last executing test programs: 7.15629129s ago: executing program 2 (id=3299): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000280)={0x0, 0x1, 0x6, @random="2bc72ff4aaf0"}, 0x10) 7.03650328s ago: executing program 2 (id=3303): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002ac0)=@newtfilter={0x15dc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1598, 0x2, [@TCA_BPF_ACT={0x1134, 0x1, [@m_xt={0x10a8, 0xd, 0x0, 0x0, {{0x7}, {0x1038, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x102a, 0x6, {0x4, 'security\x00', 0x1, 0x200, "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"}}]}, {0x4b, 0x6, "bb5e7a75d8d26cd02234e8541f85eead7b5a62282a1f539cac18ff2f73a3723e2d1c6623fe116ad769baa7767e7ba67c98b54582a542efbba456998bd5e1b18192fa3099abf380"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x88, 0x4, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x58, 0x6, "0531adeb6c75e7a9c2115a0349015f4c0fa246f0fbb9394bf115a8f02c416ab1aca550d941d38bfcfdf4745fe8ec5d8f09e8dd2713fe198569e2b52902bf8ef9733ec066ba21ab7012f4a91e29ca6314a396abcf"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1000}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0xffff9462, 0x80000000, 0x101, 0x84, 0x1, 0x8, 0x5, 0x400, 0x7, 0x6090, 0x4, 0x401, 0x1, 0x0, 0xfffffff6, 0x8, 0x10000, 0x9, 0xfffffe00, 0xfff, 0x5, 0xc, 0xee8, 0xb, 0xf, 0x100, 0x1ff, 0xa26, 0x3, 0x6, 0x4, 0xc, 0x200, 0x2, 0x5, 0x0, 0xeaad, 0x87, 0xfffffff1, 0x5, 0x3, 0x1, 0x8, 0x80, 0x800, 0x5, 0x9, 0x2, 0x0, 0x6, 0xa55, 0x3, 0xfffffffc, 0x8, 0x2, 0x2, 0x0, 0x71eb4afe, 0x4, 0x9, 0xaa7, 0x896b, 0x8, 0x0, 0x7fff, 0xffff20fe, 0x5, 0xffff, 0x1, 0x7, 0x6, 0x7, 0xf, 0xc56, 0x7, 0xa, 0x10, 0x7, 0x0, 0x8, 0x200000, 0x2, 0x1, 0xfffffffc, 0xfffffe00, 0x1, 0xf, 0x1174, 0xe, 0x0, 0x7fffffff, 0x3, 0x7b69b4a7, 0x1, 0x3, 0x1, 0x5e15, 0x7fff, 0x74c4, 0x2, 0x1, 0x9, 0xffff4cbd, 0x9, 0x401, 0x7, 0x4, 0x6, 0x2, 0x8, 0xc, 0x92a, 0x3, 0x7, 0x1, 0xe220, 0x800, 0x80000001, 0x5, 0xfffffff7, 0xd, 0x800, 0x0, 0x35, 0x7, 0x5, 0x5, 0x9, 0x9, 0x400, 0x1, 0x2, 0x5, 0x902e4de0, 0x1ff, 0x560, 0x2, 0x1, 0x8001, 0x7, 0xd, 0x101, 0x4, 0xfffffffa, 0xff9d, 0x1198, 0x8, 0x7fffffff, 0x3, 0x1df6, 0xfff, 0x4, 0x18, 0x1, 0x400, 0x8, 0x53e9e027, 0x3aa, 0x0, 0x2a8b8885, 0x7, 0x1, 0xf, 0x8, 0xb, 0x800, 0x2, 0x4, 0x64da, 0x1, 0x3, 0x200, 0x0, 0x8, 0x4, 0x100, 0x3, 0x1, 0x5, 0x1, 0x1, 0x9, 0x0, 0x5, 0x8001, 0x3aec0000, 0x3, 0x4, 0x2, 0xfffffffc, 0x5, 0x200, 0x200, 0xfffffff8, 0xa, 0x4, 0x100, 0x200, 0xb, 0xd, 0x6, 0x3, 0x0, 0x8, 0x5fb, 0x0, 0x8, 0x8, 0x4, 0x800, 0x1f, 0x5, 0x7c, 0x4, 0x9, 0xf4, 0x7, 0x6, 0x4, 0xd, 0x3, 0x7, 0x9, 0xa8, 0xff, 0xb60, 0x5, 0x10, 0xffffffff, 0x9, 0x7fff, 0xffffffff, 0x3, 0x2, 0x5e, 0x5, 0xfa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, 0x401, 0x8, 0x3, 0x0, 0x0, 0x100, 0x200, 0x9, 0x5, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0x5}}]}}]}, 0x15dc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.962602346s ago: executing program 2 (id=3305): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)={0x14}, 0x14}}, 0x44810) 6.882938492s ago: executing program 2 (id=3308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)) 5.642367473s ago: executing program 2 (id=3332): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000003b80)) 5.610288455s ago: executing program 2 (id=3333): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x8210}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0105502, 0x0) 4.653713843s ago: executing program 3 (id=3348): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x19, 0x0, &(0x7f0000000140)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x0, 0x0, 0x31, @private2, @mcast2, 0x0, 0x8, 0x8, 0x47fef}}) pread64(r1, 0x0, 0x0, 0x0) close(r1) r2 = mq_open(&(0x7f0000000340)='\x15?\x00', 0x42, 0x0, &(0x7f0000000900)={0x7, 0x40f, 0x200}) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r2, 0x0, 0x5, 0x0, 0x0) 4.428265321s ago: executing program 3 (id=3350): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, 0x0) 4.396357844s ago: executing program 3 (id=3351): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 4.340772648s ago: executing program 3 (id=3352): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r0 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x83}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) 3.472715569s ago: executing program 3 (id=3359): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x841, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, 0x0, 0x0) 3.384240226s ago: executing program 3 (id=3361): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 1.963679471s ago: executing program 0 (id=3369): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 1.84831706s ago: executing program 0 (id=3371): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/mcfilter6\x00') close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 1.822447683s ago: executing program 0 (id=3373): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14}, 0x14}}, 0x4008000) 1.787592985s ago: executing program 0 (id=3374): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) listen(r2, 0xfffffffc) ioctl$TCSETAW(r2, 0x5407, 0x0) 1.700490992s ago: executing program 0 (id=3375): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4$llc(r0, 0x0, 0x0, 0x0) accept4$llc(r1, 0x0, 0x0, 0x800) 1.661622875s ago: executing program 0 (id=3377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x138, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x102, 0x3a, 0xff, @dev, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xfffffff3, {0x9, 0x6, "daf6b7", 0x81, 0x8, 0x1, @empty, @local, [@hopopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}, @fragment={0x21, 0x0, 0x9, 0x1, 0x0, 0x1f, 0x66}], "e3c0547c23357d85b572f93b8bf44caac22b6f82fc0907ec52e20050e66f8c6667875486dd05954c31fcfa9e6edb30510baf2da75ffc87ad4e309aff5db01c1b7b022f08e60c9ea634d34c8fce571eb5a6d680961e72747b02d9daad8e2ea8a32005a271a3e3372dbf827a3caff4ca2604e2c756541c830b153f4b32661746ece69bc252ce8ca17547e8c7486b5dfeeb13464cf7d3bf240d248792bea0dc14d76043045570fa9c61c752927f84b9e8a4ed5fb268d5ced7bf86b9"}}}}}}}, 0x0) syz_emit_ethernet(0xa0e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000009d83afffe800000000000000000000000000000ff020000000000000000000000000001860090780000000000000000000000000016004af660fdcd2a9d3fea8639c367475824e5ff1fec61d05cd2481e5f16a2e0c0c7a77da8e54574913307583a126de92dd2f27575716d36ceade2ad37f45e18289a13311b1525e24fd1078f16a632b7d9e170e1e59580de090000000000000026862b4351000964ab32e55e4339bb2937602534c310d016fa7537403ddcdd12341a16f2bdef862e5ba4d76e965de44b86e123844d8361242c7809117c5eacdc237022f54dc68760d4711978c0575160dd2dfe2e8500073abc2ac2bfb0f9366574005770a981d0425b685b7f39f2bf671c534e4af4347759f70e051bc102a9d7655956b8bc8486cde8bc388d38001b04640bcae346286d0e12a26ae0b9306929a0b858d121c73730ae09dfd2728cb2b0cce5481bf0927da7d9461cac12d399767fef07a793c77c9628d16b0551a4a033367841b9469c9ef1b9eff68ad8edb00922c3e3518c0926eca71a9b010ae5d9dde15c3ed291778999408550e554455a13bc8f2fe1a284c72c7fb4a12680d256d3677d79c6b2df69b699ef6fb0d7fdafc6e1a028cee81c7bf0702461ebad1952d42a15a3e3906c9e2ca33b0a1005ba756f54c831fe836b3efe7bc4c11d228e93438ca5e1ab9c9fff72cf0d2219f58224c342cac0a80fac82262ee05206e70f21935d7a695a1cc0a94ed336af67e9bac97c7c5fa4f300a0e9ca314da9d26d3c4589546bd588945c97201d5a4088945cc8feabc93170b8faaad5bcc635610e03c5925ce468138598b4f197b89afc19d5cf45771a652011a9963eae8acd27cdadbe46cea242c13964d3177e0cc04f9f2bab688e51081dbde4169bdc7e292e4e0d2ff48ad26617068c541d4ca4e3c59f49cf6016a5c4852bb55d89b92ce72042268e7872d3310fa2692c44d564fa15b7b4d9af0e79eb63f384d1de2b0b5ca67e84df5dfed6fe41f6822fac0b864a433b7e21e1ebd1475abc71dd801239bce9e03385354eb4a4a1250a9682507bce25c85474f186c5610be3fdc53336e0dd39136ab965001fa7d2dc2ac375e31d6681618ce68f2aba5fb5e1fde42d9b5698d49362c3daf8da0b801670c2df17f7d509a7df56be4aacbc3666c25bc6a530c870f6399203bbd58bf121b1310f4abd1ea50a90d308edc540e74d77571b0eea07e5f04d4c283d861f81e213526ea307e04000000000000000d0fa9e71ea8e37595ce1f730107459354e452af2293e475fe35eb836cfade2a387df3dbc02262c76555251fa9c455fc0b517a85c36d0d6d9f9f3db9d0d687a7bc5d71f005416416a4bba57e710285033310091768ace229534932f8e0221e1288a4a1d6fd6c6a6875428155b023e29a4d8d1460b1d05621e102f3b4642c57d954626ec361536f1a24ef71f28dc6f008c13ea4cb45e23a590b436c2319b0629ed8fee581a339a4508149bb46011a5cd9def21802a8869a6669e8e09d118a329d98eeb546f3ea3d915f8983a22e2632c5859d665352bd3c849bdf21bfcd4cd7b7e9b9ea3d75ff09cc306b52c23308356205ca8f6c52b52be52f19fbac9c888e1792022cbde83bb4dda4ec229dc87f704136f2d91bf8e44cfbfeeb8aaf6dcd9a6c9ed49efffafef73a86de6244a93b315f6281f932f54bac128902a219671b6ab7fd25eaee70ac19dfea6a6b2226cafaa3cb429aa377e61d6900a7766c07562306df015162d5209f851e442c22418d487f92f179f3abb7baa6c279ef87572a703aecf8e2ed0c54aed836036bdb3b915f78d38b052310c7a31065903d1cf37565a637f98bc2bdf6a804b0f3916202f72046be4121e0426b9e4894493bc964ce3ed285a60ff003cc1258f47d2133e1fcc47caff9982d7bfba72fede4d0d2ba9a7c4373b579b986b0bb0015d28ac81fdf3744e5bc66118bb7c561e24929cbc4eebe20c01598d246081ea92e6536395c1a393619090e5abf57b9157812d18e82634b43b7931885765bf0d3fb6274badb1b26597ea9f7aff4a6d0e19b3fdb92d3758f4fd43a077ae3e3fc2a719dd764ad3f7d52d62e5b11c8a12a223e2f9d93e51f78a7a36539b95c6b6ba337102a87634cf977fb21a083f6b9968dbb09c7991d1fa780ed86dd4a161e8f2ffbe789894bbd168b8c678ea65a09b23e6773cd4ca1b3490bc6457b0a7474de47cc1b1eae1f787898b63110e47fa0200b5de3fc71841119a8fb60282f4cbcd4139b259eebfd57587c5f9a16c1c069fdf35be821855049d628ef0ebd0970db05cc0f6fe75e99ba934d722870bfabc109b65382059488727e1043db3e195b200856bb9d9f3ad611c89d22e8284158d07e88921ef247c38eb7d224de5ff234ecf9189efbc50fa4b528c0e11de66b32a2d09cb32d124207a2d3001368e76d9efe63014cedf21eab08e7850a63a65a200fc91b347d4a63fd2b571f54f2dc335d8d7edf0e50cd56135560af9a8c7122ada9575a9ec1bf88450da9985c8a21ab82fdf42d6c2d4e60c45e6f0a12e6b9c295c2310822ae00f0a4a66503a17745ff5273d99ca8c295f407ac67045e60f8f2f081eddeef42771604327f479a17a3f6150f253e4f7a163dfedc80ac9a7553d3d70753968d7aace6167d823575428713166f322406c7c36d26bfb2a9b3e431ddc113eb7b6c3c7cdac3ff50db370deb2eb643c5cab9e4e4088bb8c92c6165bb8074f978ac9fe766f3f914e44e4322d83c1d6b2962f5b342e434980b57cbbcfbcbfddc1cd70d6fce8f9a2108ac765ad77d1bedb2e66f3df522114ee7c8cc798a73256460555a76a9b70d5929a7aaa335ec623eb8e7806ab6968e36617018634d8b9b1692f6f1efdf4fc96ea91832a301e77e9e7d52cd137c9a936b572832442a264253df8f5d47b011e6539e43441a51adb681eca2a5fa02ae3022093b220c891e907c9607cc36668b0370541a69882a455e5c3514ef09c9da62fdba6a794aabaaafbb9ce0380703334d965d7e3367cf69e256275f8e1703e8a32d090e9cf3e8e11cc8ada9a7d40475106fcb88ef3efeb6429f5bb7867aea9c433c88171c57f25aced64f13bea65678299551c48c8985083d490d03c22ed3644b518143e869f4a8a60b6e855b2748a32e0ab0fa6688b67ca6f3981c36e4ce583a2d6e8ac4f70a733e25a4067864d28da48f5f2b93fa92d5933dcb1be2e9b18fd8c5f64c9fd2e48ebcd0c74b0672a27a253618864e78657278943f31e2b6ef83f4f22f8a26291e349a5f2b207fdf55843d767b7a8129b1c914b5652c6d5f565b2acde8a8a6ea7481ad7f9d112fe06e0fc987416e3e0e4fe6ac1f4b9468899c89e0641fee96eaaac7eea5b6d3d6ae921ed80c8606f4aaf63e98a3d8f90d8677d791bca07054ed3a552c136e49fd8f17a89f1830aa75e2e33b54f665567c4dc81c21877419f9d821ef48207e4b0a0d90eecec284223eb04e0759f4048e8dc4e44544aa41fc39d05d6c0f80ef9a8e6f14e9d1cd8706867f7d0b07d83f754d1e846f62e0b464ee98568780927ef458b3bf82578af8a588b015b0b703e05deb5c7d6e366dabc0915f7b07cf1bda5af359dd3a94cd04397f680ef1f"], 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="80000000080211000001080211000050505050505000000000000000000000640021000006020202020202010000"], 0x3d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) r10 = socket(0x23, 0x5, 0x0) connect$can_j1939(r10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000bc0)={0x1d, r11}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}]}]}, 0x44}}, 0x0) 1.397477977s ago: executing program 4 (id=3383): socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 1.351382791s ago: executing program 4 (id=3384): r0 = socket(0x11, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x5452, 0x20000000) 1.280271786s ago: executing program 4 (id=3385): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f1, 0x0) 1.223735631s ago: executing program 4 (id=3386): io_uring_setup(0x3f65, &(0x7f0000000340)) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0), 0x10) getsockname(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000140)=0x80) close_range(r1, 0xffffffffffffffff, 0x0) 1.021009057s ago: executing program 4 (id=3387): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r0 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x83}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) 937.868124ms ago: executing program 4 (id=3388): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0'}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001600010000000000000000000a0000000c00008008000200", @ANYRES32, @ANYBLOB="de7927e9d5de53a0e15281ee627b88c4edbfdb9c5dd58f3984fa507f142d02df3dff3c779c33c9c9a2663052c3b382fe448f9bec7fc4069f1c5867b84aff9482b941a8d41704c612e86bb81c8833cc7fcd23cf381326ff8b74b9f76e0bec4169eacc9e1d4ef294d3710700"/117], 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x2, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) tee(r0, r0, 0x3, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ppoll(&(0x7f0000001380)=[{r4}], 0x1, &(0x7f00000013c0)={0x0, 0x989680}, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x12c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x48814}, 0x8001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='-^$\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="192654f4b005", @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x11, 0x0, 0x0, @loopback, "04000000"}}}}}, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000040)={0x10, 0x7, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x400, 0xfffd}}}, {0x0, 0x0, 0x8000, {0xfffe}, {}, @rumble={0x9}}}) 289.141677ms ago: executing program 1 (id=3392): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, 0x0, 0x0) 196.389484ms ago: executing program 1 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 196.195194ms ago: executing program 1 (id=3394): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f1, 0x0) 130.173649ms ago: executing program 1 (id=3395): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) read$alg(r0, 0x0, 0x0) 99.106402ms ago: executing program 1 (id=3396): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r0 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x83}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=3397): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xe, 0x16, 0xb3, 0x7f}, 0x5f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x20000000000000d6, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x90) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="3ba3150400e4"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) kernel console output (not intermixed with test programs): e_0 [ 131.419237][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.424418][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.427484][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.430851][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.433845][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.438398][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.449018][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.452516][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.455321][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.461485][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.467420][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.471593][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.475423][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.478441][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.483638][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.486674][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.489625][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.493643][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.496612][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.499561][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.504317][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.508252][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.511384][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.523191][ T7335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.528840][ T7335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.535715][ T7335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.540913][ T7335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.647849][ T5039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.651167][ T5039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.677626][ T4948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.679734][ T4948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.805268][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.808490][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.430074][ T4238] Bluetooth: hci0: command tx timeout [ 132.779486][ T7464] device bond0 entered promiscuous mode [ 132.785101][ T7464] device bond_slave_0 entered promiscuous mode [ 132.790390][ T7464] device bond_slave_1 entered promiscuous mode [ 132.814831][ T7470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.208515][ T7491] loop2: detected capacity change from 0 to 512 [ 133.251216][ T7491] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 133.261357][ T7491] EXT4-fs (loop2): 1 truncate cleaned up [ 133.262919][ T7491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 133.398198][ T4230] EXT4-fs (loop2): unmounting filesystem. [ 133.457443][ T7489] loop3: detected capacity change from 0 to 32768 [ 133.511279][ T7489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1215 (7489) [ 133.550895][ T7489] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.553734][ T7489] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 133.556312][ T7489] BTRFS info (device loop3): using free space tree [ 134.530150][ T4231] Bluetooth: hci0: command tx timeout [ 134.558053][ T7512] loop4: detected capacity change from 0 to 256 [ 134.697514][ T7515] device bond0 entered promiscuous mode [ 134.699206][ T7515] device bond_slave_0 entered promiscuous mode [ 134.710806][ T7515] device bond_slave_1 entered promiscuous mode [ 134.728400][ T7489] BTRFS info (device loop3): enabling ssd optimizations [ 134.746315][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.756080][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.879170][ T4236] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.415794][ T7534] loop4: detected capacity change from 0 to 128 [ 135.551920][ T7534] input: syz1 as /devices/virtual/input/input11 [ 136.081765][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 136.278431][ T27] audit: type=1326 audit(136.240:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.3.1238" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96941f68 code=0x0 [ 136.315538][ T7577] loop4: detected capacity change from 0 to 64 [ 136.409354][ T7579] device bond0 entered promiscuous mode [ 136.414536][ T7579] device bond_slave_0 entered promiscuous mode [ 136.420538][ T7579] device bond_slave_1 entered promiscuous mode [ 136.459260][ T7585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1246'. [ 136.590414][ T4238] Bluetooth: hci0: command tx timeout [ 136.713167][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 136.847546][ T7611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.232102][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 137.281371][ T7637] 9pnet_fd: Insufficient options for proto=fd [ 137.614807][ T27] audit: type=1326 audit(137.580:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.2.1272" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83741f68 code=0x0 [ 138.022236][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 138.417290][ T7694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1291'. [ 138.714343][ T7687] loop1: detected capacity change from 0 to 32768 [ 138.759873][ T7687] XFS (loop1): Mounting V5 Filesystem [ 138.841255][ T4231] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 138.843680][ T4231] Bluetooth: hci3: Injecting HCI hardware error event [ 138.846999][ T4238] Bluetooth: hci3: hardware error 0x00 [ 138.938157][ T7687] XFS (loop1): Ending clean mount [ 139.057348][ T6347] XFS (loop1): Unmounting Filesystem [ 139.118785][ T27] audit: type=1326 audit(139.080:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.2.1300" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83741f68 code=0x0 [ 139.524524][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1302'. [ 139.601102][ T7745] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1307'. [ 139.724986][ T7753] loop3: detected capacity change from 0 to 512 [ 139.745263][ T7753] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.783042][ T7753] EXT4-fs error (device loop3): ext4_quota_enable:6968: comm syz.3.1311: inode #4294967295: comm syz.3.1311: iget: illegal inode # [ 139.788077][ T7753] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1311: Bad quota inode: 4294967295, type: 2 [ 139.806198][ T7753] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=4294967295). Please run e2fsck to fix. [ 139.812222][ T7753] EXT4-fs (loop3): mount failed [ 139.969379][ T7770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1318'. [ 140.092883][ T7774] loop2: detected capacity change from 0 to 512 [ 140.107133][ T7774] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.122853][ T7780] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1321'. [ 140.157573][ T7774] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 140.201080][ T7774] EXT4-fs (loop2): 1 truncate cleaned up [ 140.206813][ T7774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.419605][ T7786] loop1: detected capacity change from 0 to 256 [ 140.440609][ T7786] ======================================================= [ 140.440609][ T7786] WARNING: The mand mount option has been deprecated and [ 140.440609][ T7786] and is ignored by this kernel. Remove the mand [ 140.440609][ T7786] option from the mount to silence this warning. [ 140.440609][ T7786] ======================================================= [ 140.482918][ T7786] FAT-fs (loop1): Directory bread(block 64) failed [ 140.485392][ T7786] FAT-fs (loop1): Directory bread(block 65) failed [ 140.487205][ T7786] FAT-fs (loop1): Directory bread(block 66) failed [ 140.488877][ T7786] FAT-fs (loop1): Directory bread(block 67) failed [ 140.490894][ T7786] FAT-fs (loop1): Directory bread(block 68) failed [ 140.492729][ T7786] FAT-fs (loop1): Directory bread(block 69) failed [ 140.494516][ T7786] FAT-fs (loop1): Directory bread(block 70) failed [ 140.496588][ T7786] FAT-fs (loop1): Directory bread(block 71) failed [ 140.498381][ T7786] FAT-fs (loop1): Directory bread(block 72) failed [ 140.500424][ T7786] FAT-fs (loop1): Directory bread(block 73) failed [ 140.561808][ T154] kworker/u4:3: attempt to access beyond end of device [ 140.561808][ T154] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 140.570457][ T154] Buffer I/O error on dev loop1, logical block 306, lost async page write [ 140.624892][ T5039] kworker/u4:14: attempt to access beyond end of device [ 140.624892][ T5039] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 140.633446][ T5039] Buffer I/O error on dev loop1, logical block 306, lost async page write [ 140.700094][ T7790] loop1: detected capacity change from 0 to 256 [ 140.729419][ T7790] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 140.803838][ T7790] exFAT-fs (loop1): hint_cluster is invalid (17) [ 140.937142][ T27] audit: type=1326 audit(140.900:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7792 comm="syz.3.1325" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96941f68 code=0x0 [ 141.046325][ T4230] EXT4-fs (loop2): unmounting filesystem. [ 141.080086][ T4238] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 141.165907][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.176767][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.195733][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.209385][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.413935][ T7812] loop2: detected capacity change from 0 to 2048 [ 141.416060][ T7812] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.446657][ T7812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.482499][ T4230] EXT4-fs (loop2): unmounting filesystem. [ 141.573267][ T7816] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1332'. [ 142.136209][ T7844] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1343'. [ 142.264620][ T27] audit: type=1326 audit(142.230:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.1345" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83741f68 code=0x0 [ 142.698016][ T7877] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1358'. [ 142.711120][ T7877] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 142.719891][ T7880] devpts: called with bogus options [ 142.790253][ T7885] dccp_invalid_packet: P.Data Offset(0) too small [ 143.055943][ T7902] loop2: detected capacity change from 0 to 64 [ 143.213303][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 143.215877][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'. [ 143.510201][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'. [ 143.562970][ T27] audit: type=1326 audit(143.530:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1382" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad41f68 code=0x0 [ 143.759694][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 143.878353][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 143.893021][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 143.925972][ T7921] loop2: detected capacity change from 0 to 32768 [ 143.960472][ T7921] XFS (loop2): Mounting V5 Filesystem [ 143.967319][ T7951] loop1: detected capacity change from 0 to 256 [ 143.976512][ T7951] FAT-fs (loop1): bogus number of directory entries (17407) [ 143.981736][ T7951] FAT-fs (loop1): Can't find a valid FAT filesystem [ 144.006348][ T7921] XFS (loop2): Ending clean mount [ 144.018620][ T7921] XFS (loop2): Quotacheck needed: Please wait. [ 144.042634][ T6669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.082216][ T7921] XFS (loop2): Quotacheck: Done. [ 144.475991][ T7983] loop4: detected capacity change from 0 to 256 [ 144.490693][ T7983] FAT-fs (loop4): bogus number of directory entries (17407) [ 144.492552][ T7983] FAT-fs (loop4): Can't find a valid FAT filesystem [ 144.527806][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 144.531851][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 144.588361][ T4230] XFS (loop2): Unmounting Filesystem [ 144.748131][ T27] audit: type=1326 audit(144.710:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.1408" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b41f68 code=0x0 [ 145.013666][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.178971][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.325505][ T4231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.327409][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.339574][ T4231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.343023][ T4231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.346538][ T4231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.348964][ T4231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.352547][ T4231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.462586][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.541130][ T8043] loop3: detected capacity change from 0 to 256 [ 145.552850][ T8043] FAT-fs (loop3): bogus number of directory entries (17407) [ 145.554917][ T8043] FAT-fs (loop3): Can't find a valid FAT filesystem [ 145.572891][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 145.616963][ T6669] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.637337][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.639428][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.645444][ T8034] device bridge_slave_0 entered promiscuous mode [ 145.654923][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.659123][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.664209][ T8034] device bridge_slave_1 entered promiscuous mode [ 145.708269][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.713470][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.794333][ T8034] team0: Port device team_slave_0 added [ 145.812032][ T8034] team0: Port device team_slave_1 added [ 145.873152][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.875151][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.891254][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.904109][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.910331][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.933696][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.229617][ T8083] loop4: detected capacity change from 0 to 256 [ 146.239272][ T8083] FAT-fs (loop4): bogus number of directory entries (17407) [ 146.241321][ T27] audit: type=1326 audit(146.200:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.1437" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96941f68 code=0x0 [ 146.251980][ T8034] device hsr_slave_0 entered promiscuous mode [ 146.255360][ T8083] FAT-fs (loop4): Can't find a valid FAT filesystem [ 146.281798][ T8034] device hsr_slave_1 entered promiscuous mode [ 146.295331][ T6669] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.300268][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.302439][ T8034] Cannot create hsr debugfs directory [ 146.485346][ T8100] loop1: detected capacity change from 0 to 64 [ 146.846462][ T154] bridge0: port 3(gretap0) entered disabled state [ 146.914874][ T154] device gretap0 left promiscuous mode [ 146.916253][ T154] bridge0: port 3(gretap0) entered disabled state [ 146.928910][ T8130] loop1: detected capacity change from 0 to 64 [ 147.390436][ T4238] Bluetooth: hci1: command tx timeout [ 147.546543][ T27] audit: type=1326 audit(147.510:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.1.1469" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b41f68 code=0x0 [ 147.598598][ T8172] loop4: detected capacity change from 0 to 2048 [ 148.233960][ T154] device hsr_slave_0 left promiscuous mode [ 148.280338][ T154] device hsr_slave_1 left promiscuous mode [ 148.350264][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.352389][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.366781][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.369566][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.380782][ T154] device bridge_slave_1 left promiscuous mode [ 148.382462][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.425211][ T8200] loop3: detected capacity change from 0 to 2048 [ 148.452991][ T154] device bridge_slave_0 left promiscuous mode [ 148.454887][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.600269][ T154] device veth1_macvtap left promiscuous mode [ 148.602114][ T154] device veth0_macvtap left promiscuous mode [ 