last executing test programs: 1m9.855812731s ago: executing program 0 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 55.881838924s ago: executing program 4 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = dup2(r4, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000c500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.514780748s ago: executing program 4 (id=956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 47.499533874s ago: executing program 4 (id=965): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20005810) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0xa0, 0x4) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) socket$kcm(0x29, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$rfkill(r0, 0x0, 0x0) 46.418301472s ago: executing program 4 (id=966): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x15) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x40, 0x10100, 0x0, 0xff}, 0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r6, 0x0, 0x0}) io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x490, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) getdents64(r7, 0xffffffffffffffff, 0x43) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={0x0, 0x78, 0x4}, 0x0, &(0x7f0000000380)="d1d459cff8a5084a543b58c2524bbd81123d45dcc0c859bca182f3131562078c258e73c43d335301991aec8864630f561c82039d0612722437e372ad6f4a8548bf293beb8a113ee5550a5dde833ce5bfea1924ca8edae54b511c043624f74a8b3afbc7abe23c1d1f8b15bc728a0eb2aadfe4e249eba6b91a", &(0x7f0000000180)=""/4) syz_open_procfs(r1, &(0x7f00000000c0)='net/tcp\x00') 44.077650272s ago: executing program 4 (id=970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) 42.832132281s ago: executing program 4 (id=971): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x80}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f00000000c0), 0x3f) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @private, 0x0, 0x3, 'dh\x00'}, 0x2c) r8 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r8, &(0x7f00000005c0)=[{0x6, 0x4, 0x0, 0x0, @time, {0x4}, {}, @addr}, {0x0, 0x80, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x4, @tick, {}, {}, @control}, {0x0, 0x0, 0x63}], 0x70) 25.989259109s ago: executing program 3 (id=996): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x15) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x40, 0x10100, 0x0, 0xff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x490, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) getdents64(r8, 0xffffffffffffffff, 0x43) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={0x0, 0x78, 0x4}, 0x0, &(0x7f0000000380)="d1d459cff8a5084a543b58c2524bbd81123d45dcc0c859bca182f3131562078c258e73c43d335301991aec8864630f561c82039d0612722437e372ad6f4a8548bf293beb8a113ee5550a5dde833ce5bfea1924ca8edae54b511c043624f74a8b3afbc7abe23c1d1f8b15bc728a0eb2aadfe4e249eba6b91a", &(0x7f0000000180)=""/4) syz_open_procfs(r1, &(0x7f00000000c0)='net/tcp\x00') 24.884195744s ago: executing program 3 (id=998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 22.016316228s ago: executing program 3 (id=1001): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x1e) r2 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x6, 0x0) dup3(r3, r4, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 19.135095699s ago: executing program 3 (id=1004): socket$rds(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100003050000e8ff00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1c0012800c0001006d6163766c616e000c0002800800030000000000"], 0x44}}, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000000340)=""/185, 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045432, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x3) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000040)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x60, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x60}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 18.084177655s ago: executing program 2 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17.726595232s ago: executing program 2 (id=1007): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB="040025bd7000fedb", @ANYRES32=r4, @ANYBLOB], 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c00028005001900070000000800270001"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r1, &(0x7f0000000400)="a7", 0x1, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0), &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) write$sequencer(r8, &(0x7f0000000080)=[@l={0x92, 0xd, 0xc0, 0x16, 0x6, 0x5, 0x2}], 0x8) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) 14.851967173s ago: executing program 3 (id=1010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 14.702418861s ago: executing program 2 (id=1011): syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) 13.679217076s ago: executing program 2 (id=1012): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20005810) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0xa0, 0x4) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x4000801) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$rfkill(r0, 0x0, 0x0) 12.593305541s ago: executing program 3 (id=1013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 12.386288236s ago: executing program 2 (id=1014): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000500)=""/182, 0xb6, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f00000008c0)=""/174, 0xae, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f0000000380)=""/51, 0xfffffff8, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 11.92443871s ago: executing program 2 (id=1015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000002040)={0x0, [[], [0x0, 0xfffffffc]]}) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)='g', 0x1}], 0x1}}], 0x1, 0xf000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 9.914937799s ago: executing program 1 (id=1018): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x1e) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) getpid() r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x6, 0x0) dup3(r4, r5, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 8.580932233s ago: executing program 1 (id=1019): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0xa0, 0x4) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x4000801) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$rfkill(r0, 0x0, 0x0) 6.140524276s ago: executing program 1 (id=1020): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6, r6}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.174893793s ago: executing program 1 (id=1021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="38003300c0000000e7ffffffffff080211000000"], 0x54}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) geteuid() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0xffffffa1, &(0x7f0000000480)={&(0x7f0000000400)=""/51, 0x33, 0x0, &(0x7f0000000740)=""/138, 0x8a}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x300) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 2.62569764s ago: executing program 0 (id=943): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xa0, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 2.331869314s ago: executing program 0 (id=1023): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000500)=""/182, 0xb6, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f00000008c0)=""/174, 0xae, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f0000000380)=""/51, 0xfffffff8, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 2.157255296s ago: executing program 1 (id=1024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 1.912933439s ago: executing program 0 (id=1025): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = memfd_create(&(0x7f0000000000)='\x107', 0x0) finit_module(r3, 0x0, 0x0) ftruncate(r3, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r4, 0x3, r1, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x200, &(0x7f0000000880)="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"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x66e2e093, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c000000dc74585ecc0849004301159a295af4e5390db39f5fdd6f16db7479b7c858ac5dc1a8d3f3822c25c1aca96ed26c307970b3ed7c1f2bfdfb6b68fe3bba6726657cba7cbaa9e55c0e280508718ad4fece0785379099ec49272c4370f2c105b04b6d96373ad118456ee88a51334be8bfaa28ccad7147f8c08198fe55598cfcaf54de04dc73c162461dad82f79e7193505dbed4ed3ded916747fd991d7e3b85ec9fee941656c155670df85a8a9a00685581844ecd0f590b8fcf131b8068db65c3c7aab110d560fd9dad78ce5f7ac23194723d50b47ecef392b3b2af2490256bbe750364e5afeccb44ff6b25759b3e39dd5e5a324347db710fc8722babe7429d054b01ff9de1ddb702e605161e65378faa107886c40f83af77ee599534e49451aef9d607ffb617b5594bd41fa6a49e266b2251a717344ae276efc5aaa02779ad172e3f2ea58f54c9f67336df3a1f0cf21ec6aa45dbdf711309a60149b6df76092ff39be43fcbab422cba8b4a6b481a9671b429d3ec8686ef5ec97c063ee207da991c01daa05c9d867788a699cea3f243261993bf7fd218a32a13f83b632a921f04c85036bfc5af2931185dd9e67af5b2221a2986d3981e132b2798b802eb51c44c64a89c1bbdc3078cf92e8b", @ANYRES16=r7, @ANYRESHEX], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) write$dsp(r0, &(0x7f00000001c0)="d1d669c10ab10de4d9f667fc4a299c794e7d7f10e7bcd821a58b563257998027500b36cc013c52493a8866d3e9c647ab77647297023cfcb44f10939f19abcb898fa89ff06dc0bbd74b64978276055566db5346457c5c66f28606dad37b6353a8", 0x60) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 639.295786ms ago: executing program 0 (id=1027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 87.437586ms ago: executing program 1 (id=1028): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000002040)={0x0, [[], [0x0, 0xfffffffc]]}) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)='g', 0x1}], 0x1}}], 0x1, 0xf000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 0s ago: executing program 0 (id=1029): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000002040)={0x0, [[], [0x0, 0xfffffffc]]}) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)='g', 0x1}], 0x1}}], 0x1, 0xf000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) kernel console output (not intermixed with test programs): e_1) entered blocking state [ 1146.654557][ T8332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.744655][T11653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.928370][T11653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.020634][T11632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1147.162606][T11653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.302432][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.587927][T11653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.863447][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.949135][T11632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.078692][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.212805][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.761504][ T11] bridge_slave_1: left allmulticast mode [ 1148.783182][ T11] bridge_slave_1: left promiscuous mode [ 1148.809033][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.846076][ T11] bridge_slave_0: left allmulticast mode [ 1148.851738][ T11] bridge_slave_0: left promiscuous mode [ 1148.883272][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.907745][ T11] bridge_slave_1: left allmulticast mode [ 1148.915564][ T11] bridge_slave_1: left promiscuous mode [ 1148.921465][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.946391][ T11] bridge_slave_0: left allmulticast mode [ 1148.952180][ T11] bridge_slave_0: left promiscuous mode [ 1148.966817][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.989104][ T11] bridge_slave_1: left allmulticast mode [ 1148.994790][ T11] bridge_slave_1: left promiscuous mode [ 1149.005585][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.028378][ T11] bridge_slave_0: left allmulticast mode [ 1149.035538][ T11] bridge_slave_0: left promiscuous mode [ 1149.041256][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.067985][ T11] bridge_slave_1: left allmulticast mode [ 1149.073672][ T11] bridge_slave_1: left promiscuous mode [ 1149.079689][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.097802][ T11] bridge_slave_0: left allmulticast mode [ 1149.106448][ T11] bridge_slave_0: left promiscuous mode [ 1149.115617][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.136646][ T11] bridge_slave_1: left allmulticast mode [ 1149.142339][ T11] bridge_slave_1: left promiscuous mode [ 1149.148199][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.168921][ T11] bridge_slave_0: left allmulticast mode [ 1149.174615][ T11] bridge_slave_0: left promiscuous mode [ 1149.185631][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.316302][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.382604][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.398391][ T11] bond0 (unregistering): Released