last executing test programs: 37.439749614s ago: executing program 1 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB='\b\x00}'], 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x50) 37.290768526s ago: executing program 1 (id=888): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 37.112288283s ago: executing program 1 (id=891): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 37.049035113s ago: executing program 1 (id=892): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) dup2(r2, r0) r4 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0xfffffff7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002500010026bd702cff0000000000000097c4489e1f053d165eb12f18d5c2eea1f7651078369df81eeb12b7ebf6487ff61d96cf77f8b03ee2de27db1417323926ba8878aaccdc01bcda20db20027149077db74fcf4671b3bdff2a635b6053e7c9d95ce5eaa2dbefc4994fbeadd5e6ae7b9d9ee74b8fa831e2ed2223b5c027f76d16cb"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r5, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 36.313673241s ago: executing program 1 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 35.999844031s ago: executing program 1 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 35.46924445s ago: executing program 32 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 7.925045303s ago: executing program 5 (id=1240): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 7.564838915s ago: executing program 5 (id=1243): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000e80)="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", 0x4d3}], 0x1}}], 0x3, 0x100000c0) 7.395715239s ago: executing program 5 (id=1246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.183970122s ago: executing program 5 (id=1249): r0 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x3, @private1, 0x7}}, 0x2, 0x6}, 0x90) 7.021868886s ago: executing program 5 (id=1252): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x7, 0x1, 0x2, 0xfffe}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0xb6a6) 6.064443869s ago: executing program 5 (id=1264): socket$nl_route(0x10, 0x3, 0x0) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x9, 0x4ce, 0x3, 0x9dff, 0xf, "800300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.93280356s ago: executing program 3 (id=1299): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c6176658000"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 1.58416676s ago: executing program 3 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a303}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.289971476s ago: executing program 3 (id=1310): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80080, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) 1.10425406s ago: executing program 0 (id=1313): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.104146291s ago: executing program 3 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0xfe69) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b8000001009ae6bad10404ed0f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.10404991s ago: executing program 2 (id=1315): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4c2, &(0x7f0000002240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4b4, 0x0, 0x0, 0x3f, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x4a0, 0x0, @wg=@data={0x4, 0xc, 0x4, "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"}}}}}}, 0x0) 1.013739876s ago: executing program 0 (id=1316): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 991.427054ms ago: executing program 4 (id=1317): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x48010) 904.194311ms ago: executing program 2 (id=1318): socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x82, 0x28440) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x24010094) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 814.221202ms ago: executing program 4 (id=1319): getpriority(0x2, 0x0) 743.805585ms ago: executing program 0 (id=1320): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a303}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 648.347155ms ago: executing program 2 (id=1321): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4c051}, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @remote}, 0x1b, r3}) 648.188711ms ago: executing program 4 (id=1322): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x40) epoll_create1(0x0) connect$pppoe(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x2) 536.685584ms ago: executing program 2 (id=1323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 531.422352ms ago: executing program 3 (id=1324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0xf000}) 474.539178ms ago: executing program 0 (id=1325): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80080, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) 464.564551ms ago: executing program 4 (id=1326): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 300.422525ms ago: executing program 4 (id=1327): r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb2521000000080003", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 244.309578ms ago: executing program 0 (id=1328): write$char_usb(0xffffffffffffffff, &(0x7f0000001340)="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", 0x6df) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 237.616666ms ago: executing program 2 (id=1329): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) 122.943415ms ago: executing program 4 (id=1330): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 47.018946ms ago: executing program 2 (id=1331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r8) 149.02µs ago: executing program 0 (id=1332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r3, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x2b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 3 (id=1333): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000440)=0x20a164, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts. [ 66.302412][ T5827] cgroup: Unknown subsys name 'net' [ 66.451598][ T5827] cgroup: Unknown subsys name 'cpuset' [ 66.460715][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.855467][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.232145][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.237181][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.248499][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.256924][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.258522][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.266880][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.279209][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.279991][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.286368][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.294930][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.302854][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.309665][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.318239][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.325176][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.328889][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.339145][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.350510][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.350566][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.370845][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.379392][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.389883][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.391841][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.410902][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.426721][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.438096][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.946259][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 