148.603719][ T154] device veth1_vlan left promiscuous mode [ 148.605377][ T154] device veth0_vlan left promiscuous mode [ 149.470165][ T4238] Bluetooth: hci1: command tx timeout [ 149.900439][ T27] audit: type=1326 audit(149.870:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.1489" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb41f68 code=0x0 [ 150.087046][ T8235] loop3: detected capacity change from 0 to 2048 [ 150.161210][ T5039] tipc: Subscription rejected, illegal request [ 150.633871][ T5039] tipc: Subscription rejected, illegal request [ 150.912579][ T154] team0 (unregistering): Port device team_slave_1 removed [ 151.084573][ T154] team0 (unregistering): Port device team_slave_0 removed [ 151.243351][ T39] tipc: Subscription rejected, illegal request [ 151.290411][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.340416][ T154] device bond_slave_1 left promiscuous mode [ 151.530813][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.550122][ T4231] Bluetooth: hci1: command tx timeout [ 151.570736][ T154] device bond_slave_0 left promiscuous mode [ 153.630097][ T4238] Bluetooth: hci1: command tx timeout [ 153.942717][ T154] bond0 (unregistering): Released all slaves [ 154.182546][ T8206] __nla_validate_parse: 3 callbacks suppressed [ 154.182561][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1483'. [ 154.209401][ T8034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.263280][ T8034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.291816][ T8307] loop3: detected capacity change from 0 to 64 [ 154.333771][ T8034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.374574][ T8034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.439821][ T4515] tipc: Subscription rejected, illegal request [ 154.575067][ T8328] loop4: detected capacity change from 0 to 256 [ 154.602440][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.643960][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.646478][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.653913][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.675523][ T8328] FAT-fs (loop4): bogus number of directory entries (17407) [ 154.677511][ T8328] FAT-fs (loop4): Can't find a valid FAT filesystem [ 154.697940][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.700951][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.703398][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.705185][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.707493][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.737107][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.739713][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.741809][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.749708][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'. [ 154.817904][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'. [ 154.843722][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.846310][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.849067][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.856070][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.871273][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.886647][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.897277][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.907874][ T8034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.929588][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.948308][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.950972][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.953845][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.958517][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.976263][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.998709][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.244438][ T8372] loop1: detected capacity change from 0 to 256 [ 155.292341][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1549'. [ 155.297069][ T8372] FAT-fs (loop1): bogus number of directory entries (17407) [ 155.299135][ T8372] FAT-fs (loop1): Can't find a valid FAT filesystem [ 155.359202][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1548'. [ 155.420232][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.468849][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.520588][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.522610][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.538901][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.607454][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.610606][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.656477][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.658972][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.671178][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.679088][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.692903][ T8034] device veth0_vlan entered promiscuous mode [ 155.698959][ T4515] tipc: Subscription rejected, illegal request [ 155.699801][ T8034] device veth1_vlan entered promiscuous mode [ 155.800356][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.802912][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.805329][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.810916][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.815362][ T8034] device veth0_macvtap entered promiscuous mode [ 155.847369][ T8034] device veth1_macvtap entered promiscuous mode [ 155.897243][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.899900][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.923150][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.925756][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.928254][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.946714][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.949110][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.964710][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.973844][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.976520][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.993920][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.003958][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 156.009628][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.012798][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.015354][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.018448][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.062845][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.065602][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.068530][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.086158][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.089004][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.104417][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.107042][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.109545][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.135717][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.138261][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.162907][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.170760][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1561'. [ 156.187925][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.192150][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.197209][ T8034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.199398][ T8034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.218058][ T8034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.230201][ T8034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.413390][ T4948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.415708][ T4948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.425461][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.484020][ T4514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.496323][ T4514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.517626][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.984715][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1575'. [ 157.627987][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'. [ 158.775267][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'. [ 159.317804][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'. [ 159.834884][ T8605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.680955][ T8658] loop3: detected capacity change from 0 to 256 [ 160.702567][ T8658] FAT-fs (loop3): bogus number of directory entries (17407) [ 160.704783][ T8658] FAT-fs (loop3): Can't find a valid FAT filesystem [ 160.743269][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 160.770274][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.782489][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.141821][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1665'. [ 161.188007][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.196105][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.399320][ T8711] capability: warning: `syz.0.1671' uses deprecated v2 capabilities in a way that may be insecure [ 161.609032][ T8728] loop3: detected capacity change from 0 to 256 [ 161.636393][ T8728] FAT-fs (loop3): bogus number of directory entries (17407) [ 161.638441][ T8728] FAT-fs (loop3): Can't find a valid FAT filesystem [ 161.697415][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 162.341650][ T8789] loop1: detected capacity change from 0 to 64 [ 162.756734][ T39] tipc: Subscription rejected, illegal request [ 163.870712][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 163.872475][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 168.670950][ T9147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1868'. [ 169.101240][ T9173] "syz.1.1881" (9173) uses obsolete ecb(arc4) skcipher [ 169.384130][ T9188] serio: Serial port pts0 [ 169.970052][ T9216] serio: Serial port pts1 [ 170.006153][ T27] audit: type=1326 audit(169.970:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.0.1899" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb41f68 code=0x0 [ 170.215561][ T9231] loop4: detected capacity change from 0 to 256 [ 170.233589][ T9231] FAT-fs (loop4): bogus number of directory entries (17407) [ 170.235514][ T9231] FAT-fs (loop4): Can't find a valid FAT filesystem [ 170.242559][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1905'. [ 170.273944][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.277401][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.126534][ T27] audit: type=1326 audit(171.090:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.0.1922" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb41f68 code=0x0 [ 171.627734][ T27] audit: type=1326 audit(171.590:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.0.1936" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb41f68 code=0x0 [ 171.834220][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.836604][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.043152][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.045525][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.559358][ T9349] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1960'. [ 172.739825][ T27] audit: type=1326 audit(172.700:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.2.1962" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3141f68 code=0x0 [ 173.650555][ T9401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1982'. [ 173.931486][ T9416] serio: Serial port pts1 [ 174.153922][ T9429] serio: Serial port pts0 [ 174.202180][ T9431] netlink: 'syz.2.1994': attribute type 72 has an invalid length. [ 174.211806][ T9431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1994'. [ 174.594605][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2001'. [ 174.708381][ T9457] netlink: 'syz.2.2005': attribute type 72 has an invalid length. [ 174.714635][ T9457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2005'. [ 175.016759][ T4231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.022990][ T4231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.026026][ T4231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.030742][ T4231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.042595][ T4231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 175.045159][ T4231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.562413][ T9480] loop4: detected capacity change from 0 to 256 [ 175.573552][ T9480] FAT-fs (loop4): bogus number of directory entries (17407) [ 175.576551][ T9480] FAT-fs (loop4): Can't find a valid FAT filesystem [ 175.673727][ T1737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.702762][ T9470] chnl_net:caif_netlink_parms(): no params data found [ 175.709002][ T9480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2014'. [ 175.785759][ T1737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.885910][ T1737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.918506][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.937154][ T9491] netlink: 'syz.0.2018': attribute type 72 has an invalid length. [ 175.939413][ T9491] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2018'. [ 175.942478][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.945201][ T9470] device bridge_slave_0 entered promiscuous mode [ 176.003051][ T1737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.007352][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.009285][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.013022][ T9470] device bridge_slave_1 entered promiscuous mode [ 176.050960][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.055685][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.108079][ T9470] team0: Port device team_slave_0 added [ 176.124788][ T9470] team0: Port device team_slave_1 added [ 176.176138][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.177912][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.195678][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.276592][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.278308][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.310300][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.537658][ T9510] fuse: Bad value for 'user_id' [ 176.572382][ T9470] device hsr_slave_0 entered promiscuous mode [ 176.600505][ T9470] device hsr_slave_1 entered promiscuous mode [ 176.630300][ T9470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.632215][ T9470] Cannot create hsr debugfs directory [ 176.928686][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 177.075011][ T9524] bridge0: port 2(gretap0) entered blocking state [ 177.076843][ T9524] bridge0: port 2(gretap0) entered disabled state [ 177.079223][ T9524] device gretap0 entered promiscuous mode [ 177.082028][ T4229] Bluetooth: hci6: command tx timeout [ 177.096872][ T9524] bridge0: port 2(gretap0) entered blocking state [ 177.098605][ T9524] bridge0: port 2(gretap0) entered forwarding state [ 177.219062][ T9533] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2028'. [ 177.851075][ T9570] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2039'. [ 177.888244][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2038'. [ 178.022725][ T9574] bridge0: port 2(gretap0) entered blocking state [ 178.024734][ T9574] bridge0: port 2(gretap0) entered disabled state [ 178.027704][ T9574] device gretap0 entered promiscuous mode [ 178.033704][ T9574] bridge0: port 2(gretap0) entered blocking state [ 178.035675][ T9574] bridge0: port 2(gretap0) entered forwarding state [ 178.295076][ T9598] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2052'. [ 