all slaves [ 1152.966449][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.978758][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.999127][ T11] bond0 (unregistering): Released all slaves [ 1153.365736][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.407477][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.435591][ T11] bond0 (unregistering): Released all slaves [ 1153.774713][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.789438][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.809374][ T11] bond0 (unregistering): Released all slaves [ 1154.565866][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.637670][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.650092][ T11] bond0 (unregistering): Released all slaves [ 1154.762206][T11632] veth0_vlan: entered promiscuous mode [ 1154.925604][T11645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1154.982635][T11632] veth1_vlan: entered promiscuous mode [ 1155.136147][T11645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1155.167409][T11645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1155.379969][T11645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1155.425875][T11632] veth0_macvtap: entered promiscuous mode [ 1155.487299][T11632] veth1_macvtap: entered promiscuous mode [ 1155.828829][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.875575][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.896083][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.945433][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.965736][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.985419][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.005486][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.042124][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.065914][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.105405][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.125726][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.145735][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.157705][T11632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.298387][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.335543][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.375579][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.405603][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.425876][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.455729][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.475958][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.506332][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.545455][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.569190][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.579959][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.612290][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.656649][T11632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.864656][T11632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.894976][T11632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.904651][T11632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.914445][T11632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.154163][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.277456][T11648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1157.307230][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.389591][ T8332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.397493][ T8332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.547099][T11648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1157.656234][T11648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1157.696340][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.703412][ T5577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.712534][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.719725][ T5577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.790376][T11639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1158.056998][T11648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1158.108519][T11639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1158.118439][T11639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1158.139724][T11639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1158.163157][ T5586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.171330][ T5586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.504785][T11653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1158.552030][T11653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1158.570716][T11653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1158.718785][T11653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1158.935554][T11639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.987115][ T11] hsr_slave_0: left promiscuous mode [ 1158.999576][ T11] hsr_slave_1: left promiscuous mode [ 1159.010909][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.024080][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.031475][T11752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.061482][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.087385][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.133702][ T11] hsr_slave_0: left promiscuous mode [ 1159.172802][ T11] hsr_slave_1: left promiscuous mode [ 1159.190338][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.199259][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.208834][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.236080][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.247348][ T11] hsr_slave_0: left promiscuous mode [ 1159.253382][ T11] hsr_slave_1: left promiscuous mode [ 1159.263868][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.276137][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.284688][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.293096][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.331463][ T11] hsr_slave_0: left promiscuous mode [ 1159.342314][ T11] hsr_slave_1: left promiscuous mode [ 1159.360632][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.369050][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.378596][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.395939][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.423744][ T11] hsr_slave_0: left promiscuous mode [ 1159.436982][ T11] hsr_slave_1: left promiscuous mode [ 