71.189760][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 71.214226][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 71.262510][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 71.351174][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 71.362107][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.369607][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.377003][ T5854] bridge_slave_0: entered allmulticast mode [ 71.384223][ T5854] bridge_slave_0: entered promiscuous mode [ 71.422313][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.429799][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.436949][ T5854] bridge_slave_1: entered allmulticast mode [ 71.444193][ T5854] bridge_slave_1: entered promiscuous mode [ 71.458973][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.465817][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.568606][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.615248][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.643199][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.650926][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.658345][ T5857] bridge_slave_0: entered allmulticast mode [ 71.665301][ T5857] bridge_slave_0: entered promiscuous mode [ 71.672549][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.679977][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.687240][ T5855] bridge_slave_0: entered allmulticast mode [ 71.694723][ T5855] bridge_slave_0: entered promiscuous mode [ 71.736786][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.744609][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.752229][ T5857] bridge_slave_1: entered allmulticast mode [ 71.760137][ T5857] bridge_slave_1: entered promiscuous mode [ 71.766677][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.774035][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.781353][ T5855] bridge_slave_1: entered allmulticast mode [ 71.788806][ T5855] bridge_slave_1: entered promiscuous mode [ 71.806634][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.813828][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.821081][ T5856] bridge_slave_0: entered allmulticast mode [ 71.828816][ T5856] bridge_slave_0: entered promiscuous mode [ 71.838483][ T5854] team0: Port device team_slave_0 added [ 71.882133][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.889754][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.896912][ T5856] bridge_slave_1: entered allmulticast mode [ 71.904333][ T5856] bridge_slave_1: entered promiscuous mode [ 71.912735][ T5854] team0: Port device team_slave_1 added [ 71.922822][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.930026][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.937947][ T5853] bridge_slave_0: entered allmulticast mode [ 71.945044][ T5853] bridge_slave_0: entered promiscuous mode [ 71.953739][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.960998][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.968500][ T5853] bridge_slave_1: entered allmulticast mode [ 71.975421][ T5853] bridge_slave_1: entered promiscuous mode [ 72.049283][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.063043][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.074678][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.089075][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.159466][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.173064][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.183861][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.191330][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.217440][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.230940][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.238035][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.264061][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.278100][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.349332][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.373674][ T5857] team0: Port device team_slave_0 added [ 72.382935][ T5855] team0: Port device team_slave_0 added [ 72.391526][ T5855] team0: Port device team_slave_1 added [ 72.398959][ T5846] Bluetooth: hci3: command tx timeout [ 72.399159][ T5844] Bluetooth: hci0: command tx timeout [ 72.410387][ T5160] Bluetooth: hci1: command tx timeout [ 72.417680][ T5856] team0: Port device team_slave_0 added [ 72.437723][ T5857] team0: Port device team_slave_1 added [ 72.471659][ T5856] team0: Port device team_slave_1 added [ 72.478725][ T5844] Bluetooth: hci2: command tx timeout [ 72.484143][ T5853] team0: Port device team_slave_0 added [ 72.490360][ T5160] Bluetooth: hci4: command tx timeout [ 72.537839][ T5853] team0: Port device team_slave_1 added [ 72.556739][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.563945][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.590383][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.602530][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.610169][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.636151][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.674932][ T5854] hsr_slave_0: entered promiscuous mode [ 72.681756][ T5854] hsr_slave_1: entered promiscuous mode [ 72.690969][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.698052][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.724630][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.736256][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.743545][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.770078][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.782365][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.789430][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.815471][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.866498][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.873773][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.900388][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.919286][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.926248][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.952389][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.995375][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.002557][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.028665][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.100589][ T5855] hsr_slave_0: entered promiscuous mode [ 73.107278][ T5855] hsr_slave_1: entered promiscuous mode [ 73.114209][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 73.120491][ T5855] Cannot create hsr debugfs directory [ 73.194223][ T5853] hsr_slave_0: entered promiscuous mode [ 73.201164][ T5853] hsr_slave_1: entered promiscuous mode [ 73.207573][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 73.213737][ T5853] Cannot create hsr debugfs directory [ 73.225763][ T5857] hsr_slave_0: entered promiscuous mode [ 73.232688][ T5857] hsr_slave_1: entered promiscuous mode [ 73.240238][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 73.245988][ T5857] Cannot create hsr debugfs directory [ 73.259208][ T5856] hsr_slave_0: entered promiscuous mode [ 73.265700][ T5856] hsr_slave_1: entered promiscuous mode [ 73.271928][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 73.277674][ T5856] Cannot create hsr debugfs directory [ 73.765723][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.798682][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.811997][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.827223][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.942759][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.954707][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.965813][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.977766][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.092457][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.113598][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.125769][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.143509][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.163523][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.251612][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.271979][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.307182][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.317761][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.332910][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.365254][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.402483][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.415058][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.422455][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.460447][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.467755][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.477928][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.478514][ T5844] Bluetooth: hci1: command tx timeout [ 74.485068][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.490618][ T5160] Bluetooth: hci0: command tx timeout [ 74.500438][ T5846] Bluetooth: hci3: command tx timeout [ 74.512669][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.523185][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.534085][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.545074][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.560448][ T5846] Bluetooth: hci2: command tx timeout [ 74.560461][ T5160] Bluetooth: hci4: command tx timeout [ 74.576072][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.583259][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.714022][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.724882][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.827455][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.855033][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.893186][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.911690][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.937795][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.954858][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.962050][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.001482][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.015330][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.022480][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.036723][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.072464][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.079996][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.120719][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.127989][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.145787][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.182792][ T5854] veth0_vlan: entered promiscuous mode [ 75.192211][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.199439][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.222491][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.229677][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.256812][ T5854] veth1_vlan: entered promiscuous mode [ 75.303527][ T5856] veth0_vlan: entered promiscuous mode [ 75.352331][ T5856] veth1_vlan: entered promiscuous mode [ 75.392466][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.434910][ T5854] veth0_macvtap: entered promiscuous mode [ 75.453653][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.477037][ T5854] veth1_macvtap: entered promiscuous mode [ 75.506080][ T5856] veth0_macvtap: entered promiscuous mode [ 75.532350][ T5856] veth1_macvtap: entered promiscuous mode [ 75.560760][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.582414][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.610842][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.633762][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.642881][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.653803][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.667294][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.695995][ T1142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.706169][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.727245][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.742887][ T5857] veth0_vlan: entered promiscuous mode [ 75.749844][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.761233][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.807662][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.816697][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.843187][ T5857] veth1_vlan: entered promiscuous mode [ 75.954849][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.963544][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.980633][ T5855] veth0_vlan: entered promiscuous mode [ 75.995267][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.010375][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.033300][ T5853] veth0_vlan: entered promiscuous mode [ 76.061216][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.064117][ T5855] veth1_vlan: entered promiscuous mode [ 76.075787][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.095965][ T5853] veth1_vlan: entered promiscuous mode [ 76.122243][ T5857] veth0_macvtap: entered promiscuous mode [ 76.150710][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.151161][ T5857] veth1_macvtap: entered promiscuous mode [ 76.184411][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.194299][ T5855] veth0_macvtap: entered promiscuous mode [ 76.219830][ T5855] veth1_macvtap: entered promiscuous mode [ 76.252049][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.277295][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.305259][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.336289][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.349199][ T5853] veth0_macvtap: entered promiscuous mode [ 76.387091][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.430059][ T5853] veth1_macvtap: entered promiscuous mode [ 76.493640][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.506516][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.532917][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.559668][ T5846] Bluetooth: hci1: command tx timeout [ 76.560196][ T5844] Bluetooth: hci3: command tx timeout [ 76.565189][ T5160] Bluetooth: hci0: command tx timeout [ 76.583527][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.596120][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.633657][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.643284][ T5160] Bluetooth: hci4: command tx timeout [ 76.643338][ T5844] Bluetooth: hci2: command tx timeout [ 