178.473700][ T1737] device hsr_slave_0 left promiscuous mode [ 178.517329][ T1737] device hsr_slave_1 left promiscuous mode [ 178.590300][ T1737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.592461][ T1737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.596276][ T1737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.601726][ T1737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.605529][ T1737] device bridge_slave_0 left promiscuous mode [ 178.612426][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.790657][ T1737] device veth1_macvtap left promiscuous mode [ 178.792336][ T1737] device veth0_macvtap left promiscuous mode [ 178.793924][ T1737] device veth1_vlan left promiscuous mode [ 178.795470][ T1737] device veth0_vlan left promiscuous mode [ 179.165180][ T4229] Bluetooth: hci6: command tx timeout [ 179.433670][ T1737] team0 (unregistering): Port device team_slave_1 removed [ 179.465118][ T1737] team0 (unregistering): Port device team_slave_0 removed [ 179.493322][ T1737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.495957][ T1737] device bond_slave_1 left promiscuous mode [ 179.525870][ T1737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.529736][ T1737] device bond_slave_0 left promiscuous mode [ 179.887031][ T1737] bond0 (unregistering): Released all slaves [ 179.969209][ T9470] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.977717][ T9470] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.983477][ T9470] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.987269][ T9470] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.255454][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.302294][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.304714][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.308035][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'. [ 180.318464][ T9470] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.326670][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.329418][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.339171][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.341047][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.411142][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.413651][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.416237][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.418505][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.420419][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.439523][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.442555][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.450844][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.454536][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.483676][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.486306][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.492366][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.494794][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.497126][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.499512][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.540618][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.544460][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.747585][ T27] audit: type=1326 audit(180.710:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.2.2082" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3141f68 code=0x0 [ 180.860874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.863369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.893152][ T9470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.951732][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.954771][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.998456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.001460][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.006837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.009863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.019639][ T9470] device veth0_vlan entered promiscuous mode [ 181.061153][ T9470] device veth1_vlan entered promiscuous mode [ 181.124937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.127719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.132339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.136871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.149499][ T9470] device veth0_macvtap entered promiscuous mode [ 181.158684][ T9470] device veth1_macvtap entered promiscuous mode [ 181.178366][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.182250][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.185131][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.188031][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.191429][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.194273][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.196973][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.199872][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.203177][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.206162][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.211153][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.213405][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.216063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.218703][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.222395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.227101][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.229906][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.240588][ T4231] Bluetooth: hci6: command tx timeout [ 181.277569][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.294616][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.305188][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.316044][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.324214][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.334185][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.354446][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.367464][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.383839][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.393091][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.396006][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.408389][ T9470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.416715][ T9470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.424107][ T9470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.432118][ T9470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.587546][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 181.632063][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.634245][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.660530][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.743456][ T4995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.746209][ T4995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.765832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.216381][ T27] audit: type=1326 audit(182.180:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.1.2100" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 182.457064][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'. [ 182.519994][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 182.919455][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'. [ 183.044075][ T9818] vcan0: tx address claim with dlc 1 [ 183.320267][ T4229] Bluetooth: hci6: command tx timeout [ 183.360229][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 183.515033][ T27] audit: type=1326 audit(183.480:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.1.2122" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 183.662394][ T9859] loop3: detected capacity change from 0 to 256 [ 183.667946][ T9859] FAT-fs (loop3): bogus number of directory entries (17407) [ 183.687833][ T9859] FAT-fs (loop3): Can't find a valid FAT filesystem [ 183.743882][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2124'. [ 184.627525][ T27] audit: type=1326 audit(184.590:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.2156" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb41f68 code=0x0 [ 186.005114][ T27] audit: type=1326 audit(185.970:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.2188" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad41f68 code=0x0 [ 186.720657][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2194'. [ 186.797726][T10036] serio: Serial port pts0 [ 187.221668][T10058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.392247][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.394105][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.809517][ T27] audit: type=1326 audit(187.770:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.4.2207" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad41f68 code=0x0 [ 187.902629][T10080] loop2: detected capacity change from 0 to 256 [ 187.921276][T10080] FAT-fs (loop2): bogus number of directory entries (17407) [ 187.923600][T10080] FAT-fs (loop2): Can't find a valid FAT filesystem [ 187.957782][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2208'. [ 187.977603][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.993623][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.601331][T10110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.424314][ T27] audit: type=1326 audit(189.390:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.2228" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96941f68 code=0x0 [ 189.448622][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'. [ 189.748838][T10154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.226565][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2247'. [ 190.262234][T10181] bridge0: port 3(gretap0) entered blocking state [ 190.264009][T10181] bridge0: port 3(gretap0) entered disabled state [ 190.266778][T10181] device gretap0 entered promiscuous mode [ 190.269907][T10181] bridge0: port 3(gretap0) entered blocking state [ 190.271790][T10181] bridge0: port 3(gretap0) entered forwarding state [ 190.286460][T10181] device gretap0 left promiscuous mode [ 190.289307][T10181] bridge0: port 3(gretap0) entered disabled state [ 190.606480][ T27] audit: type=1326 audit(190.570:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10201 comm="syz.3.2257" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96941f68 code=0x0 [ 190.781435][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 190.843737][T10228] bridge0: port 2(gretap0) entered blocking state [ 190.845804][T10228] bridge0: port 2(gretap0) entered disabled state [ 190.848371][T10228] device gretap0 entered promiscuous mode [ 190.854852][T10228] bridge0: port 2(gretap0) entered blocking state [ 190.856717][T10228] bridge0: port 2(gretap0) entered forwarding state [ 190.877758][T10228] device gretap0 left promiscuous mode [ 190.883836][T10228] bridge0: port 2(gretap0) entered disabled state [ 191.057430][T10232] netlink: 'syz.2.2267': attribute type 29 has an invalid length. [ 191.059679][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'. [ 191.064603][T10232] netlink: 'syz.2.2267': attribute type 29 has an invalid length. [ 191.066863][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'. [ 191.928357][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.159544][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 192.191298][T10265] device gretap0 left promiscuous mode [ 192.193000][T10265] bridge0: port 2(gretap0) entered disabled state [ 192.719292][T10272] netlink: 'syz.4.2282': attribute type 29 has an invalid length. [ 192.721578][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 192.726967][T10272] netlink: 'syz.4.2282': attribute type 29 has an invalid length. [ 192.729128][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 193.619181][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'. [ 193.688703][T10293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.693766][T10290] device gretap0 left promiscuous mode [ 193.695357][T10290] bridge0: port 2(gretap0) entered disabled state [ 193.954573][T10309] netlink: 'syz.4.2295': attribute type 29 has an invalid length. [ 193.956601][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 193.963087][T10309] netlink: 'syz.4.2295': attribute type 29 has an invalid length. [ 193.965321][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 194.670208][ T4231] Bluetooth: hci5: command 0x0406 tx timeout [ 195.134604][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2313'. [ 195.218006][T10348] netlink: 'syz.3.2308': attribute type 29 has an invalid length. [ 195.220504][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 195.225726][T10348] netlink: 'syz.3.2308': attribute type 29 has an invalid length. [ 195.227878][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 195.811641][T10344] bridge0: port 2(gretap0) entered blocking state [ 195.831950][T10344] bridge0: port 2(gretap0) entered disabled state [ 195.840411][T10344] device gretap0 entered promiscuous mode [ 195.845391][T10344] bridge0: port 2(gretap0) entered blocking state [ 195.847005][T10344] bridge0: port 2(gretap0) entered forwarding state [ 195.889372][T10347] device gretap0 left promiscuous mode [ 195.891074][T10347] bridge0: port 2(gretap0) entered disabled state [ 196.412060][T10372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.539797][T10380] netlink: 'syz.0.2326': attribute type 29 has an invalid length. [ 196.542233][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 196.547367][T10380] netlink: 'syz.0.2326': attribute type 29 has an invalid length. [ 197.573225][T10399] __nla_validate_parse: 1 callbacks suppressed [ 197.573239][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2334'. [ 197.620913][T10399] bridge0: port 2(gretap0) entered blocking state [ 197.622625][T10399] bridge0: port 2(gretap0) entered disabled state [ 197.625027][T10399] device gretap0 entered promiscuous mode [ 197.626839][T10399] bridge0: port 2(gretap0) entered blocking state [ 197.628667][T10399] bridge0: port 2(gretap0) entered forwarding state [ 197.657271][T10399] device gretap0 left promiscuous mode [ 197.658973][T10399] bridge0: port 2(gretap0) entered disabled state [ 198.175655][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 198.471771][T10423] netlink: 'syz.3.2340': attribute type 29 has an invalid length. [ 198.474019][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 198.479404][T10423] netlink: 'syz.3.2340': attribute type 29 has an invalid length. [ 198.481945][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 199.297581][T10434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.342607][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2347'. [ 199.405829][T10438] bridge0: port 3(gretap0) entered blocking state [ 199.407825][T10438] bridge0: port 3(gretap0) entered disabled state [ 199.410700][T10438] device gretap0 entered promiscuous mode [ 199.412392][T10438] bridge0: port 3(gretap0) entered blocking state [ 199.414125][T10438] bridge0: port 3(gretap0) entered forwarding state [ 199.426023][T10438] device gretap0 left promiscuous mode [ 199.434274][T10438] bridge0: port 3(gretap0) entered disabled state [ 199.575493][ T4229] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 199.588941][ T4229] Bluetooth: hci1: Malformed Event: 0x02 [ 199.744803][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'. [ 200.127308][T10465] netlink: 'syz.1.2354': attribute type 29 has an invalid length. [ 200.129503][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2354'. [ 