1334.758091][T15229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.798292][T15229] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.819025][T15205] team0: Port device team_slave_1 added [ 1335.522768][ T4114] bond0 (unregistering): Released all slaves [ 1335.570830][ T4114] bond1 (unregistering): Released all slaves [ 1335.685142][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.692145][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.023474][T15229] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.072920][T15229] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.103431][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.111008][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.138204][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.260478][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.268152][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.299524][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.392769][ T5807] Bluetooth: hci4: command tx timeout [ 1336.854997][ T4114] hsr_slave_0: left promiscuous mode [ 1336.865680][ T4114] hsr_slave_1: left promiscuous mode [ 1337.791051][ T4114] lo (unregistering): left allmulticast mode [ 1337.848628][T15205] hsr_slave_0: entered promiscuous mode [ 1337.871676][T15205] hsr_slave_1: entered promiscuous mode [ 1338.471040][ T5807] Bluetooth: hci4: command tx timeout [ 1338.695675][ T30] audit: type=1326 audit(1750747653.771:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.2.3204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1338.718876][ T30] audit: type=1326 audit(1750747653.771:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.2.3204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1338.744663][ T30] audit: type=1326 audit(1750747653.771:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.2.3204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1338.768444][ T30] audit: type=1326 audit(1750747653.771:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.2.3204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1339.618000][T15273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.875843][T15273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.914783][T15205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1340.022187][T15273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.067472][T15205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1340.244506][T15273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.311085][T15205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1340.429196][T15205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1340.634000][T15273] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.676984][T15273] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.717792][T15273] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.756200][T15273] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.803765][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.986302][T15205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.058479][ T4612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.066389][ T4612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.148296][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.156101][ T4612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.336279][T15294] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1342.336279][T15294] program syz.0.3217 not setting count and/or reply_len properly [ 1342.628694][ T30] audit: type=1326 audit(1750747657.721:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.2.3220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1342.745726][ T30] audit: type=1326 audit(1750747657.781:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.2.3220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1342.770865][ T30] audit: type=1326 audit(1750747657.781:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.2.3220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1342.793662][ T30] audit: type=1326 audit(1750747657.781:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.2.3220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1342.816471][ T30] audit: type=1326 audit(1750747657.781:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.2.3220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1343.967747][T15316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.197378][T15316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.467183][T15316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.706640][T15316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.765122][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.140013][T15316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.182997][T15316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.227801][T15316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.267467][T15316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.447312][T15205] veth0_vlan: entered promiscuous mode [ 1345.582559][T15205] veth1_vlan: entered promiscuous mode [ 1345.912382][T15205] veth0_macvtap: entered promiscuous mode [ 1345.994235][T15205] veth1_macvtap: entered promiscuous mode [ 1346.190749][T15340] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.271973][T15205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.366249][T15340] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.524310][T15205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.568237][T15340] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.621198][ T5851] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1346.657123][T15205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.666701][T15205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.676281][T15205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.685703][T15205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.792341][T15340] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.843125][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1347.081033][ T5851] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1347.230794][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1347.413240][ T5851] usb usb1-port1: attempt power cycle [ 1347.862053][ T5851] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1347.921098][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1348.180931][ T5851] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1348.234383][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1348.371507][ T5851] usb usb1-port1: unable to enumerate USB device [ 1349.699105][T15340] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.737515][T15340] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.775897][T15340] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.823063][T15340] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.730092][T15379] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.880136][T15379] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.112083][T15379] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.369723][T15379] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.327422][T15379] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.365231][T15379] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.409697][T15379] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.457346][T15379] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.897351][T15459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.906589][T15459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.192345][T15459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.206481][T15459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.841835][T15484] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1357.064079][T15486] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.301181][T15486] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.484669][T15486] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.640072][T15486] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.821716][T14098] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1357.995785][T14098] usb 1-1: device descriptor read/64, error -71 [ 1358.251234][T14098] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1358.368470][T15498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.431594][T14098] usb 1-1: device descriptor read/64, error -71 [ 1358.554006][T14098] usb usb1-port1: attempt power cycle [ 1358.596814][T15498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.777787][T15498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.868192][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1358.878776][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1358.889035][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1358.920420][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1358.933214][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1358.957564][T15486] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.981065][T14098] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1358.995464][T15486] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.033175][T14098] usb 1-1: device descriptor read/8, error -71 [ 1359.039126][T15486] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.078896][T15486] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.243992][T15508] netlink: 392 bytes leftover after parsing attributes in process `syz.1.3258'. [ 1359.248812][T15498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.274718][T14098] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1359.335379][T14098] usb 1-1: device descriptor read/8, error -71 [ 1359.585951][T14098] usb usb1-port1: unable to enumerate USB device [ 1359.998767][T15498] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.042358][T15498] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.080893][T15498] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.119084][T15498] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.161481][T15513] loop1: detected capacity change from 0 to 128 [ 1360.223584][T15513] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1360.272064][ T30] audit: type=1326 audit(1750747675.341:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.295160][ T30] audit: type=1326 audit(1750747675.351:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.319672][ T30] audit: type=1326 audit(1750747675.361:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.345600][ T30] audit: type=1326 audit(1750747675.361:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.369388][ T30] audit: type=1326 audit(1750747675.361:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.392562][ T30] audit: type=1326 audit(1750747675.371:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.415619][ T30] audit: type=1326 audit(1750747675.371:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.441517][ T30] audit: type=1326 audit(1750747675.371:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.465427][ T30] audit: type=1326 audit(1750747675.371:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.488371][ T30] audit: type=1326 audit(1750747675.371:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1360.619274][T15505] chnl_net:caif_netlink_parms(): no params data found [ 1360.912274][T15518] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1361.222687][ T5800] Bluetooth: hci3: command tx timeout [ 1361.406543][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3262'. [ 1361.901212][T15526] loop0: detected capacity change from 0 to 1024 [ 1362.145202][T15526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.481328][T15534] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1362.488277][T15534] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1362.501411][T15534] vhci_hcd vhci_hcd.0: Device attached [ 1362.559885][T15536] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1362.694884][T15534] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 1362.701780][T15534] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1362.710681][T15534] vhci_hcd vhci_hcd.0: Device attached [ 1362.722701][T14098] vhci_hcd: vhci_device speed not set [ 