76.664186][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.690816][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.721983][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.740927][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.787356][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.813085][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.857165][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.888063][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.969297][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.977151][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.051852][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.066507][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.154892][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.171845][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.237349][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.270719][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.309257][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.317108][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.429411][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.467651][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.603662][ T5953] pim6reg1: entered promiscuous mode [ 77.623891][ T5953] pim6reg1: entered allmulticast mode [ 77.682833][ T5956] pim6reg1: tun_chr_ioctl cmd 1074025673 [ 77.819157][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.091996][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 78.138861][ T5962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.176405][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.551366][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.623327][ T30] audit: type=1326 audit(1759265018.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.3.21" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f582f58eec9 code=0x0 [ 78.646954][ T5844] Bluetooth: hci3: command tx timeout [ 78.653127][ T5844] Bluetooth: hci0: command tx timeout [ 78.657882][ T5160] Bluetooth: hci1: command tx timeout [ 78.718100][ T5846] Bluetooth: hci4: command tx timeout [ 78.727202][ T5160] Bluetooth: hci2: command tx timeout [ 79.543173][ T30] audit: type=1326 audit(1759265019.264:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 79.698641][ T30] audit: type=1326 audit(1759265019.264:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 79.776685][ T30] audit: type=1326 audit(1759265019.264:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 79.910845][ T30] audit: type=1326 audit(1759265019.264:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 80.002315][ T30] audit: type=1326 audit(1759265019.274:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 80.070320][ T30] audit: type=1326 audit(1759265019.274:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 80.149389][ T30] audit: type=1326 audit(1759265019.274:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 80.333438][ T30] audit: type=1326 audit(1759265019.274:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 80.373065][ T30] audit: type=1326 audit(1759265019.274:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f2998eec9 code=0x7ffc0000 [ 80.965121][ T6054] sctp: [Deprecated]: syz.0.48 (pid 6054) Use of int in maxseg socket option. [ 80.965121][ T6054] Use struct sctp_assoc_value instead [ 83.257315][ T6148] IPv6: addrconf: prefix option has invalid lifetime [ 83.756127][ T6172] process 'syz.1.94' launched './file0' with NULL argv: empty string added [ 86.812378][ T9] cfg80211: failed to load regulatory.db [ 89.178183][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 89.178199][ T30] audit: type=1326 audit(1759265028.894:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 89.318147][ T30] audit: type=1326 audit(1759265028.894:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 89.417944][ T30] audit: type=1326 audit(1759265028.894:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 89.503983][ T30] audit: type=1326 audit(1759265028.894:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 89.584899][ T30] audit: type=1326 audit(1759265028.904:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 89.678082][ T30] audit: type=1326 audit(1759265028.904:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 89.829728][ T30] audit: type=1326 audit(1759265028.904:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 89.991768][ T30] audit: type=1326 audit(1759265028.904:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 90.047703][ T30] audit: type=1326 audit(1759265028.904:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 90.077016][ T30] audit: type=1326 audit(1759265028.904:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb41e58eec9 code=0x7ffc0000 [ 90.827183][ T6324] kvm: kvm [6321]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 92.009978][ T6381] Zero length message leads to an empty skb [ 92.453494][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.691567][ T6414] IPv6: addrconf: prefix option has invalid lifetime [ 93.524510][ T6445] IPv6: addrconf: prefix option has invalid lifetime [ 93.684582][ T6447] netlink: 'syz.0.208': attribute type 5 has an invalid length. [ 93.741618][ T6452] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 94.267296][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.215'. [ 94.325947][ T6467] bridge_slave_0: left allmulticast mode [ 94.368095][ T6467] bridge_slave_0: left promiscuous mode [ 94.391059][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.465383][ T6467] bridge_slave_1: left allmulticast mode [ 94.485313][ T6467] bridge_slave_1: left promiscuous mode [ 94.501334][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.529846][ T6467] bond0: (slave bond_slave_0): Releasing backup interface [ 94.544405][ T6467] bond0: (slave bond_slave_1): Releasing backup interface [ 94.567593][ T6467] team0: Port device team_slave_0 removed [ 94.582447][ T6467] team0: Port device team_slave_1 removed [ 94.589384][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.597054][ T6467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.608110][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.617202][ T6467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.316239][ T6495] syz.4.229 uses obsolete (PF_INET,SOCK_PACKET) [ 95.552484][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.233'. [ 96.282782][ T6533] bridge_slave_0: left allmulticast mode [ 96.314542][ T6533] bridge_slave_0: left promiscuous mode [ 96.336468][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.415581][ T6533] bridge_slave_1: left allmulticast mode [ 96.462358][ T6533] bridge_slave_1: left promiscuous mode [ 96.501836][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.612340][ T6533] bond0: (slave bond_slave_0): Releasing backup interface [ 96.662694][ T6533] bond0: (slave bond_slave_1): Releasing backup interface [ 96.729233][ T6533] team0: Port device team_slave_0 removed [ 96.771515][ T6533] team0: Port device team_slave_1 removed [ 96.811627][ T6533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.846793][ T6533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.910678][ T6533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.938545][ T6533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.347255][ T6572] syzkaller1: entered promiscuous mode [ 97.374732][ T6572] syzkaller1: entered allmulticast mode [ 97.626774][ T6585] tipc: Started in network mode [ 97.644516][ T6585] tipc: Node identity b9, cluster identity 4711 [ 97.666018][ T6585] tipc: Node number set to 185 [ 98.390413][ T6619] tipc: Started in network mode [ 98.405806][ T6619] tipc: Node identity b9, cluster identity 4711 [ 98.428284][ T6621] IPv6: addrconf: prefix option has invalid lifetime [ 98.438092][ T6619] tipc: Node number set to 185 [ 100.067896][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 100.067912][ T30] audit: type=1326 audit(1759265039.784:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x0 [ 100.584213][ T6722] IPv6: addrconf: prefix option has invalid lifetime [ 100.926878][ T6736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.336'. [ 100.949581][ T6736] batman_adv: batadv0: Adding interface: dummy0 [ 100.956151][ T6736] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.993529][ T6736] batman_adv: batadv0: Interface activated: dummy0 [ 101.047166][ T6736] batadv0: mtu less than device minimum [ 101.072000][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.084111][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.096044][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.108033][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.119892][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.131813][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.143694][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.337269][ T6752] fuse: Unknown parameter 'grou00000000000000000000' [ 101.512000][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 102.014721][ T6783] fuse: Unknown parameter 'grou00000000000000000000' [ 102.560037][ T6807] fuse: Unknown parameter 'grou00000000000000000000' [ 103.137729][ T6831] netlink: 'syz.2.382': attribute type 5 has an invalid length. [ 103.170426][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 103.860156][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 104.002627][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 104.018361][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 104.651478][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 104.805154][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 105.653826][ T6938] warning: `syz.1.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.735893][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 106.623536][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 106.696584][ T6971] fuse: Unknown parameter 'group_id00000000000000000000' [ 107.450058][ T6999] fuse: Unknown parameter 'group_id00000000000000000000' [ 107.576804][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 108.196912][ T7028] fuse: Bad value for 'user_id' [ 108.225819][ T7028] fuse: Bad value for 'user_id' [ 108.408841][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 109.203171][ T7063] fuse: Bad value for 'user_id' [ 109.209232][ T7063] fuse: Bad value for 'user_id' [ 110.362252][ T7098] fuse: Bad value for 'user_id' [ 110.367152][ T7098] fuse: Bad value for 'user_id' [ 110.969774][ T6895] net_ratelimit: 12 callbacks suppressed [ 110.969791][ T6895] Set syz1 is full, maxelem 65536 reached [ 111.315382][ T5846] Bluetooth: Unexpected continuation frame (len 179) [ 113.462622][ T7199] IPv6: addrconf: prefix option has invalid lifetime [ 114.567422][ T7228] IPv6: addrconf: prefix option has invalid lifetime [ 115.258190][ T7256] IPv6: addrconf: prefix option has invalid lifetime [ 115.967584][ T5916] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.223399][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 116.320412][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 116.424228][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8791, setting to 1024 [ 116.455373][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.542081][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 116.567176][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 116.596844][ T5916] usb 4-1: Product: syz [ 116.606612][ T5916] usb 4-1: Manufacturer: syz [ 116.616886][ T5916] usb 4-1: SerialNumber: syz [ 116.714926][ T5916] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 117.191305][ T30] audit: type=1326 audit(1759265056.894:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.1.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2f578eec9 code=0x0 [ 117.556831][ T43] usb 4-1: USB disconnect, device number 2 [ 117.615466][ T43] appletouch 4-1:1.0: input: appletouch disconnected [ 117.949110][ T7328] delete_channel: no stack [ 118.618841][ T7392] tipc: Enabling of bearer rejected, failed to enable media [ 119.081464][ T7414] input: syz1 as /devices/virtual/input/input6 [ 119.733228][ T7432] tipc: Enabled bearer , priority 0 [ 119.741245][ T7432] syzkaller0: entered promiscuous mode [ 119.746898][ T7432] syzkaller0: entered allmulticast mode [ 119.796842][ T7432] tipc: Resetting bearer [ 119.846987][ T7431] tipc: Resetting bearer [ 119.917226][ T7431] tipc: Disabling bearer [ 120.339411][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.497996][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 120.669367][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 120.682067][ T43] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.700374][ T43] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.731408][ T43] usb 1-1: Product: syz [ 120.739455][ T43] usb 1-1: Manufacturer: syz [ 120.750720][ T43] usb 1-1: SerialNumber: syz [ 120.771340][ T43] usb 1-1: config 0 descriptor?? [ 120.780825][ T7448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.791270][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 120.797829][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 121.343612][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 121.853021][ T5925] raw-gadget.0 gadget.0: failed to queue suspend event [ 121.928032][ T7448] raw-gadget.0 gadget.0: failed to queue resume event [ 121.936311][ T7482] raw-gadget.0 gadget.0: failed to queue disconnect event [ 123.773490][ T30] audit: type=1326 audit(1759265063.494:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2f578eec9 code=0x0 [ 124.034638][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.704'. [ 124.538866][ T7603] loop4: detected capacity change from 0 to 524287936 [ 124.724787][ T7607] tipc: Started in network mode [ 124.748932][ T7607] tipc: Node identity f2a937d2cab2, cluster identity 4711 [ 124.756253][ T7607] tipc: Enabled bearer , priority 0 [ 124.779657][ T7610] syzkaller0: entered promiscuous mode [ 124.785168][ T7610] syzkaller0: entered allmulticast mode [ 124.845371][ T7606] tipc: Resetting bearer [ 124.887084][ T7606] tipc: Disabling bearer [ 125.109114][ T92] usb 1-1: USB disconnect, device number 2 [ 125.159113][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 125.660453][ T7647] tipc: Started in network mode [ 125.675971][ T7647] tipc: Node identity 1a10e59876b6, cluster identity 4711 [ 125.697764][ T7647] tipc: Enabled bearer , priority 0 [ 125.715500][ T7654] syzkaller0: entered promiscuous mode [ 125.736022][ T7654] syzkaller0: entered allmulticast mode [ 125.773336][ T7646] tipc: Resetting bearer [ 125.844067][ T7646] tipc: Disabling bearer [ 126.146429][ T7667] syzkaller0: entered promiscuous mode [ 126.164753][ T7667] syzkaller0: entered allmulticast mode [ 127.424248][ T7702] fuse: Bad value for 'fd' [ 128.332979][ T7731] fuse: Bad value for 'fd' [ 128.916759][ T30] audit: type=1326 audit(1759265068.634:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41e58eec9 code=0x0 [ 129.013445][ T7756] fuse: Bad value for 'fd' [ 129.536778][ T7780] syzkaller1: entered promiscuous