200.134868][T10465] netlink: 'syz.1.2354': attribute type 29 has an invalid length. [ 200.136921][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2354'. [ 201.023200][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 201.066656][T10484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.082638][T10480] bridge0: port 2(gretap0) entered blocking state [ 201.084525][T10480] bridge0: port 2(gretap0) entered disabled state [ 201.113815][T10480] device gretap0 entered promiscuous mode [ 201.115815][T10480] bridge0: port 2(gretap0) entered blocking state [ 201.117549][T10480] bridge0: port 2(gretap0) entered forwarding state [ 201.129331][T10480] device gretap0 left promiscuous mode [ 201.133662][T10480] bridge0: port 2(gretap0) entered disabled state [ 201.424533][T10503] loop4: detected capacity change from 0 to 256 [ 201.436497][T10503] FAT-fs (loop4): bogus number of directory entries (17407) [ 201.501806][T10509] netlink: 'syz.1.2369': attribute type 29 has an invalid length. [ 201.504076][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 201.509169][T10509] netlink: 'syz.1.2369': attribute type 29 has an invalid length. [ 201.617176][T10503] FAT-fs (loop4): Can't find a valid FAT filesystem [ 202.400414][ T4229] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 202.402815][ T4229] Bluetooth: hci4: Malformed Event: 0x02 [ 202.570610][T10539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.764295][T10550] loop4: detected capacity change from 0 to 256 [ 202.819800][T10550] FAT-fs (loop4): bogus number of directory entries (17407) [ 202.830072][T10550] FAT-fs (loop4): Can't find a valid FAT filesystem [ 202.851577][T10552] netlink: 'syz.2.2388': attribute type 29 has an invalid length. [ 202.853618][T10552] __nla_validate_parse: 2 callbacks suppressed [ 202.853661][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 202.860656][T10552] netlink: 'syz.2.2388': attribute type 29 has an invalid length. [ 202.862657][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 203.417897][T10546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2391'. [ 203.985058][T10587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.098259][T10590] loop4: detected capacity change from 0 to 256 [ 204.102424][T10590] FAT-fs (loop4): bogus number of directory entries (17407) [ 204.104413][T10590] FAT-fs (loop4): Can't find a valid FAT filesystem [ 204.173266][T10592] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 204.175413][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 204.180228][T10592] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 204.182399][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 204.782455][T10590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2407'. [ 205.298626][ T4229] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 205.379367][ T4229] Bluetooth: hci5: Malformed Event: 0x02 [ 205.399034][T10626] loop1: detected capacity change from 0 to 256 [ 205.470406][T10628] netlink: 'syz.3.2419': attribute type 29 has an invalid length. [ 205.472788][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 205.478519][T10628] netlink: 'syz.3.2419': attribute type 29 has an invalid length. [ 205.480666][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 205.586403][T10626] FAT-fs (loop1): bogus number of directory entries (17407) [ 205.588915][T10626] FAT-fs (loop1): Can't find a valid FAT filesystem [ 206.104409][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.143433][ T6669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.147317][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2420'. [ 206.200533][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.210893][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.543425][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 206.874866][T10667] netlink: 'syz.3.2432': attribute type 29 has an invalid length. [ 206.878834][T10667] netlink: 'syz.3.2432': attribute type 29 has an invalid length. [ 207.658987][T10672] bridge0: port 2(gretap0) entered blocking state [ 207.661676][T10672] bridge0: port 2(gretap0) entered disabled state [ 207.666210][T10672] device gretap0 entered promiscuous mode [ 207.672977][T10672] bridge0: port 2(gretap0) entered blocking state [ 207.674792][T10672] bridge0: port 2(gretap0) entered forwarding state [ 207.685888][T10672] device gretap0 left promiscuous mode [ 207.689993][T10672] bridge0: port 2(gretap0) entered disabled state [ 207.729814][ T4229] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 207.732267][ T4229] Bluetooth: hci5: Malformed Event: 0x02 [ 208.309047][T10701] __nla_validate_parse: 3 callbacks suppressed [ 208.309062][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2446'. [ 208.513265][T10703] netlink: 'syz.1.2445': attribute type 29 has an invalid length. [ 208.515339][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 208.520595][T10703] netlink: 'syz.1.2445': attribute type 29 has an invalid length. [ 208.522655][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 209.357116][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2452'. [ 209.423681][T10717] bridge0: port 2(gretap0) entered blocking state [ 209.425504][T10717] bridge0: port 2(gretap0) entered disabled state [ 209.427872][T10717] device gretap0 entered promiscuous mode [ 209.429447][T10717] bridge0: port 2(gretap0) entered blocking state [ 209.431105][T10717] bridge0: port 2(gretap0) entered forwarding state [ 209.447346][T10717] device gretap0 left promiscuous mode [ 209.448743][T10717] bridge0: port 2(gretap0) entered disabled state [ 209.548602][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2457'. [ 209.811715][T10737] netlink: 'syz.2.2458': attribute type 29 has an invalid length. [ 209.814097][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 209.819025][T10737] netlink: 'syz.2.2458': attribute type 29 has an invalid length. [ 209.821121][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 210.703991][ T4229] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 210.707696][ T4229] Bluetooth: hci5: Malformed Event: 0x02 [ 211.319874][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'. [ 211.475110][T10767] bridge0: port 2(gretap0) entered blocking state [ 211.476819][T10767] bridge0: port 2(gretap0) entered disabled state [ 211.479360][T10767] device gretap0 entered promiscuous mode [ 211.520487][T10767] bridge0: port 2(gretap0) entered blocking state [ 211.522169][T10767] bridge0: port 2(gretap0) entered forwarding state [ 211.532541][T10767] device gretap0 left promiscuous mode [ 211.534040][T10767] bridge0: port 2(gretap0) entered disabled state [ 211.630584][T10773] netlink: 'syz.3.2473': attribute type 29 has an invalid length. [ 211.632727][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 212.249105][T10773] netlink: 'syz.3.2473': attribute type 29 has an invalid length. [ 212.251414][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 212.365937][T10780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.876818][ T4229] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 212.906879][ T4229] Bluetooth: hci1: Malformed Event: 0x02 [ 213.034142][T10811] netlink: 'syz.0.2486': attribute type 29 has an invalid length. [ 213.039644][T10811] netlink: 'syz.0.2486': attribute type 29 has an invalid length. [ 213.640309][T10808] bridge0: port 2(gretap0) entered blocking state [ 213.658869][T10808] bridge0: port 2(gretap0) entered disabled state [ 213.676135][T10808] device gretap0 entered promiscuous mode [ 213.678073][T10808] bridge0: port 2(gretap0) entered blocking state [ 213.680002][T10808] bridge0: port 2(gretap0) entered forwarding state [ 213.766734][T10813] device gretap0 left promiscuous mode [ 213.768328][T10813] bridge0: port 2(gretap0) entered disabled state [ 213.914178][T10826] loop4: detected capacity change from 0 to 256 [ 213.917268][T10826] FAT-fs (loop4): bogus number of directory entries (17407) [ 213.919399][T10826] FAT-fs (loop4): Can't find a valid FAT filesystem [ 214.024981][T10823] __nla_validate_parse: 4 callbacks suppressed [ 214.024997][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2493'. [ 214.029359][ T6669] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.200569][T10845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.392276][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 214.421141][T10865] bridge0: port 2(gretap0) entered blocking state [ 214.422907][T10865] bridge0: port 2(gretap0) entered disabled state [ 214.425249][T10865] device gretap0 entered promiscuous mode [ 214.427071][T10865] bridge0: port 2(gretap0) entered blocking state [ 214.428826][T10865] bridge0: port 2(gretap0) entered forwarding state [ 214.440218][T10865] device gretap0 left promiscuous mode [ 214.444265][T10865] bridge0: port 2(gretap0) entered disabled state [ 214.487993][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'. [ 214.589804][ T4229] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 214.593329][ T4229] Bluetooth: hci5: Malformed Event: 0x02 [ 215.044768][T10901] loop1: detected capacity change from 0 to 256 [ 215.057587][T10901] FAT-fs (loop1): bogus number of directory entries (17407) [ 215.059602][T10901] FAT-fs (loop1): Can't find a valid FAT filesystem [ 215.124788][T10897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2522'. [ 215.141311][T10904] bridge0: port 2(gretap0) entered blocking state [ 215.143194][T10904] bridge0: port 2(gretap0) entered disabled state [ 215.145727][T10904] device gretap0 entered promiscuous mode [ 215.147591][T10904] bridge0: port 2(gretap0) entered blocking state [ 215.149484][T10904] bridge0: port 2(gretap0) entered forwarding state [ 215.172192][T10904] device gretap0 left promiscuous mode [ 215.174134][T10904] bridge0: port 2(gretap0) entered disabled state [ 215.337838][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 215.515903][T10927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.652084][T10944] loop4: detected capacity change from 0 to 256 [ 215.665830][T10944] FAT-fs (loop4): bogus number of directory entries (17407) [ 215.673854][T10944] FAT-fs (loop4): Can't find a valid FAT filesystem [ 215.737553][ T6669] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.743292][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2537'. [ 215.874838][T10952] bridge0: port 2(gretap0) entered blocking state [ 215.876740][T10952] bridge0: port 2(gretap0) entered disabled state [ 215.879831][T10952] device gretap0 entered promiscuous mode [ 215.890989][T10952] bridge0: port 2(gretap0) entered blocking state [ 215.892937][T10952] bridge0: port 2(gretap0) entered forwarding state [ 215.904823][T10952] device gretap0 left promiscuous mode [ 215.909218][T10952] bridge0: port 2(gretap0) entered disabled state [ 215.967602][ T4229] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 215.977975][ T4229] Bluetooth: hci0: Malformed Event: 0x02 [ 216.625012][T10991] bridge0: port 2(gretap0) entered blocking state [ 216.626618][T10991] bridge0: port 2(gretap0) entered disabled state [ 216.629194][T10991] device gretap0 entered promiscuous mode [ 216.635287][T10991] bridge0: port 2(gretap0) entered blocking state [ 216.637068][T10991] bridge0: port 2(gretap0) entered forwarding state [ 216.696442][T10999] device gretap0 left promiscuous mode [ 216.698014][T10999] bridge0: port 2(gretap0) entered disabled state [ 216.795192][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2556'. [ 216.869111][T11008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.318182][ T4229] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 217.321669][ T4229] Bluetooth: hci1: Malformed Event: 0x02 [ 217.606700][T11039] bridge0: port 2(gretap0) entered blocking state [ 217.608482][T11039] bridge0: port 2(gretap0) entered disabled state [ 217.613803][T11039] device gretap0 entered promiscuous mode [ 217.615646][T11039] bridge0: port 2(gretap0) entered blocking state [ 217.617460][T11039] bridge0: port 2(gretap0) entered forwarding state [ 217.632645][T11039] device gretap0 left promiscuous mode [ 217.634584][T11039] bridge0: port 2(gretap0) entered disabled state [ 218.172786][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 218.452779][T11086] bridge0: port 2(gretap0) entered blocking state [ 218.454644][T11086] bridge0: port 2(gretap0) entered disabled state [ 218.459293][T11086] device gretap0 entered promiscuous mode [ 218.470805][T11086] bridge0: port 2(gretap0) entered blocking state [ 218.472541][T11086] bridge0: port 2(gretap0) entered forwarding state [ 218.485995][T11086] device gretap0 left promiscuous mode [ 218.488484][T11086] bridge0: port 2(gretap0) entered disabled state [ 218.806195][ T4229] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 218.808197][ T4229] Bluetooth: hci1: Malformed Event: 0x02 [ 219.106982][T11124] bridge0: port 2(gretap0) entered blocking state [ 219.108662][T11124] bridge0: port 2(gretap0) entered disabled state [ 219.125321][T11124] device gretap0 entered promiscuous mode [ 219.127178][T11124] bridge0: port 2(gretap0) entered blocking state [ 219.128947][T11124] bridge0: port 2(gretap0) entered forwarding state [ 219.144151][T11124] device gretap0 left promiscuous mode [ 219.145668][T11124] bridge0: port 2(gretap0) entered disabled state [ 219.574381][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 219.962266][T11191] bridge0: port 2(gretap0) entered blocking state [ 219.964053][T11191] bridge0: port 2(gretap0) entered disabled state [ 219.967012][T11191] device gretap0 entered promiscuous mode [ 219.973621][T11191] bridge0: port 2(gretap0) entered blocking state [ 219.975404][T11191] bridge0: port 2(gretap0) entered forwarding state [ 219.994354][T11191] device gretap0 left promiscuous mode [ 219.997894][T11191] bridge0: port 2(gretap0) entered disabled state [ 220.348524][ T27] audit: type=1326 audit(220.310:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.1.2630" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 220.708719][ T4229] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 220.736249][ T4229] Bluetooth: hci5: Malformed Event: 0x02 [ 220.840116][T11292] bridge0: port 2(gretap0) entered blocking state [ 220.841955][T11292] bridge0: port 2(gretap0) entered disabled state [ 220.844264][T11292] device gretap0 entered promiscuous mode [ 220.862268][T11292] bridge0: port 2(gretap0) entered blocking state [ 220.864114][T11292] bridge0: port 2(gretap0) entered forwarding state [ 220.883076][T11286] device gretap0 left promiscuous mode [ 220.888170][T11286] bridge0: port 2(gretap0) entered disabled state [ 220.939411][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 221.036956][T11302] serio: Serial port pts0 [ 221.566314][ T27] audit: type=1326 audit(221.530:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.1.2656" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 221.686948][T11336] bridge0: port 2(gretap0) entered blocking state [ 221.688886][T11336] bridge0: port 2(gretap0) entered disabled state [ 221.693845][T11336] device gretap0 entered promiscuous mode [ 221.702085][T11336] bridge0: port 2(gretap0) entered blocking state [ 221.703823][T11336] bridge0: port 2(gretap0) entered forwarding state [ 221.708482][T11336] device gretap0 left promiscuous mode [ 221.718815][T11336] bridge0: port 2(gretap0) entered disabled state [ 222.048141][ T4229] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 222.059028][ T4229] Bluetooth: hci0: Malformed Event: 0x02 [ 222.349483][T11379] loop3: detected capacity change from 0 to 256 [ 222.368659][T11379] FAT-fs (loop3): bogus number of directory entries (17407) [ 222.370711][T11379] FAT-fs (loop3): Can't find a valid FAT filesystem [ 222.413200][T11380] bridge0: port 2(gretap0) entered blocking state [ 222.415070][T11380] bridge0: port 2(gretap0) entered disabled state [ 222.418418][T11380] device gretap0 entered promiscuous mode [ 222.427641][T11380] bridge0: port 2(gretap0) entered blocking state [ 222.429341][T11380] bridge0: port 2(gretap0) entered forwarding state [ 222.439742][T11380] device gretap0 left promiscuous mode [ 222.445551][T11380] bridge0: port 2(gretap0) entered disabled state [ 222.887393][ T27] audit: type=1326 audit(222.850:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11399 comm="syz.1.2688" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 223.578715][ T4231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.582815][ T4231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.585493][ T4231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.589486][ T4231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.591982][ T4231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.594377][ T4231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.622667][T11459] bridge0: port 2(gretap0) entered blocking state [ 223.637732][T11459] bridge0: port 2(gretap0) entered disabled state [ 223.653892][T11459] device gretap0 entered promiscuous mode [ 223.655811][T11459] bridge0: port 2(gretap0) entered blocking state [ 223.657556][T11459] bridge0: port 2(gretap0) entered forwarding state [ 223.795428][T11459] device gretap0 left promiscuous mode [ 223.797387][T11459] bridge0: port 2(gretap0) entered disabled state [ 224.166611][ T27] audit: type=1326 audit(224.130:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.1.2724" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 224.269776][T11456] chnl_net:caif_netlink_parms(): no params data found [ 224.347035][T11514] bridge0: port 2(gretap0) entered blocking state [ 224.348975][T11514] bridge0: port 2(gretap0) entered disabled state [ 224.353770][T11514] device gretap0 entered promiscuous mode [ 224.355669][T11514] bridge0: port 2(gretap0) entered blocking state [ 224.357406][T11514] bridge0: port 2(gretap0) entered forwarding state [ 224.374309][T11514] device gretap0 left promiscuous mode [ 224.375938][T11514] bridge0: port 2(gretap0) entered disabled state [ 224.450981][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.452895][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.455635][T11456] device bridge_slave_0 entered promiscuous mode [ 224.459489][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.470322][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.473554][T11456] device bridge_slave_1 entered promiscuous mode [ 224.531881][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.550504][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.636811][T11456] team0: Port device team_slave_0 added [ 224.645107][T11456] team0: Port device team_slave_1 added [ 224.668716][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.675072][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.682651][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.687140][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.689141][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.697003][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.774868][T11456] device hsr_slave_0 entered promiscuous mode [ 224.810427][T11456] device hsr_slave_1 entered promiscuous mode [ 224.850151][T11456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.852395][T11456] Cannot create hsr debugfs directory [ 225.103027][T11456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.244085][T11456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.353959][T11456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.482854][T11456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.508977][T11547] bridge0: port 2(gretap0) entered blocking state [ 225.514416][T11547] bridge0: port 2(gretap0) entered disabled state [ 225.524634][T11547] device gretap0 entered promiscuous mode [ 225.535541][T11547] bridge0: port 2(gretap0) entered blocking state [ 225.537301][T11547] bridge0: port 2(gretap0) entered forwarding state [ 225.546677][T11550] device gretap0 left promiscuous mode [ 225.548231][T11550] bridge0: port 2(gretap0) entered disabled state [ 225.630295][ T4231] Bluetooth: hci3: command tx timeout [ 225.639309][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 225.821185][T11456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.823652][ T27] audit: type=1326 audit(225.790:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.0.2746" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb41f68 code=0x0 [ 225.872600][T11456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.901812][T11456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.972718][T11456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.047700][T11575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.153522][T11582] bridge0: port 2(gretap0) entered blocking state [ 226.155746][T11582] bridge0: port 2(gretap0) entered disabled state [ 226.158442][T11582] device gretap0 entered promiscuous mode [ 226.168724][T11582] bridge0: port 2(gretap0) entered blocking state [ 226.170460][T11582] bridge0: port 2(gretap0) entered forwarding state [ 226.180861][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.184782][T11582] device gretap0 left promiscuous mode [ 226.186362][T11582] bridge0: port 2(gretap0) entered disabled state [ 226.247174][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.250292][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.252723][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.271916][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.274797][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.277200][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.279126][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.296706][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.299458][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.302379][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.304905][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.306734][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.308956][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.320952][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.342176][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.346686][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.349465][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.354089][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.356841][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.370654][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.376476][T11456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.379816][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.385563][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.388208][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.391507][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.559896][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.563919][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.566118][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.591759][ T4231] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 226.601171][ T4231] Bluetooth: hci1: Malformed Event: 0x02 [ 226.837525][ T27] audit: type=1326 audit(226.800:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.2758" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 227.046970][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.049830][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.100553][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.103575][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.106513][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.114673][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.118880][T11456] device veth0_vlan entered promiscuous mode [ 227.151863][T11456] device veth1_vlan entered promiscuous mode [ 227.209319][T11456] device veth0_macvtap entered promiscuous mode [ 227.237860][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 227.240982][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.243636][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.247268][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.256934][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.270405][T11456] device veth1_macvtap entered promiscuous mode [ 227.301692][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.304451][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.306964][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.309573][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.330199][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.332923][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.335722][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.338592][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.341860][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.344572][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.347295][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.360432][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.371479][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.376822][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.379410][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.382734][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.388121][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.401020][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.403597][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.406009][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.422136][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.424775][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.427074][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.460308][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.463188][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.465778][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.468131][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.480084][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.484031][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.488522][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.491876][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.496955][T11456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.499183][T11456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.520005][T11456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.522254][T11456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.539332][T11622] bridge0: port 2(gretap0) entered blocking state [ 227.541533][T11622] bridge0: port 2(gretap0) entered disabled state [ 227.544105][T11622] device gretap0 entered promiscuous mode [ 227.548364][T11622] bridge0: port 2(gretap0) entered blocking state [ 227.550300][T11622] bridge0: port 2(gretap0) entered forwarding state [ 227.585040][T11624] device gretap0 left promiscuous mode [ 227.586888][T11624] bridge0: port 2(gretap0) entered disabled state [ 227.711646][T11236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.713460][ T4231] Bluetooth: hci3: command tx timeout [ 227.713979][T11236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.771002][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.804916][T11630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.842774][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.844890][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.850666][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.052200][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'. [ 228.071877][ T4229] Bluetooth: hci6: ACL packet for unknown connection handle 203 [ 228.089633][ T4229] Bluetooth: hci6: Malformed Event: 0x02 [ 228.205297][ T27] audit: type=1326 audit(228.170:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11659 comm="syz.0.2774" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb41f68 code=0x0 [ 229.025041][T11707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.277319][ T4229] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 229.279632][ T4229] Bluetooth: hci4: Malformed Event: 0x02 [ 229.305505][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2792'. [ 229.783088][T11744] loop2: detected capacity change from 0 to 256 [ 229.790396][ T4231] Bluetooth: hci3: command tx timeout [ 229.812479][T11744] FAT-fs (loop2): bogus number of directory entries (17407) [ 229.814852][T11744] FAT-fs (loop2): Can't find a valid FAT filesystem [ 229.819562][T11744] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2803'. [ 230.170813][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.268069][T11777] loop2: detected capacity change from 0 to 256 [ 230.276122][T11777] FAT-fs (loop2): bogus number of directory entries (17407) [ 230.279801][T11777] FAT-fs (loop2): Can't find a valid FAT filesystem [ 230.295777][T11777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2816'. [ 230.298247][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'. [ 230.544363][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 230.946184][ T4229] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 230.955627][ T4229] Bluetooth: hci1: Malformed Event: 0x02 [ 231.185702][T11819] bridge0: port 2(gretap0) entered blocking state [ 231.191625][T11819] bridge0: port 2(gretap0) entered disabled state [ 231.203188][T11819] device gretap0 entered promiscuous mode [ 231.204914][T11819] bridge0: port 2(gretap0) entered blocking state [ 231.206727][T11819] bridge0: port 2(gretap0) entered forwarding state [ 231.232048][T11822] loop4: detected capacity change from 0 to 256 [ 231.241007][T11822] FAT-fs (loop4): bogus number of directory entries (17407) [ 231.242925][T11822] FAT-fs (loop4): Can't find a valid FAT filesystem [ 231.243612][T11823] device gretap0 left promiscuous mode [ 231.257873][T11823] bridge0: port 2(gretap0) entered disabled state [ 231.299283][T11817] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2828'. [ 231.300122][ T6669] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.316801][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'. [ 231.381875][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.528176][T11835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.870655][ T4229] Bluetooth: hci3: command tx timeout [ 232.085474][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 232.202832][T11863] bridge0: port 2(gretap0) entered blocking state [ 232.208130][T11863] bridge0: port 2(gretap0) entered disabled state [ 232.214416][T11863] device gretap0 entered promiscuous mode [ 232.219778][T11863] bridge0: port 2(gretap0) entered blocking state [ 232.221722][T11863] bridge0: port 2(gretap0) entered forwarding state [ 232.235717][T11863] device gretap0 left promiscuous mode [ 232.243724][T11863] bridge0: port 2(gretap0) entered disabled state [ 232.468853][T11879] loop2: detected capacity change from 0 to 256 [ 232.488204][T11879] FAT-fs (loop2): bogus number of directory entries (17407) [ 232.504278][T11879] FAT-fs (loop2): Can't find a valid FAT filesystem [ 232.554327][T11873] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2848'. [ 232.556783][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 232.616147][ T4231] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 232.619783][ T4231] Bluetooth: hci3: Malformed Event: 0x02 [ 