1362.742544][T15536] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 1362.749542][T15536] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1362.758039][T15536] vhci_hcd vhci_hcd.0: Device attached [ 1362.776767][T14322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.780487][T15505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.801662][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.809636][T15505] bridge_slave_0: entered allmulticast mode [ 1362.820021][T15505] bridge_slave_0: entered promiscuous mode [ 1362.834072][T14098] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1362.901837][T15534] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 1362.908809][T15534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1362.917463][T15534] vhci_hcd vhci_hcd.0: Device attached [ 1362.930685][T15505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.938550][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.947915][T15505] bridge_slave_1: entered allmulticast mode [ 1362.981802][T15536] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1362.994246][T15505] bridge_slave_1: entered promiscuous mode [ 1363.043668][T15534] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1363.198260][T15535] vhci_hcd: connection reset by peer [ 1363.216335][T15542] vhci_hcd: connection closed [ 1363.220418][T15538] vhci_hcd: connection closed [ 1363.230496][T15540] vhci_hcd: connection closed [ 1363.242060][T15451] vhci_hcd: stop threads [ 1363.251623][T15451] vhci_hcd: release socket [ 1363.256434][T15451] vhci_hcd: disconnect device [ 1363.271539][ T5800] Bluetooth: hci3: command tx timeout [ 1363.309909][T15451] vhci_hcd: stop threads [ 1363.315903][T15451] vhci_hcd: release socket [ 1363.321822][T15451] vhci_hcd: disconnect device [ 1363.389225][T15451] vhci_hcd: stop threads [ 1363.394364][T15451] vhci_hcd: release socket [ 1363.394359][T15505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.413239][T15451] vhci_hcd: disconnect device [ 1363.421041][T15505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.494647][T15451] vhci_hcd: stop threads [ 1363.499192][T15451] vhci_hcd: release socket [ 1363.504311][T15451] vhci_hcd: disconnect device [ 1363.784316][T15505] team0: Port device team_slave_0 added [ 1363.804824][T15505] team0: Port device team_slave_1 added [ 1363.891002][T15449] bridge_slave_1: left allmulticast mode [ 1363.897130][T15449] bridge_slave_1: left promiscuous mode [ 1363.905075][T15449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.981617][T15449] bridge_slave_0: left allmulticast mode [ 1363.987613][T15449] bridge_slave_0: left promiscuous mode [ 1363.995370][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.387290][T15449] team0: Port device vxlan0 removed [ 1364.518168][T15449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.572072][T15449] bond_slave_0: left promiscuous mode [ 1364.627580][T15449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.655730][T15449] bond_slave_1: left promiscuous mode [ 1364.665208][T15449] bond0 (unregistering): Released all slaves [ 1364.691260][T15449] bond1 (unregistering): Released all slaves [ 1365.197142][T15505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.205628][T15505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.234250][T15505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.277076][T15556] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.309884][T15505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.317615][T15505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.344444][T15505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.362936][ T5800] Bluetooth: hci3: command tx timeout [ 1365.484486][T15556] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.751312][T15561] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1365.904259][T15556] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.956533][T15505] hsr_slave_0: entered promiscuous mode [ 1365.975849][T15505] hsr_slave_1: entered promiscuous mode [ 1365.985383][T15505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1365.993514][T15505] Cannot create hsr debugfs directory [ 1366.086233][T15556] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.197516][T15449] hsr_slave_0: left promiscuous mode [ 1366.210523][T15449] hsr_slave_1: left promiscuous mode [ 1366.218994][T15449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.706080][T15449] team0 (unregistering): Port device team_slave_1 removed [ 1366.803354][T15449] team0 (unregistering): Port device team_slave_0 removed [ 1367.431007][ T5800] Bluetooth: hci3: command tx timeout [ 1367.641867][T15556] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.676341][T15556] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.719404][T15556] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.754104][T15556] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.991247][T14098] vhci_hcd: vhci_device speed not set [ 1369.328232][T15505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1369.455479][T15505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1369.537257][T15505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1369.608701][T15505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1369.889733][T15591] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1370.845709][T15505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.032895][T15505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.129996][T15459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.137830][T15459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.245569][T15459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.253404][T15459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.303751][T15599] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.543395][T15603] loop0: detected capacity change from 0 to 512 [ 1371.556948][T15603] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1371.567316][T15599] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.638156][T15603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 