mode [ 129.542540][ T7780] syzkaller1: entered allmulticast mode [ 130.000298][ T5909] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.017720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.199852][ T5909] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 130.209302][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.221323][ T5909] usb 4-1: config 0 has no interfaces? [ 130.229079][ T5909] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.244445][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.264692][ T5909] usb 4-1: config 0 descriptor?? [ 130.346105][ T7810] syzkaller1: entered promiscuous mode [ 130.355621][ T7810] syzkaller1: entered allmulticast mode [ 130.494196][ T5909] usb 4-1: USB disconnect, device number 3 [ 130.572091][ T7820] loop6: detected capacity change from 0 to 524279808 [ 130.639877][ T7820] loop6: detected capacity change from 524279808 to 1 [ 130.656000][ T7820] Dev loop6: unable to read RDB block 1 [ 130.708103][ T7820] loop6: unable to read partition table [ 130.714164][ T7820] loop6: partition table beyond EOD, truncated [ 130.741684][ T7820] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 131.319525][ T7840] syzkaller1: entered promiscuous mode [ 131.325045][ T7840] syzkaller1: entered allmulticast mode [ 132.033887][ T7879] syzkaller1: entered promiscuous mode [ 132.039729][ T7879] syzkaller1: entered allmulticast mode [ 132.781063][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 132.891537][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.898149][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.931648][ T7911] syzkaller1: entered promiscuous mode [ 132.937162][ T7911] syzkaller1: entered allmulticast mode [ 132.937648][ T5210] Dev loop6: unable to read RDB block 1 [ 132.963073][ T5210] loop6: unable to read partition table [ 132.980150][ T5210] loop6: partition table beyond EOD, truncated [ 133.311343][ T7919] netlink: 'syz.2.855': attribute type 5 has an invalid length. [ 133.602962][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 133.977772][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 134.318168][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 134.608045][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.772888][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 134.782434][ T5916] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 134.796971][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.828214][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.853392][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 134.858622][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.883016][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.903063][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.920589][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.168074][ T5916] usb 4-1: usb_control_msg returned -32 [ 135.173711][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 135.329348][ T7981] tipc: Enabled bearer , priority 0 [ 135.337082][ T7981] syzkaller0: entered promiscuous mode [ 135.343339][ T7981] syzkaller0: entered allmulticast mode [ 135.389596][ T7981] tipc: Resetting bearer [ 135.428115][ T7980] tipc: Resetting bearer [ 135.462556][ T7980] tipc: Disabling bearer [ 135.594117][ T7986] syzkaller0: entered promiscuous mode [ 135.602550][ T7986] syzkaller0: entered allmulticast mode [ 135.818840][ T7994] netlink: 'syz.1.888': attribute type 5 has an invalid length. [ 135.878929][ T5924] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.924865][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 135.958816][ T7999] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 136.066926][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.094811][ T5925] usb 4-1: USB disconnect, device number 4 [ 136.104787][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.126616][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.140338][ T5924] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.151959][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.163945][ T5924] usb 5-1: config 0 descriptor?? [ 136.586970][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.600857][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.619853][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.627396][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.635550][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.644283][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.652435][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.660689][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.682009][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.716476][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 136.769126][ T5924] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 136.884381][ T5924] usb 5-1: USB disconnect, device number 2 [ 137.033518][ T8029] fido_id[8029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 137.185582][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 137.268039][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.345452][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.438236][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.674205][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.253808][ T49] bridge_slave_1: left allmulticast mode [ 138.274283][ T49] bridge_slave_1: left promiscuous mode [ 138.309030][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.356151][ T49] bridge_slave_0: left allmulticast mode [ 138.377053][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.387087][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.395679][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.405831][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.407149][ T49] bridge_slave_0: left promiscuous mode [ 138.421552][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.431957][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.976778][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.002315][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.049643][ T49] bond0 (unregistering): Released all slaves [ 139.334464][ T49] tipc: Left network mode [ 140.080585][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 140.221918][ T49] hsr_slave_0: left promiscuous mode [ 140.243184][ T49] hsr_slave_1: left promiscuous mode [ 140.251558][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.273090][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.312923][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.333055][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.407124][ T49] veth1_macvtap: left promiscuous mode [ 140.414973][ T30] audit: type=1326 audit(1759265080.144:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f582f58eec9 code=0x0 [ 140.427205][ T49] veth0_macvtap: left promiscuous mode [ 140.460731][ T49] veth1_vlan: left promiscuous mode [ 140.480025][ T5160] Bluetooth: hci2: command tx timeout [ 140.495905][ T49] veth0_vlan: left promiscuous mode [ 141.615398][ T49] team0 (unregistering): Port device team_slave_1 removed [ 141.667269][ T49] team0 (unregistering): Port device team_slave_0 removed [ 142.568692][ T5160] Bluetooth: hci2: command tx timeout [ 142.614299][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.673273][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.700995][ T8081] bridge_slave_0: entered allmulticast mode [ 142.734069][ T8081] bridge_slave_0: entered promiscuous mode [ 