232.775075][T11890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.099841][T11905] bridge0: port 2(gretap0) entered blocking state [ 233.106965][T11905] bridge0: port 2(gretap0) entered disabled state [ 233.115334][T11905] device gretap0 entered promiscuous mode [ 233.120690][T11905] bridge0: port 2(gretap0) entered blocking state [ 233.122605][T11905] bridge0: port 2(gretap0) entered forwarding state [ 233.133399][T11905] device gretap0 left promiscuous mode [ 233.136722][T11905] bridge0: port 2(gretap0) entered disabled state [ 233.421131][T11913] loop4: detected capacity change from 0 to 256 [ 233.446820][T11913] FAT-fs (loop4): bogus number of directory entries (17407) [ 233.448874][T11913] FAT-fs (loop4): Can't find a valid FAT filesystem [ 233.464730][T11913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2862'. [ 234.020101][T11931] bridge0: port 2(gretap0) entered blocking state [ 234.027425][T11931] bridge0: port 2(gretap0) entered disabled state [ 234.040364][T11931] device gretap0 entered promiscuous mode [ 234.042234][T11931] bridge0: port 2(gretap0) entered blocking state [ 234.043967][T11931] bridge0: port 2(gretap0) entered forwarding state [ 234.069895][T11931] device gretap0 left promiscuous mode [ 234.078461][T11931] bridge0: port 2(gretap0) entered disabled state [ 234.089612][ T27] audit: type=1326 audit(234.050:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2869" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96941f68 code=0x0 [ 234.522179][ T4231] Bluetooth: hci6: ACL packet for unknown connection handle 203 [ 234.524393][ T4231] Bluetooth: hci6: Malformed Event: 0x02 [ 234.569813][T11948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2874'. [ 235.248457][ T4231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.253334][ T4231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.256609][ T4231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.259372][ T4231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.263380][ T4231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.265620][ T4231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.377435][T11967] bridge0: port 3(gretap0) entered blocking state [ 235.379337][T11967] bridge0: port 3(gretap0) entered disabled state [ 235.389150][T11967] device gretap0 entered promiscuous mode [ 235.397911][T11967] bridge0: port 3(gretap0) entered blocking state [ 235.399860][T11967] bridge0: port 3(gretap0) entered forwarding state [ 235.559882][T11969] device gretap0 left promiscuous mode [ 235.562836][T11969] bridge0: port 3(gretap0) entered disabled state [ 235.608640][T11962] chnl_net:caif_netlink_parms(): no params data found [ 235.691763][T11979] loop1: detected capacity change from 0 to 256 [ 235.724413][T11979] FAT-fs (loop1): bogus number of directory entries (17407) [ 235.726531][T11979] FAT-fs (loop1): Can't find a valid FAT filesystem [ 235.785366][ T6669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.163976][ T1737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.169384][ T4229] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 236.171719][ T4229] Bluetooth: hci4: Malformed Event: 0x02 [ 236.188579][T11977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2885'. [ 236.342313][ T1737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.358604][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.360806][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.363927][T11962] device bridge_slave_0 entered promiscuous mode [ 236.382462][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.390251][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.393094][T11962] device bridge_slave_1 entered promiscuous mode [ 236.533572][ T1737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.548526][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.577776][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.735291][ T1737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.783270][T11962] team0: Port device team_slave_0 added [ 236.788151][T11962] team0: Port device team_slave_1 added [ 236.821720][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.823578][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.845632][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.864196][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.866165][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.875910][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.022199][T11962] device hsr_slave_0 entered promiscuous mode [ 237.050394][T11962] device hsr_slave_1 entered promiscuous mode [ 237.090242][T11962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.092325][T11962] Cannot create hsr debugfs directory [ 237.297526][T12010] bridge0: port 2(gretap0) entered blocking state [ 237.299329][T12010] bridge0: port 2(gretap0) entered disabled state [ 237.310939][ T4231] Bluetooth: hci5: command tx timeout [ 237.329886][T12010] device gretap0 entered promiscuous mode [ 237.337417][T12010] bridge0: port 2(gretap0) entered blocking state [ 237.339225][T12010] bridge0: port 2(gretap0) entered forwarding state [ 237.355938][T12014] device gretap0 left promiscuous mode [ 237.357633][T12014] bridge0: port 2(gretap0) entered disabled state [ 238.019922][ T27] audit: type=1326 audit(237.980:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.1.2901" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 238.046582][ T4229] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 238.065387][ T4229] Bluetooth: hci1: Malformed Event: 0x02 [ 238.527617][T11962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.634624][T12067] bridge0: port 2(gretap0) entered blocking state [ 238.636533][T12067] bridge0: port 2(gretap0) entered disabled state [ 238.639294][T12067] device gretap0 entered promiscuous mode [ 238.642670][T12067] bridge0: port 2(gretap0) entered blocking state [ 238.644480][T12067] bridge0: port 2(gretap0) entered forwarding state [ 238.654857][T11962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.693781][T12070] device gretap0 left promiscuous mode [ 238.695432][T12070] bridge0: port 2(gretap0) entered disabled state [ 238.755571][T11962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.120280][T11962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.390123][ T4229] Bluetooth: hci5: command tx timeout [ 239.509602][ T27] audit: type=1326 audit(239.470:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.1.2917" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 239.738103][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.759250][ T1737] device hsr_slave_0 left promiscuous mode [ 239.783429][ T4231] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 239.786252][ T4231] Bluetooth: hci3: Malformed Event: 0x02 [ 239.811794][ T1737] device hsr_slave_1 left promiscuous mode [ 239.910177][ T1737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.914677][ T1737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.918501][ T1737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.924241][ T1737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.947690][ T1737] device bridge_slave_0 left promiscuous mode [ 239.949536][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.140937][ T1737] device veth1_macvtap left promiscuous mode [ 240.142907][ T1737] device veth0_macvtap left promiscuous mode [ 240.144569][ T1737] device veth1_vlan left promiscuous mode [ 240.146095][ T1737] device veth0_vlan left promiscuous mode [ 241.470191][ T4231] Bluetooth: hci5: command tx timeout [ 242.484311][ T1737] team0 (unregistering): Port device team_slave_1 removed [ 242.675853][ T1737] team0 (unregistering): Port device team_slave_0 removed [ 242.850930][ T1737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.072620][ T1737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.550455][ T4229] Bluetooth: hci5: command tx timeout [ 245.556051][ T1737] bond0 (unregistering): Released all slaves [ 245.741255][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.760816][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.763560][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.766084][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.776209][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.786588][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.788649][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.817846][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.820671][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.823394][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.826180][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.828099][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.851480][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.859289][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.901225][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.904934][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.907776][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.917824][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.946941][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.958837][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.968117][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.982341][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.985149][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.985576][ T27] audit: type=1326 audit(245.950:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.2.2938" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3141f68 code=0x0 [ 245.999347][T11962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.084788][ T4231] Bluetooth: hci6: ACL packet for unknown connection handle 203 [ 246.100404][ T4231] Bluetooth: hci6: Malformed Event: 0x02 [ 246.194334][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.196454][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.209930][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.240367][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.243375][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.277433][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.281074][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.284433][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.288317][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.296464][T11962] device veth0_vlan entered promiscuous mode [ 246.314944][T11962] device veth1_vlan entered promiscuous mode [ 246.349493][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.352438][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.355174][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.361902][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.369586][T11962] device veth0_macvtap entered promiscuous mode [ 246.377958][T11962] device veth1_macvtap entered promiscuous mode [ 246.416976][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.424415][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.429479][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.435417][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.441846][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.449449][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.454099][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.459480][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.464833][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.470457][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.475618][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.482209][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.491383][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.496037][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.498882][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.502445][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.508072][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.516346][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.519140][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.524326][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.529597][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.538077][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.544575][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.549740][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.555320][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.560518][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.566912][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.572100][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.577301][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.584683][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.588652][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.592299][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.604568][T11962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.611565][T11962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.614318][T11962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.616965][T11962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.833228][T11229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.835592][T11229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.840768][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.908782][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.920225][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.931556][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.582971][ T4231] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 247.585260][ T4231] Bluetooth: hci1: Malformed Event: 0x02 [ 248.726997][T12263] vhci_hcd: invalid port number 97 [ 248.728333][T12263] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 248.831217][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.832879][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.023287][T12275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.119309][ T4231] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 249.121613][ T4231] Bluetooth: hci3: Malformed Event: 0x02 [ 250.470146][T12347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.089004][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'. [ 251.560988][T12430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.948130][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 252.728316][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 252.937837][T12522] netlink: 'syz.3.3084': attribute type 29 has an invalid length. [ 252.940115][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 252.945826][T12522] netlink: 'syz.3.3084': attribute type 29 has an invalid length. [ 252.948004][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 253.721463][T12533] serio: Serial port pts1 [ 253.866808][T12526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.037246][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 254.046530][T12553] misc userio: The device must be registered before sending interrupts [ 254.403151][T12562] netlink: 'syz.0.3097': attribute type 29 has an invalid length. [ 254.405359][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 254.410661][T12562] netlink: 'syz.0.3097': attribute type 29 has an invalid length. [ 254.412770][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 255.882047][T12598] netlink: 'syz.0.3109': attribute type 29 has an invalid length. [ 255.884151][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 256.480489][T12598] netlink: 'syz.0.3109': attribute type 29 has an invalid length. [ 256.482530][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 