1159.454395][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.462682][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.491310][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.499170][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.765877][ T11] veth1_macvtap: left promiscuous mode [ 1159.771634][ T11] veth0_macvtap: left promiscuous mode [ 1159.793373][ T11] veth1_vlan: left promiscuous mode [ 1159.799519][ T11] veth0_vlan: left promiscuous mode [ 1159.807087][ T11] veth1_macvtap: left promiscuous mode [ 1159.812687][ T11] veth0_macvtap: left promiscuous mode [ 1159.824513][ T11] veth1_vlan: left promiscuous mode [ 1159.829904][ T11] veth0_vlan: left promiscuous mode [ 1159.837952][ T11] veth1_macvtap: left promiscuous mode [ 1159.843441][ T11] veth0_macvtap: left promiscuous mode [ 1159.849304][ T11] veth1_vlan: left promiscuous mode [ 1159.869239][ T11] veth0_vlan: left promiscuous mode [ 1159.876792][ T11] veth1_macvtap: left promiscuous mode [ 1159.882298][ T11] veth0_macvtap: left promiscuous mode [ 1159.895448][ T11] veth1_vlan: left promiscuous mode [ 1159.903927][ T11] veth0_vlan: left promiscuous mode [ 1159.920502][ T11] veth1_macvtap: left promiscuous mode [ 1159.926258][ T11] veth0_macvtap: left promiscuous mode [ 1159.938021][ T11] veth1_vlan: left promiscuous mode [ 1159.943487][ T11] veth0_vlan: left promiscuous mode [ 1161.811344][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1161.937300][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1164.493485][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1164.714922][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1167.134838][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1167.276277][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1169.439150][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1169.586007][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1169.797769][ T4610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1169.819230][ T4610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1169.866898][ T4610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1169.888765][ T4610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1169.897695][ T4610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1169.911181][ T4610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1172.015522][ T5233] Bluetooth: hci1: command tx timeout [ 1172.446222][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1172.563369][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1173.991298][ T4610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1174.002528][ T4610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1174.012133][ T4610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1174.021612][ T4610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1174.036963][ T4610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1174.095665][ T4610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1174.102754][ T9802] Bluetooth: hci1: command tx timeout [ 1174.348393][T11648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.511588][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.647418][T11648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.028859][T11653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.057425][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.064576][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.109027][ T4610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1175.139463][ T4610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1175.169823][ T4610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1175.190457][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.197593][ T5586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.246655][ T4610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1175.254399][ T4610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1175.262468][ T4610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1175.323866][T11648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1175.346471][T11648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1175.680191][T11653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.744114][T11648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.920470][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.927643][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.936690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.943794][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.035056][T11653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1176.079218][T11653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.175562][ T4610] Bluetooth: hci1: command tx timeout [ 1176.195188][ T4610] Bluetooth: hci2: command tx timeout [ 1176.639642][T11771] chnl_net:caif_netlink_parms(): no params data found [ 1176.797144][T11764] chnl_net:caif_netlink_parms(): no params data found [ 1176.909968][T11648] veth0_vlan: entered promiscuous mode [ 1176.921328][T11759] chnl_net:caif_netlink_parms(): no params data found [ 1177.066389][T11648] veth1_vlan: entered promiscuous mode [ 1177.457595][ T4610] Bluetooth: hci3: command tx timeout [ 1177.497961][T11764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.505187][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.525624][T11764] bridge_slave_0: entered allmulticast mode [ 1177.533633][T11764] bridge_slave_0: entered promiscuous mode [ 1177.583635][T11771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.601962][T11771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.609299][T11771] bridge_slave_0: entered allmulticast mode [ 1177.617567][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.618793][T11771] bridge_slave_0: entered promiscuous mode [ 1177.623863][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.631791][T11771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.643479][T11771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.650938][T11771] bridge_slave_1: entered allmulticast mode [ 1177.658835][T11771] bridge_slave_1: entered promiscuous mode [ 1177.689635][T11653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.699781][T11764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.719201][T11764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.748569][T11764] bridge_slave_1: entered allmulticast mode [ 1177.777703][T11764] bridge_slave_1: entered promiscuous mode [ 1178.076456][T11648] veth0_macvtap: entered promiscuous mode [ 