1371.704525][T15603] System zones: 1-12 [ 1371.789335][T15603] EXT4-fs (loop0): 1 truncate cleaned up [ 1371.799131][T15603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.831280][T15599] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.878018][T15505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.969786][T15599] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.743289][T15599] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.777754][T15599] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.813281][T15599] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.856353][T15599] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.512254][T15207] Bluetooth: hci5: command 0x0406 tx timeout [ 1373.656400][T15621] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1374.555399][T15505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.742495][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1374.742584][ T30] audit: type=1326 audit(1750747689.831:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1374.920985][ T30] audit: type=1326 audit(1750747689.901:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1374.944457][ T30] audit: type=1326 audit(1750747689.901:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1374.968427][ T30] audit: type=1326 audit(1750747689.901:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1374.993944][ T30] audit: type=1326 audit(1750747689.901:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1375.017750][ T30] audit: type=1326 audit(1750747689.921:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1375.032304][T15505] veth0_vlan: entered promiscuous mode [ 1375.040591][ T30] audit: type=1326 audit(1750747689.921:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1375.068602][ T30] audit: type=1326 audit(1750747689.931:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1375.093977][ T30] audit: type=1326 audit(1750747689.931:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1375.118172][ T30] audit: type=1326 audit(1750747689.931:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1375.228271][T15505] veth1_vlan: entered promiscuous mode [ 1375.511889][T15505] veth0_macvtap: entered promiscuous mode [ 1375.582758][T15505] veth1_macvtap: entered promiscuous mode [ 1375.763342][T15505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1375.892615][T15505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.036642][T15505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.045963][T15505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.055589][T15505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.064970][T15505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.275260][T15644] 9pnet_fd: Insufficient options for proto=fd [ 1377.136144][T15653] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1377.923902][T15660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3309'. [ 1382.003429][T15694] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1382.639485][T15459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.647936][T15459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.803715][T15697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3319'. [ 1382.845850][T15459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.854244][T15459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.031108][T14322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.657065][T15702] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.707357][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1383.707447][ T30] audit: type=1326 audit(1750747698.801:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1383.736852][ T30] audit: type=1326 audit(1750747698.801:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1383.759591][ T30] audit: type=1326 audit(1750747698.801:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1383.782492][ T30] audit: type=1326 audit(1750747698.861:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1383.927125][T15702] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.139593][T15702] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.340769][T15702] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.689423][T15702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.734293][T15702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.773516][T15702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.819041][T15702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.265043][T15720] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1385.758707][T15726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1388.140855][T15749] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1388.778854][T15757] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.079305][T15757] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.254923][T15757] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.473604][T15757] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.923293][T15757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.978304][T15757] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.018891][T15757] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.071232][T15757] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.350766][ T30] audit: type=1326 audit(1750747705.431:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.373986][ T30] audit: type=1326 audit(1750747705.431:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.502459][ T30] audit: type=1326 audit(1750747705.551:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.526020][ T30] audit: type=1326 audit(1750747705.551:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.555509][ T30] audit: type=1326 audit(1750747705.551:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.580615][ T30] audit: type=1326 audit(1750747705.551:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.603344][ T30] audit: type=1326 audit(1750747705.561:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.626046][ T30] audit: type=1326 