257.304248][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 257.579708][T12637] netlink: 'syz.3.3124': attribute type 29 has an invalid length. [ 257.582363][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 257.849805][T12637] netlink: 'syz.3.3124': attribute type 29 has an invalid length. [ 257.852313][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 258.773125][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 259.072233][T12674] netlink: 'syz.3.3138': attribute type 29 has an invalid length. [ 259.074642][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'. [ 259.401724][T12674] netlink: 'syz.3.3138': attribute type 29 has an invalid length. [ 259.404014][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'. [ 259.763441][T11229] device hsr_slave_0 left promiscuous mode [ 259.813457][T11229] device hsr_slave_1 left promiscuous mode [ 259.880236][T11229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.882279][T11229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.885032][T11229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.887043][T11229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.911127][T11229] device team0 left promiscuous mode [ 259.912581][T11229] device team_slave_0 left promiscuous mode [ 259.914716][T11229] device team_slave_1 left promiscuous mode [ 259.916604][T11229] bridge0: port 3(team0) entered disabled state [ 259.998438][T11229] device bridge_slave_0 left promiscuous mode [ 260.002276][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.077789][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 260.170300][T11229] device veth1_macvtap left promiscuous mode [ 260.171916][T11229] device veth0_macvtap left promiscuous mode [ 260.173468][T11229] device veth1_vlan left promiscuous mode [ 260.175051][T11229] device veth0_vlan left promiscuous mode [ 260.220623][T12672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.275973][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 262.114110][T11229] team0 (unregistering): Port device team_slave_1 removed [ 262.293236][T11229] team0 (unregistering): Port device team_slave_0 removed [ 262.471053][T11229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.692219][T11229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.303946][T12753] serio: Serial port pts0 [ 265.174814][T11229] bond0 (unregistering): Released all slaves [ 266.050747][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.143952][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.122156][T12906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.134494][T12839] input: syz1 as /devices/virtual/input/input15 [ 269.192800][T12946] netlink: 'syz.1.3242': attribute type 29 has an invalid length. [ 269.195119][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 269.200098][T12946] netlink: 'syz.1.3242': attribute type 29 has an invalid length. [ 269.202214][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 270.021710][T12963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.434026][T12995] netlink: 'syz.4.3258': attribute type 29 has an invalid length. [ 270.436468][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 270.442114][T12995] netlink: 'syz.4.3258': attribute type 29 has an invalid length. [ 270.444376][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 271.390083][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 271.449347][ T27] audit: type=1326 audit(271.410:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.3.3273" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96941f68 code=0x0 [ 272.129540][T13079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.788882][ T27] audit: type=1326 audit(272.750:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.1.3311" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3341f68 code=0x0 [ 273.361435][T13154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.888648][ T4238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.893691][ T4238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.898724][ T4238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.920966][ T4238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.923528][ T4238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.925752][ T4238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.058524][T13179] chnl_net:caif_netlink_parms(): no params data found [ 274.203108][T13179] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.205085][T13179] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.207982][T13179] device bridge_slave_0 entered promiscuous mode [ 274.212718][T13179] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.214626][T13179] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.217228][T13179] device bridge_slave_1 entered promiscuous mode [ 274.234965][T13179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.239722][T13179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.255811][T13179] team0: Port device team_slave_0 added [ 274.262205][T13179] team0: Port device team_slave_1 added [ 274.275797][T13179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.277564][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.284644][T13179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.288789][T13179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.292011][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.299221][T13179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.305854][ T27] audit: type=1326 audit(274.270:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.0.3339" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8141f68 code=0x0 [ 274.612226][T13179] device hsr_slave_0 entered promiscuous mode [ 274.640636][T13179] device hsr_slave_1 entered promiscuous mode [ 274.693845][T13215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.744998][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.752109][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3344'. [ 274.918448][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.933017][ T27] audit: type=1326 audit(274.900:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.3349" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b41f68 code=0x0 [ 275.032182][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.132788][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.030544][ T4238] Bluetooth: hci0: command tx timeout [ 276.297095][ T4231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.301773][ T4231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.304569][ T4231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.310819][ T4231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.313366][ T4231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.315508][ T4231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.380052][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3362'. [ 276.488996][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.616970][T13179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.665575][T13179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.753929][T13179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.783099][T13179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.146290][ T27] audit: type=1326 audit(277.110:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13313 comm="syz.4.3365" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b41f68 code=0x0 [ 277.317223][T13292] chnl_net:caif_netlink_parms(): no params data found [ 277.359438][T13179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.740578][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.745645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.754594][T13346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.809558][ T39] device hsr_slave_0 left promiscuous mode [ 277.851177][ T39] device hsr_slave_1 left promiscuous mode [ 277.957061][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.959079][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.963956][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.965945][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.977924][ T39] device bridge_slave_0 left promiscuous mode [ 277.979699][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.110139][ T4231] Bluetooth: hci0: command tx timeout [ 278.130695][ T39] device veth1_macvtap left promiscuous mode [ 278.132454][ T39] device veth0_macvtap left promiscuous mode [ 278.134158][ T39] device veth1_vlan left promiscuous mode [ 278.135897][ T39] device veth0_vlan left promiscuous mode [ 278.350371][ T4231] Bluetooth: hci1: command tx timeout [ 278.586692][ T27] audit: type=1326 audit(278.550:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.3388" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b41f68 code=0x0 [ 280.190235][ T4231] Bluetooth: hci0: command tx timeout [ 280.204200][ T39] team0 (unregistering): Port device team_slave_1 removed [ 280.372476][ T39] team0 (unregistering): Port device team_slave_0 removed [ 280.430162][ T4238] Bluetooth: hci1: command tx timeout [ 280.552465][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.760855][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.110225][ T28] INFO: task syz.0.1021:7001 blocked for more than 143 seconds. [ 282.112286][ T28] Not tainted 6.1.99-syzkaller #0 [ 282.113739][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.116241][ T28] task:syz.0.1021 state:D stack:0 pid:7001 ppid:4233 flags:0x00000009 [ 282.118799][ T28] Call trace: [ 282.119659][ T28] __switch_to+0x320/0x754 [ 282.123245][ T28] __schedule+0xee4/0x1c98 [ 282.124611][ T28] schedule+0xc4/0x170 [ 282.126007][ T28] percpu_rwsem_wait+0x288/0x3cc [ 282.127219][ T28] __percpu_down_read+0x7c/0xac [ 282.128494][ T28] sb_start_write+0x268/0x308 [ 282.129727][ T28] mnt_want_write+0x44/0x9c [ 282.132498][ T28] vfs_truncate+0xdc/0x36c [ 282.134004][ T28] do_sys_truncate+0xec/0x1b4 [ 282.135291][ T28] __arm64_sys_truncate+0x5c/0x70 [ 282.136639][ T28] invoke_syscall+0x98/0x2c0 [ 282.138024][ T28] el0_svc_common+0x138/0x258 [ 282.139343][ T28] do_el0_svc+0x64/0x218 [ 282.140994][ T28] el0_svc+0x58/0x168 [ 282.142072][ T28] el0t_64_sync_handler+0x84/0xf0 [ 282.143436][ T28] el0t_64_sync+0x18c/0x190 [ 282.144595][ T28] INFO: task kmmpd-loop0:6984 blocked for more than 143 seconds. [ 282.146690][ T28] Not tainted 6.1.99-syzkaller #0 [ 282.148044][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.150697][ T28] task:kmmpd-loop0 state:D stack:0 pid:6984 ppid:2 flags:0x00000008 [ 282.153129][ T28] Call trace: [ 282.153946][ T28] __switch_to+0x320/0x754 [ 282.155151][ T28] __schedule+0xee4/0x1c98 [ 282.156358][ T28] schedule+0xc4/0x170 [ 282.157403][ T28] percpu_rwsem_wait+0x288/0x3cc [ 282.158776][ T28] __percpu_down_read+0x7c/0xac [ 282.160639][ T28] write_mmp_block+0x48c/0x734 [ 282.161974][ T28] kmmpd+0x708/0x9f8 [ 282.162976][ T28] kthread+0x250/0x2d8 [ 282.164148][ T28] ret_from_fork+0x10/0x20 [ 282.165281][ T28] [ 282.165281][ T28] Showing all locks held in the system: [ 282.167249][ T28] 3 locks held by kworker/0:0/7: [ 282.168444][ T28] #0: ffff0000d591b138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 282.178204][ T28] #1: ffff800019e17c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 282.182036][ T28] #2: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.184328][ T28] 1 lock held by rcu_tasks_kthre/12: [ 282.185661][ T28] #0: ffff800015a24eb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 282.188376][ T28] 1 lock held by rcu_tasks_trace/13: [ 282.189750][ T28] #0: ffff800015a256b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 282.192811][ T28] 1 lock held by khungtaskd/28: [ 282.194114][ T28] #0: ffff800015a24ce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 282.196606][ T28] 4 locks held by kworker/u4:2/39: [ 282.197881][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 282.200728][ T28] #1: ffff80001b2c7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 282.203445][ T28] #2: ffff800017e26310 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 282.205971][ T28] #3: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.208242][ T28] 3 locks held by kworker/0:3/3806: [ 282.209669][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 282.212599][ T28] #1: ffff80001faa7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 282.215281][ T28] #2: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.217419][ T28] 2 locks held by getty/3988: [ 282.218512][ T28] #0: ffff0000d60e2098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 282.221176][ T28] #1: ffff80001bd202f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 282.223866][ T28] 3 locks held by kworker/1:7/4273: [ 282.225376][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 282.228220][ T28] #1: ffff80001e477c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 282.231147][ T28] #2: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.233550][ T28] 1 lock held by syz.0.1021/7001: [ 282.234865][ T28] #0: ffff0000c34ea460 (sb_writers#3){++++}-{0:0}, at: mnt_want_write+0x44/0x9c [ 282.237309][ T28] 1 lock held by kmmpd-loop0/6984: [ 282.238582][ T28] #0: ffff0000c34ea460 (sb_writers#3){++++}-{0:0}, at: kmmpd+0x708/0x9f8 [ 282.241533][ T28] 1 lock held by syz-executor/13179: [ 282.243061][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 282.245524][ T28] 1 lock held by syz-executor/13292: [ 282.246918][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 282.249223][ T28] 1 lock held by syz.0.3377/13344: [ 282.250528][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.252783][ T28] 2 locks held by syz.0.3377/13346: [ 282.254067][ T28] #0: ffff800017e8cf10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 282.256208][ T28] #1: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.258362][ T28] 2 locks held by syz.0.3377/13354: [ 282.259620][ T28] #0: ffff800017e8cf10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 282.262102][ T28] #1: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.264339][ T28] 2 locks held by syz.0.3377/13365: [ 282.265711][ T28] #0: ffff800017e8cf10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 282.267866][ T28] #1: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.270221][ T28] 1 lock held by syz.4.3388/13383: [ 282.271576][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 282.273989][ T28] 1 lock held by syz.1.3397/13409: [ 282.275194][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.277413][ T28] 1 lock held by syz.1.3397/13410: [ 282.278726][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 282.280106][ T4231] Bluetooth: hci0: command tx timeout [ 282.281546][ T28] [ 282.282906][ T28] ============================================= [ 282.282906][ T28] [ 282.284968][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 282.286655][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.99-syzkaller #0 [ 282.288699][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 282.291491][ T28] Call trace: [ 282.292290][ T28] dump_backtrace+0x1c8/0x1f4 [ 282.293534][ T28] show_stack+0x2c/0x3c [ 282.294638][ T28] dump_stack_lvl+0x108/0x170 [ 282.295741][ T28] dump_stack+0x1c/0x5c [ 282.296881][ T28] panic+0x300/0x804 [ 282.297888][ T28] hung_task_panic+0x0/0x2c [ 282.299058][ T28] kthread+0x250/0x2d8 [ 282.300176][ T28] ret_from_fork+0x10/0x20 [ 282.301273][ T28] SMP: stopping secondary CPUs [ 282.302602][ T28] Kernel Offset: disabled [ 282.303668][ T28] CPU features: 0x00000,02070084,26017203 [ 282.305086][ T28] Memory Limit: none [ 282.946219][ T28] Rebooting in 86400 seconds..