142.752277][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.770634][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.800359][ T8081] bridge_slave_1: entered allmulticast mode [ 142.861210][ T8081] bridge_slave_1: entered promiscuous mode [ 143.001396][ T8212] kvm: pic: non byte write [ 143.066860][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.102687][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.361641][ T8081] team0: Port device team_slave_0 added [ 143.400884][ T8081] team0: Port device team_slave_1 added [ 143.583064][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.595903][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.665942][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.693995][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.710347][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.793888][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.073600][ T8081] hsr_slave_0: entered promiscuous mode [ 144.118955][ T8081] hsr_slave_1: entered promiscuous mode [ 144.639452][ T5160] Bluetooth: hci2: command tx timeout [ 144.759688][ T8081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.778992][ T8081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.803468][ T8081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.846362][ T8081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.181036][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.254124][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.310528][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.317724][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.362147][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.369367][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.622916][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.740016][ T8081] veth0_vlan: entered promiscuous mode [ 145.773103][ T8081] veth1_vlan: entered promiscuous mode [ 145.863623][ T8081] veth0_macvtap: entered promiscuous mode [ 145.896817][ T8081] veth1_macvtap: entered promiscuous mode [ 145.960268][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.013715][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.092626][ T76] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.131439][ T76] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.153701][ T76] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.231737][ T76] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.329978][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.369794][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.472048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.517956][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.719036][ T5160] Bluetooth: hci2: command tx timeout [ 148.173592][ T8362] tipc: Enabled bearer , priority 0 [ 148.197586][ T8362] syzkaller0: entered promiscuous mode [ 148.209889][ T8362] syzkaller0: entered allmulticast mode [ 148.236383][ T8362] tipc: Resetting bearer [ 148.262283][ T8361] tipc: Resetting bearer [ 148.314799][ T8361] tipc: Disabling bearer [ 149.066046][ T5210] Dev loop6: unable to read RDB block 1 [ 149.094737][ T5210] loop6: unable to read partition table [ 149.112604][ T5210] loop6: partition table beyond EOD, truncated [ 150.417566][ T8459] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 150.533919][ T8459] bond1: entered promiscuous mode [ 150.571616][ T8459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.855079][ T8502] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 151.903810][ T8502] bond2: entered promiscuous mode [ 151.915874][ T8502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.405316][ T8574] mmap: syz.5.1060 (8574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.479507][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 154.302641][ T8620] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 154.359075][ T8620] bond3: entered promiscuous mode [ 154.364617][ T8620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.805574][ T8643] netlink: 'syz.0.1090': attribute type 9 has an invalid length. [ 154.822206][ T8643] netlink: 'syz.0.1090': attribute type 7 has an invalid length. [ 154.845298][ T8643] netlink: 'syz.0.1090': attribute type 8 has an invalid length. [ 155.144576][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1094'. [ 155.744169][ T8686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1111'. [ 156.352177][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1123'. [ 156.961071][ T8751] tipc: Started in network mode [ 156.976176][ T8751] tipc: Node identity 3628dc75dc32, cluster identity 4711 [ 156.991134][ T8751] tipc: Enabled bearer , priority 0 [ 156.999454][ T8751] syzkaller0: entered promiscuous mode [ 157.017612][ T8751] syzkaller0: entered allmulticast mode [ 157.041904][ T8751] tipc: Resetting bearer [ 157.050689][ T8749] tipc: Resetting bearer [ 157.093143][ T8749] tipc: Disabling bearer [ 157.782628][ T8783] netlink: 'syz.2.1145': attribute type 27 has an invalid length. [ 157.871002][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.878865][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.953706][ T8783] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.070455][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.085908][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.260764][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.290416][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.320058][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.332091][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.449613][ T30] audit: type=1326 audit(1759265098.174:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.2.1156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x0 [ 159.831615][ T30] audit: type=1326 audit(1759265099.554:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 159.896554][ T30] audit: type=1326 audit(1759265099.574:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 159.991984][ T30] audit: type=1326 audit(1759265099.574:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 160.093887][ T30] audit: type=1326 audit(1759265099.574:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 160.145512][ T30] audit: type=1326 audit(1759265099.584:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd586190de7 code=0x7ffc0000 [ 160.176227][ T30] audit: type=1326 audit(1759265099.584:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 160.203430][ T30] audit: type=1326 audit(1759265099.584:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 160.249867][ T30] audit: type=1326 audit(1759265099.584:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 160.277001][ T30] audit: type=1326 audit(1759265099.584:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58618eec9 code=0x7ffc0000 [ 160.552889][ T8875] netlink: 408 bytes leftover after parsing attributes in process `syz.5.1185'. [ 160.652954][ T8877] netlink: 83 bytes leftover after parsing attributes in process `syz.5.1186'. [ 163.410049][ T8986] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 163.489400][ T8986] bond1: entered promiscuous mode [ 163.494981][ T8986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.556931][ T8992] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 165.267330][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 165.267346][ T30] audit: type=1326 audit(1759265104.984:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.2.1241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x0 [ 166.948351][ T9119] capability: warning: `syz.2.1260' uses 32-bit capabilities (legacy support in use) [ 167.701967][ T9146] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 168.753881][ T9175] syzkaller0: entered promiscuous mode [ 168.788157][ T9175] syzkaller0: entered allmulticast mode [ 171.167442][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'. [ 171.253861][ T30] audit: type=1326 audit(1759265110.974:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.2.1301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2998eec9 code=0x0 [ 171.944090][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1312'. [ 172.095091][ T9250] kvm: kvm [9246]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 172.122934][ T9250] kvm: kvm [9246]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 172.803563][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1327'. [ 173.063613][ T9290] ------------[ cut here ]------------ [ 173.070054][ T9290] WARNING: CPU: 1 PID: 9290 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 173.078606][ T9290] Modules linked in: [ 173.082760][ T9290] CPU: 1 UID: 0 PID: 9290 Comm: syz.0.1332 Not tainted syzkaller #0 PREEMPT(full) [ 173.092469][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.103067][ T9290] RIP: 0010:path_noexec+0x1af/0x200 [ 173.108452][ T9290] Code: 02 31 ff 48 89 de e8 c0 e2 89 ff d1 eb eb 07 e8 d7 dd 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 98 51 04 09 cc e8 c2 dd 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 173.128276][ T9290] RSP: 0018:ffffc90003e9fbd8 EFLAGS: 00010287 [ 173.134449][ T9290] RAX: ffffffff823437ce RBX: ffff8880325a0080 RCX: 0000000000080000 [ 173.143207][ T9290] RDX: ffffc90004ce3000 RSI: 000000000000006b RDI: 000000000000006c [ 173.151612][ T9290] RBP: 0000000000080000 R08: ffff88802ee0da00 R09: 0000000000000003 [ 173.160026][ T9290] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 173.168144][ T9290] R13: 1ffff920007d3f90 R14: 0000000000000000 R15: dffffc0000000000 [ 173.176223][ T9290] FS: 00007fd586f8a6c0(0000) GS:ffff88812647e000(0000) knlGS:0000000000000000 [ 173.185336][ T9290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.192054][ T9290] CR2: 000055f5561f0008 CR3: 00000000779be000 CR4: 00000000003526f0 [ 173.201482][ T9290] Call Trace: [ 173.204797][ T9290] [ 173.207747][ T9290] do_mmap+0xa43/0x10d0 [ 173.212793][ T9290] ? __pfx_do_mmap+0x10/0x10 [ 173.217501][ T9290] ? down_write_killable+0x178/0x230 [ 173.222900][ T9290] ? __pfx_down_write_killable+0x10/0x10 [ 173.228636][ T9290] ? common_file_perm+0x1b5/0x230 [ 173.233693][ T9290] vm_mmap_pgoff+0x2a6/0x4d0 [ 173.238340][ T9290] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 173.243484][ T9290] ? __fget_files+0x2a/0x420 [ 173.248147][ T9290] ? __fget_files+0x3a0/0x420 [ 173.253235][ T9290] ? __fget_files+0x2a/0x420 [ 173.258231][ T9290] ksys_mmap_pgoff+0x51f/0x760 [ 173.263128][ T9290] do_syscall_64+0xfa/0x3b0 [ 173.267668][ T9290] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.272964][ T9290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.279155][ T9290] ? clear_bhb_loop+0x60/0xb0 [ 173.283951][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.289990][ T9290] RIP: 0033:0x7fd58618eec9 [ 173.294436][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.314147][ T9290] RSP: 002b:00007fd586f8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 173.322653][ T9290] RAX: ffffffffffffffda RBX: 00007fd5863e5fa0 RCX: 00007fd58618eec9 [ 173.330705][ T9290] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 173.338852][ T9290] RBP: 00007fd586211f91 R08: 0000000000000006 R09: 0000000000000000 [ 173.346850][ T9290] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 173.355398][ T9290] R13: 00007fd5863e6038 R14: 00007fd5863e5fa0 R15: 00007fd58650fa28 [ 173.363774][ T9290] [ 173.367046][ T9290] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.374438][ T9290] CPU: 1 UID: 0 PID: 9290 Comm: syz.0.1332 Not tainted syzkaller #0 PREEMPT(full) [ 173.383722][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.393868][ T9290] Call Trace: [ 173.397231][ T9290] [ 173.400155][ T9290] dump_stack_lvl+0x99/0x250 [ 173.404750][ T9290] ? __asan_memcpy+0x40/0x70 [ 173.409348][ T9290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.414552][ T9290] ? __pfx__printk+0x10/0x10 [ 173.419144][ T9290] vpanic+0x281/0x750 [ 173.423124][ T9290] ? __pfx__printk+0x10/0x10 [ 173.427699][ T9290] ? __pfx_vpanic+0x10/0x10 [ 173.432281][ T9290] ? is_bpf_text_address+0x292/0x2b0 [ 173.437567][ T9290] panic+0xb9/0xc0 [ 173.441285][ T9290] ? __pfx_panic+0x10/0x10 [ 173.445701][ T9290] __warn+0x31b/0x4b0 [ 173.449676][ T9290] ? path_noexec+0x1af/0x200 [ 173.454260][ T9290] ? path_noexec+0x1af/0x200 [ 173.458839][ T9290] report_bug+0x2be/0x4f0 [ 173.463245][ T9290] ? path_noexec+0x1af/0x200 [ 173.467836][ T9290] ? path_noexec+0x1af/0x200 [ 173.472449][ T9290] ? path_noexec+0x1b1/0x200 [ 173.477045][ T9290] handle_bug+0x84/0x160 [ 173.481288][ T9290] exc_invalid_op+0x1a/0x50 [ 173.485785][ T9290] asm_exc_invalid_op+0x1a/0x20 [ 173.490620][ T9290] RIP: 0010:path_noexec+0x1af/0x200 [ 173.495810][ T9290] Code: 02 31 ff 48 89 de e8 c0 e2 89 ff d1 eb eb 07 e8 d7 dd 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 98 51 04 09 cc e8 c2 dd 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 173.515491][ T9290] RSP: 0018:ffffc90003e9fbd8 EFLAGS: 00010287 [ 173.521566][ T9290] RAX: ffffffff823437ce RBX: ffff8880325a0080 RCX: 0000000000080000 [ 173.529542][ T9290] RDX: ffffc90004ce3000 RSI: 000000000000006b RDI: 000000000000006c [ 173.537553][ T9290] RBP: 0000000000080000 R08: ffff88802ee0da00 R09: 0000000000000003 [ 173.545525][ T9290] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 173.553588][ T9290] R13: 1ffff920007d3f90 R14: 0000000000000000 R15: dffffc0000000000 [ 173.561584][ T9290] ? path_noexec+0x1ae/0x200 [ 173.566200][ T9290] ? path_noexec+0x1ae/0x200 [ 173.570823][ T9290] do_mmap+0xa43/0x10d0 [ 173.574996][ T9290] ? __pfx_do_mmap+0x10/0x10 [ 173.579587][ T9290] ? down_write_killable+0x178/0x230 [ 173.584926][ T9290] ? __pfx_down_write_killable+0x10/0x10 [ 173.590560][ T9290] ? common_file_perm+0x1b5/0x230 [ 173.595584][ T9290] vm_mmap_pgoff+0x2a6/0x4d0 [ 173.600173][ T9290] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 173.605293][ T9290] ? __fget_files+0x2a/0x420 [ 173.609890][ T9290] ? __fget_files+0x3a0/0x420 [ 173.614563][ T9290] ? __fget_files+0x2a/0x420 [ 173.619246][ T9290] ksys_mmap_pgoff+0x51f/0x760 [ 173.624028][ T9290] do_syscall_64+0xfa/0x3b0 [ 173.628527][ T9290] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.633721][ T9290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.639775][ T9290] ? clear_bhb_loop+0x60/0xb0 [ 173.644443][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.650415][ T9290] RIP: 0033:0x7fd58618eec9 [ 173.654824][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.674557][ T9290] RSP: 002b:00007fd586f8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 173.682974][ T9290] RAX: ffffffffffffffda RBX: 00007fd5863e5fa0 RCX: 00007fd58618eec9 [ 173.691028][ T9290] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 173.698991][ T9290] RBP: 00007fd586211f91 R08: 0000000000000006 R09: 0000000000000000 [ 173.706953][ T9290] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 173.714955][ T9290] R13: 00007fd5863e6038 R14: 00007fd5863e5fa0 R15: 00007fd58650fa28 [ 173.722933][ T9290] [ 173.726374][ T9290] Kernel Offset: disabled [ 173.730693][ T9290] Rebooting in 86400 seconds..