audit(1750747705.561:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.655228][ T30] audit: type=1326 audit(1750747705.561:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.680034][ T30] audit: type=1326 audit(1750747705.561:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1390.769455][T15771] loop3: detected capacity change from 0 to 1024 [ 1390.799876][T15771] EXT4-fs: Ignoring removed nobh option [ 1390.805957][T15771] EXT4-fs: Ignoring removed bh option [ 1390.846323][T15763] loop0: detected capacity change from 0 to 512 [ 1390.921642][T15771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1390.991464][T15763] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1391.109449][T15763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1391.130095][T15763] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1391.176341][T15763] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.3347: attempt to clear invalid blocks 1024 len 1 [ 1391.225772][T15763] EXT4-fs (loop0): Remounting filesystem read-only [ 1391.305524][T15763] EXT4-fs (loop0): 1 truncate cleaned up [ 1391.314414][T15763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1391.498459][T15763] bond1: entered promiscuous mode [ 1391.507469][T15763] bond1: entered allmulticast mode [ 1391.518820][T15763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1391.577922][T15763] bond1 (unregistering): Released all slaves [ 1391.867410][T15505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.187257][T14322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1392.747936][T15792] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1393.464637][T15802] loop3: detected capacity change from 0 to 512 [ 1393.525139][T15801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.548655][T15802] EXT4-fs: Ignoring removed mblk_io_submit option [ 1393.597487][T15802] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1393.657861][T15802] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3360: iget: bad extended attribute block 1 [ 1393.675748][T15802] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3360: couldn't read orphan inode 15 (err -117) [ 1393.699196][T15802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1393.774716][T15801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.831758][T15802] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 1393.986050][T15801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.020559][ T5851] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1394.211500][ T5851] usb 2-1: device descriptor read/64, error -71 [ 1394.222399][T15505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.285066][T15801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.500710][ T5851] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1394.702031][ T5851] usb 2-1: device descriptor read/64, error -71 [ 1394.726243][T15801] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.776790][T15801] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.816049][T15801] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.821722][ T5851] usb usb2-port1: attempt power cycle [ 1394.866041][T15801] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.247983][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3370'. [ 1395.292793][ T5851] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1395.338774][ T5851] usb 2-1: device descriptor read/8, error -71 [ 1395.581159][ T5851] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1395.599434][T15829] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1395.653489][ T5851] usb 2-1: device descriptor read/8, error -71 [ 1395.785012][ T5851] usb usb2-port1: unable to enumerate USB device [ 1395.901856][T15834] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1396.503735][T15840] loop3: detected capacity change from 0 to 512 [ 1397.084031][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.091330][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.279998][T15865] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1398.582059][T15867] 9pnet_fd: Insufficient options for proto=fd [ 1398.749933][T15869] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.957731][T15869] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.078627][T15869] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.110821][T15207] Bluetooth: hci0: command 0x0406 tx timeout [ 1399.161777][T14142] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1399.168354][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1399.195275][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1399.229799][T15869] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.321926][T14142] usb 1-1: device descriptor read/64, error -71 [ 1399.533539][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1399.533625][ T30] audit: type=1326 audit(1750747714.631:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15880 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1399.569375][ T30] audit: type=1326 audit(1750747714.631:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15880 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1399.594048][ T30] audit: type=1326 audit(1750747714.631:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15880 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1399.712418][T15869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.730674][T14142] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1399.749997][T15869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.868192][T15869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.906155][T15869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.945742][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3395'. [ 1399.955214][T15883] batadv_slave_0: entered promiscuous mode [ 1399.966652][T15883] batadv_slave_0: entered allmulticast mode [ 1399.990537][T14142] usb 1-1: device descriptor read/64, error -71 [ 1400.004821][T15883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.122450][T14142] usb usb1-port1: attempt power cycle [ 1400.142674][T15885] bond0: option mode: unable to set because the bond device has slaves [ 1400.501406][T14142] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1400.535646][T14142] usb 1-1: device descriptor read/8, error -71 [ 1400.810739][T14142] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1400.841017][ T30] audit: type=1326 audit(1750747715.931:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.1.3400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1400.863963][ T30] audit: type=1326 audit(1750747715.931:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.1.3400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1400.895171][ T30] audit: type=1326 audit(1750747715.951:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.1.3400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1400.920643][ T30] audit: type=1326 audit(1750747715.971:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.1.3400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1400.943686][ T30] audit: type=1326 audit(1750747715.971:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.1.3400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1401.026732][T14142] usb 1-1: device descriptor read/8, error -71 [ 1401.096019][ T30] audit: type=1326 audit(1750747716.161:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.1.3400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1401.148069][T14142] usb usb1-port1: unable to enumerate USB device [ 1401.449861][T15901] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1401.648046][ T30] audit: type=1326 audit(1750747716.731:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz.4.3404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1401.749153][T15905] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1402.228551][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'. [ 1402.288090][T15910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3407'. [ 1402.348480][T15907] loop0: detected capacity change from 0 to 512 [ 1402.483964][T15907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.497830][T15907] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.203676][T15927] bond0: option mode: unable to set because the bond device has slaves [ 1403.331485][T15929] batadv0: entered promiscuous mode [ 1403.351535][T15929] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1403.391933][T14322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.553170][T15930] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1403.553170][T15930] program syz.1.3413 not setting count and/or reply_len properly [ 1404.335866][T15940] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1404.376879][T15938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.581175][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3419'. [ 1404.666223][T15938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.784582][T15946] 9pnet_fd: Insufficient options for proto=fd [ 1404.829726][T15938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.019947][T15938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.229654][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3421'. [ 1405.269586][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3422'. [ 1405.285942][T15949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3421'. [ 1405.443110][T15938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.481548][T15938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.501548][T15954] loop0: detected capacity change from 0 to 512 [ 1405.531182][T15938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.569458][T15938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.682287][T15954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.701453][T15954] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.155668][T14322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.447779][T15967] bond0: option mode: unable to set because the bond device has slaves [ 1406.752677][T15974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3429'. [ 1406.873954][T15973] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1407.448038][T15977] batadv0: entered promiscuous mode [ 1407.458331][T15977] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1407.673664][T15979] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1407.673664][T15979] program syz.0.3432 not setting count and/or reply_len properly [ 1407.819133][T15982] 9pnet_fd: Insufficient options for proto=fd [ 1408.011515][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1408.069331][T15984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1408.248736][T15986] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1408.443594][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3437'. [ 1409.438058][T15997] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.625029][T16003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3442'. [ 1409.686223][T15997] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.805344][T15997] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.886941][T15997] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.960593][ T5851] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1410.140661][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1410.149394][T15997] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.187307][T15997] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.237545][T15997] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.275377][T15997] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.410638][ T5851] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1410.590783][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1410.682744][T16008] bond0: option mode: unable to set because the bond device has slaves [ 1410.720935][ T5851] usb usb1-port1: attempt power cycle [ 1410.852939][T16012] 9pnet_fd: Insufficient options for proto=fd [ 1411.100639][ T5851] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 1411.166205][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1411.182546][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3448'. [ 1411.437745][ T5851] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1411.502004][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1411.631450][ T5851] usb usb1-port1: unable to enumerate USB device [ 1411.758280][T16018] batadv0: entered promiscuous mode [ 1411.767814][T16018] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1412.096648][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3452'. [ 1413.401723][T16035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3456'. [ 1413.762676][T16039] 9pnet_fd: Insufficient options for proto=fd [ 1414.183545][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1414.342069][T16044] bond0: option mode: unable to set because the bond device has slaves [ 1414.894184][T16051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3464'. [ 1415.174516][T16054] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.235481][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1415.235571][ T30] audit: type=1326 audit(1750747730.331:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.313175][ T30] audit: type=1326 audit(1750747730.361:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.342744][ T30] audit: type=1326 audit(1750747730.371:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.370672][ T30] audit: type=1326 audit(1750747730.371:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.396862][ T30] audit: type=1326 audit(1750747730.371:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.420052][ T30] audit: type=1326 audit(1750747730.371:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.444146][ T30] audit: type=1326 audit(1750747730.371:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.473305][ T30] audit: type=1326 audit(1750747730.371:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.498289][ T30] audit: type=1326 audit(1750747730.381:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.521085][ T30] audit: type=1326 audit(1750747730.391:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.3.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1415.654217][T16054] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.882210][T14142] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1415.884410][T16054] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.020755][T14142] usb 2-1: device descriptor read/64, error -71 [ 1416.069122][T16054] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.291261][T14142] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1416.373143][T16071] 9pnet_fd: Insufficient options for proto=fd [ 1416.502391][T16054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.539655][T16054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.588614][T16054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.626935][T16054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.670986][T14142] usb 2-1: device descriptor read/64, error -71 [ 1416.704049][T16068] ===================================================== [ 1416.711839][T16068] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1416.719183][T16068] sctp_inq_pop+0x14dc/0x19e0 [ 1416.728195][T16068] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1416.735342][T16068] sctp_inq_push+0x2a6/0x350 [ 1416.740346][T16068] sctp_backlog_rcv+0x3c7/0xda0 [ 1416.745551][T16068] sk_backlog_rcv+0x142/0x420 [ 1416.750734][T16068] __release_sock+0x1d3/0x330 [ 1416.764364][T16068] release_sock+0x6b/0x270 [ 1416.769093][T16068] sctp_wait_for_connect+0x458/0x820 [ 1416.778539][T16068] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1416.784474][T16068] sctp_sendmsg+0x3910/0x49f0 [ 1416.789426][T16068] inet_sendmsg+0x269/0x2a0 [ 1416.794614][T16068] __sock_sendmsg+0x278/0x3d0 [ 1416.799608][T16068] __sys_sendto+0x593/0x720 [ 1416.804545][T16068] __ia32_sys_sendto+0x12f/0x200 [ 1416.809711][T16068] ia32_sys_call+0x1397/0x42c0 [ 1416.814881][T16068] __do_fast_syscall_32+0xb0/0x150 [ 1416.820463][T16068] do_fast_syscall_32+0x38/0x80 [ 1416.825654][T16068] do_SYSENTER_32+0x1f/0x30 [ 1416.830691][T16068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1416.837373][T16068] [ 1416.839853][T16068] Uninit was stored to memory at: [ 1416.845402][T16068] sctp_inq_pop+0x144a/0x19e0 [ 1416.850584][T16068] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1416.855814][T16068] sctp_inq_push+0x2a6/0x350 [ 1416.869463][T16068] sctp_backlog_rcv+0x3c7/0xda0 [ 1416.877174][T16068] sk_backlog_rcv+0x142/0x420 [ 1416.882327][T16068] __release_sock+0x1d3/0x330 [ 1416.887263][T16068] release_sock+0x6b/0x270 [ 1416.892176][T16068] sctp_wait_for_connect+0x458/0x820 [ 1416.897748][T16068] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1416.903532][T16068] sctp_sendmsg+0x3910/0x49f0 [ 1416.908458][T16068] inet_sendmsg+0x269/0x2a0 [ 1416.913453][T16068] __sock_sendmsg+0x278/0x3d0 [ 1416.918491][T16068] __sys_sendto+0x593/0x720 [ 1416.923419][T16068] __ia32_sys_sendto+0x12f/0x200 [ 1416.928610][T16068] ia32_sys_call+0x1397/0x42c0 [ 1416.933745][T16068] __do_fast_syscall_32+0xb0/0x150 [ 1416.939110][T16068] do_fast_syscall_32+0x38/0x80 [ 1416.944368][T16068] do_SYSENTER_32+0x1f/0x30 [ 1416.949120][T16068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1416.955975][T16068] [ 1416.958461][T16068] Uninit was created at: [ 1416.971895][T16068] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1416.980794][T16068] kmalloc_reserve+0x13c/0x4b0 [ 1416.985885][T16068] __alloc_skb+0x347/0x7d0 [ 1416.990828][T16068] sctp_packet_transmit+0x18a1/0x46d0 [ 1416.996468][T16068] sctp_packet_transmit_chunk+0xfa/0x1c0 [ 1417.002513][T16068] sctp_outq_flush+0x26b5/0x67c0 [ 1417.007739][T16068] sctp_outq_uncork+0x9e/0xc0 [ 1417.012881][T16068] sctp_do_sm+0x326f/0x9720 [ 1417.017759][T16068] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 1417.023178][T16068] sctp_inq_push+0x2a6/0x350 [ 1417.028060][T16068] sctp_backlog_rcv+0x3c7/0xda0 [ 1417.033326][T16068] sk_backlog_rcv+0x142/0x420 [ 1417.038296][T16068] __release_sock+0x1d3/0x330 [ 1417.043890][T16068] release_sock+0x6b/0x270 [ 1417.048599][T16068] sctp_wait_for_connect+0x458/0x820 [ 1417.054341][T16068] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1417.060083][T16068] sctp_sendmsg+0x3910/0x49f0 [ 1417.074085][T16068] inet_sendmsg+0x269/0x2a0 [ 1417.081706][T16068] __sock_sendmsg+0x278/0x3d0 [ 1417.086687][T16068] __sys_sendto+0x593/0x720 [ 1417.091703][T16068] __ia32_sys_sendto+0x12f/0x200 [ 1417.096870][T16068] ia32_sys_call+0x1397/0x42c0 [ 1417.102111][T16068] __do_fast_syscall_32+0xb0/0x150 [ 1417.107498][T16068] do_fast_syscall_32+0x38/0x80 [ 1417.112835][T16068] do_SYSENTER_32+0x1f/0x30 [ 1417.117619][T16068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1417.124457][T16068] [ 1417.126992][T16068] CPU: 1 UID: 0 PID: 16068 Comm: syz.4.3471 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 1417.139630][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1417.150362][T16068] ===================================================== [ 1417.157598][T16068] Disabling lock debugging due to kernel taint [ 1417.164061][T16068] Kernel panic - not syncing: kmsan.panic set ... [ 1417.170783][T16068] CPU: 1 UID: 0 PID: 16068 Comm: syz.4.3471 Tainted: G B 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 1417.184813][T16068] Tainted: [B]=BAD_PAGE [ 1417.189124][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1417.199382][T16068] Call Trace: [ 1417.202813][T16068] [ 1417.205921][T16068] __dump_stack+0x26/0x30 [ 1417.210525][T16068] dump_stack_lvl+0x53/0x270 [ 1417.215380][T16068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1417.221494][T16068] dump_stack+0x1e/0x25 [ 1417.225896][T16068] panic+0x4bd/0xd50 [ 1417.230207][T16068] kmsan_report+0x31c/0x320 [ 1417.235003][T16068] ? __msan_warning+0x1b/0x30 [ 1417.240214][T16068] ? sctp_inq_pop+0x14dc/0x19e0 [ 1417.245327][T16068] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1417.250728][T16068] ? sctp_inq_push+0x2a6/0x350 [ 1417.255790][T16068] ? sctp_backlog_rcv+0x3c7/0xda0 [ 1417.261084][T16068] ? sk_backlog_rcv+0x142/0x420 [ 1417.266216][T16068] ? __release_sock+0x1d3/0x330 [ 1417.271319][T16068] ? release_sock+0x6b/0x270 [ 1417.276184][T16068] ? sctp_wait_for_connect+0x458/0x820 [ 1417.281903][T16068] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1417.287702][T16068] ? sctp_sendmsg+0x3910/0x49f0 [ 1417.292782][T16068] ? inet_sendmsg+0x269/0x2a0 [ 1417.297690][T16068] ? __sock_sendmsg+0x278/0x3d0 [ 1417.302805][T16068] ? __sys_sendto+0x593/0x720 [ 1417.307867][T16068] ? __ia32_sys_sendto+0x12f/0x200 [ 1417.313205][T16068] ? ia32_sys_call+0x1397/0x42c0 [ 1417.318364][T16068] ? __do_fast_syscall_32+0xb0/0x150 [ 1417.323978][T16068] ? do_fast_syscall_32+0x38/0x80 [ 1417.329248][T16068] ? do_SYSENTER_32+0x1f/0x30 [ 1417.334157][T16068] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1417.340927][T16068] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1417.347718][T16068] ? sched_clock_cpu+0x59/0xa80 [ 1417.352832][T16068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1417.358948][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.364351][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.369752][T16068] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1417.376382][T16068] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1417.382729][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.388141][T16068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1417.394250][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.399664][T16068] __msan_warning+0x1b/0x30 [ 1417.404432][T16068] sctp_inq_pop+0x14dc/0x19e0 [ 1417.409406][T16068] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1417.414628][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.420045][T16068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1417.426169][T16068] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 1417.432079][T16068] sctp_inq_push+0x2a6/0x350 [ 1417.436947][T16068] sctp_backlog_rcv+0x3c7/0xda0 [ 1417.442086][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.447496][T16068] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1417.453137][T16068] sk_backlog_rcv+0x142/0x420 [ 1417.458109][T16068] __release_sock+0x1d3/0x330 [ 1417.463066][T16068] release_sock+0x6b/0x270 [ 1417.467764][T16068] sctp_wait_for_connect+0x458/0x820 [ 1417.473326][T16068] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1417.479759][T16068] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1417.485394][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.490796][T16068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1417.496959][T16068] sctp_sendmsg+0x3910/0x49f0 [ 1417.501886][T16068] ? kmsan_save_stack_with_flags+0x10/0x60 [ 1417.508062][T16068] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1417.513322][T16068] inet_sendmsg+0x269/0x2a0 [ 1417.518085][T16068] __sock_sendmsg+0x278/0x3d0 [ 1417.523044][T16068] __sys_sendto+0x593/0x720 [ 1417.527845][T16068] ? do_futex+0x416/0x480 [ 1417.532509][T16068] ? kmsan_get_metadata+0xfb/0x160 [ 1417.537919][T16068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1417.544078][T16068] __ia32_sys_sendto+0x12f/0x200 [ 1417.549269][T16068] ia32_sys_call+0x1397/0x42c0 [ 1417.554256][T16068] __do_fast_syscall_32+0xb0/0x150 [ 1417.559616][T16068] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1417.565726][T16068] do_fast_syscall_32+0x38/0x80 [ 1417.570814][T16068] do_SYSENTER_32+0x1f/0x30 [ 1417.575553][T16068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1417.582170][T16068] RIP: 0023:0xf7f45539 [ 1417.586418][T16068] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1417.606733][T16068] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1417.615407][T16068] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 1417.623586][T16068] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 1417.631757][T16068] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1417.639999][T16068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1417.648178][T16068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1417.656373][T16068] [ 1417.659724][T16068] Kernel Offset: disabled [ 1417.664157][T16068] Rebooting in 86400 seconds..