1178.091586][T11648] veth1_macvtap: entered promiscuous mode [ 1178.273113][T11764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.282108][ T4610] Bluetooth: hci2: command tx timeout [ 1178.290278][ T4610] Bluetooth: hci1: command tx timeout [ 1178.448734][T11771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.461318][T11771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.496283][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.535709][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.571641][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.582351][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.645675][T11648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.671022][T11764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.716916][T11759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.724059][T11759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.732372][T11759] bridge_slave_0: entered allmulticast mode [ 1178.766687][T11759] bridge_slave_0: entered promiscuous mode [ 1178.852039][T11771] team0: Port device team_slave_0 added [ 1178.966536][T11759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.973784][T11759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.005683][T11759] bridge_slave_1: entered allmulticast mode [ 1179.012931][T11759] bridge_slave_1: entered promiscuous mode [ 1179.128288][T11771] team0: Port device team_slave_1 added [ 1179.266588][T11764] team0: Port device team_slave_0 added [ 1179.313842][T11653] veth0_vlan: entered promiscuous mode [ 1179.356213][ T4610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.367489][ T4610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.376148][ T4610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.393154][ T4610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.402418][T11759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.426100][ T4610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1179.429202][T11759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.485936][ T4610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1179.535743][ T5233] Bluetooth: hci3: command tx timeout [ 1179.786972][T11764] team0: Port device team_slave_1 added [ 1179.793341][T11771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.821745][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.854763][T11771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.894588][T11771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.901775][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.955705][T11771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.109228][T11759] team0: Port device team_slave_0 added [ 1180.143490][T11653] veth1_vlan: entered promiscuous mode [ 1180.337794][ T4610] Bluetooth: hci2: command tx timeout [ 1180.547765][T11764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.555590][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.593999][T11764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.611987][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1180.618368][T11764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.622486][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1180.635016][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1180.642252][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.644543][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1180.678808][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1180.707872][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1180.745541][T11764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.759799][T11759] team0: Port device team_slave_1 added [ 1181.141809][T11759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.148901][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.256209][T11759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.419157][T11771] hsr_slave_0: entered promiscuous mode [ 1181.435969][T11771] hsr_slave_1: entered promiscuous mode [ 1181.513207][T11759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.520756][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.559119][T11759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.626658][ T4610] Bluetooth: hci3: command tx timeout [ 1181.626683][ T5233] Bluetooth: hci0: command tx timeout [ 1181.950673][T11764] hsr_slave_0: entered promiscuous mode [ 1181.959398][T11764] hsr_slave_1: entered promiscuous mode [ 1181.969553][T11764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1181.989188][T11764] Cannot create hsr debugfs directory [ 1182.031526][T11759] hsr_slave_0: entered promiscuous mode [ 1182.065814][T11759] hsr_slave_1: entered promiscuous mode [ 1182.077854][T11759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1182.117578][T11759] Cannot create hsr debugfs directory [ 1182.458346][ T5233] Bluetooth: hci2: command tx timeout [ 1182.765479][ T5233] Bluetooth: hci5: command tx timeout [ 1182.942135][T11801] chnl_net:caif_netlink_parms(): no params data found [ 1183.474392][T11804] chnl_net:caif_netlink_parms(): no params data found [ 1183.745484][ T4610] Bluetooth: hci3: command tx timeout [ 1183.745491][ T5233] Bluetooth: hci0: command tx timeout [ 1184.128871][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.137486][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.152569][T11801] bridge_slave_0: entered allmulticast mode [ 1184.176109][T11801] bridge_slave_0: entered promiscuous mode [ 1184.378710][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.405760][T11801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.412971][T11801] bridge_slave_1: entered allmulticast mode [ 1184.480967][T11801] bridge_slave_1: entered promiscuous mode [ 1184.580848][T11804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.595829][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.603014][T11804] bridge_slave_0: entered allmulticast mode [ 1184.633358][T11804] bridge_slave_0: entered promiscuous mode [ 1184.825610][ T4610] Bluetooth: hci5: command tx timeout [ 1184.837082][T11804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.844183][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.875813][T11804] bridge_slave_1: entered allmulticast mode [ 1184.882731][T11804] bridge_slave_1: entered promiscuous mode [ 1184.930424][T11801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.131363][T11801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.183239][T11804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.332672][T11801] team0: Port device team_slave_0 added [ 1185.359294][T11804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.521845][T11801] team0: Port device team_slave_1 added [ 1185.687595][T11801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.694568][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.763221][T11801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.785501][ T4610] Bluetooth: hci0: command tx timeout [ 1185.973314][T11804] team0: Port device team_slave_0 added [ 1186.000212][T11804] team0: Port device team_slave_1 added [ 1186.057542][T11801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.077398][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.135700][T11801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.257283][T11804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.264245][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.307689][T11804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.346873][T11801] hsr_slave_0: entered promiscuous mode [ 1186.360480][T11801] hsr_slave_1: entered promiscuous mode [ 1186.380718][T11801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.391927][T11801] Cannot create hsr debugfs directory [ 1186.720923][T11759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.745119][T11771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1186.760734][T11771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1186.827420][T11804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.834437][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.866475][T11804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.896174][ T4610] Bluetooth: hci5: command tx timeout [ 1186.980208][T11759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.998622][T11771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1187.018483][T11804] hsr_slave_0: entered promiscuous mode [ 1187.024636][T11804] hsr_slave_1: entered promiscuous mode [ 1187.038563][T11804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1187.060598][T11804] Cannot create hsr debugfs directory [ 1187.089382][T11771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1187.194405][T11759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.428020][T11759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.602820][ T11] bridge_slave_1: left allmulticast mode [ 1187.645034][ T11] bridge_slave_1: left promiscuous mode [ 1187.651136][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.698380][ T11] bridge_slave_0: left allmulticast mode [ 1187.717408][ T11] bridge_slave_0: left promiscuous mode [ 1187.756584][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.797561][ T11] bridge_slave_1: left allmulticast mode [ 1187.803261][ T11] bridge_slave_1: left promiscuous mode [ 1187.835529][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.856612][ T4610] Bluetooth: hci0: command tx timeout [ 1187.875382][ T11] bridge_slave_0: left allmulticast mode [ 1187.881086][ T11] bridge_slave_0: left promiscuous mode [ 1187.905588][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.960539][ T11] bridge_slave_1: left allmulticast mode [ 1187.985385][ T11] bridge_slave_1: left promiscuous mode [ 1188.016032][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.031818][ T11] bridge_slave_0: left allmulticast mode [ 1188.045563][ T11] bridge_slave_0: left promiscuous mode [ 1188.056710][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.098583][ T11] bridge_slave_1: left allmulticast mode [ 1188.104291][ T11] bridge_slave_1: left promiscuous mode [ 1188.132843][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.181553][ T11] bridge_slave_0: left allmulticast mode [ 1188.205538][ T11] bridge_slave_0: left promiscuous mode [ 1188.215664][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.335170][ T11] bridge_slave_1: left allmulticast mode [ 1188.342693][ T11] bridge_slave_1: left promiscuous mode [ 1188.348659][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.432831][ T11] bridge_slave_0: left allmulticast mode [ 1188.438651][ T11] bridge_slave_0: left promiscuous mode [ 1188.452276][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.836205][T11768] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1188.975518][ T4610] Bluetooth: hci5: command tx timeout [ 1189.865640][ T9888] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1191.646019][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.685939][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.697305][ T11] bond0 (unregistering): Released all slaves [ 1192.145143][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.202454][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.212963][ T11] bond0 (unregistering): Released all slaves [ 1192.625796][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.682440][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.723342][ T11] bond0 (unregistering): Released all slaves [ 1192.960653][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.978083][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.989852][ T11] bond0 (unregistering): Released all slaves [ 1193.279062][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.299578][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.316981][ T11] bond0 (unregistering): Released all slaves [ 1193.918199][T11771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.000859][T11764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1194.038542][T11764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1194.158893][T11771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.174591][T11764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1194.288733][ T11] hsr_slave_0: left promiscuous mode [ 1194.335501][ T11] hsr_slave_1: left promiscuous mode [ 1194.341920][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.406265][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.446506][ T11] hsr_slave_0: left promiscuous mode [ 1194.475572][ T11] hsr_slave_1: left promiscuous mode [ 1194.517943][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.534890][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.556104][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.755470][ T11] hsr_slave_0: left promiscuous mode [ 1194.812278][ T11] hsr_slave_1: left promiscuous mode [ 1194.832455][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.852888][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.955495][ T11] hsr_slave_0: left promiscuous mode [ 1194.965610][ T11] hsr_slave_1: left promiscuous mode [ 1194.975827][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.985484][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.057099][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.064595][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.102720][ T11] hsr_slave_0: left promiscuous mode [ 1195.116250][ T11] hsr_slave_1: left promiscuous mode [ 1195.122325][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.130502][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.245066][ T11] veth1_vlan: left promiscuous mode [ 1195.250532][ T11] veth0_vlan: left promiscuous mode [ 1195.267849][ T11] veth1_macvtap: left promiscuous mode [ 1195.273415][ T11] veth0_macvtap: left promiscuous mode [ 1195.279106][ T11] veth1_vlan: left promiscuous mode [ 1195.285642][ T11] veth0_vlan: left promiscuous mode [ 1195.291805][ T11] veth1_macvtap: left promiscuous mode [ 1195.300128][ T11] veth0_macvtap: left promiscuous mode [ 1195.315514][ T11] veth1_vlan: left promiscuous mode [ 1195.320850][ T11] veth0_vlan: left promiscuous mode [ 1196.664365][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1196.772934][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1199.456938][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1199.553970][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1201.642404][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1201.737069][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1203.880031][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1204.024885][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1205.727477][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1205.865958][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1206.254217][T11764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1206.357592][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.364727][ T5292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.586344][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.593422][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.875560][T11759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1206.908747][T11759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1207.081026][T11764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.116567][T11764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.163442][T11759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1207.280225][T11759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1207.414257][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.421460][ T5292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.469406][T11771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.486602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.493897][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.617451][T11759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.776298][T11759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.833080][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.840215][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.137339][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.144468][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.254851][T11764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.554335][T11771] veth0_vlan: entered promiscuous mode [ 1208.564191][T11771] veth1_vlan: entered promiscuous mode [ 1208.810234][T11771] veth0_macvtap: entered promiscuous mode [ 1208.824496][T11771] veth1_macvtap: entered promiscuous mode [ 1208.832725][T11764] veth0_vlan: entered promiscuous mode [ 1208.902498][T11764] veth1_vlan: entered promiscuous mode [ 1208.940736][T11764] veth0_macvtap: entered promiscuous mode [ 1208.949902][T11764] veth1_macvtap: entered promiscuous mode [ 1209.022743][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.033707][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.054613][T11771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.104083][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.129910][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.140432][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.151024][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.176831][T11764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.190712][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.211886][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.223349][T11771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.269701][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.283330][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.335526][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.365553][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.380528][T11764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.390828][T11764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.399776][T11764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.408573][T11764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.417373][T11764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.436738][T11804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1209.514845][T11771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.525018][T11771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.538943][T11771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.548413][T11771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.567461][T11804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1209.578128][T11804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1209.658148][T11759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.676974][T11804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1210.010393][T11801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1210.049530][T11801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1210.093369][ T5577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.095560][T11801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1210.137745][ T5577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.187077][T11801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1210.292455][ T5577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.325379][ T5577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.517364][ T5586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.525477][ T5586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.597661][T11759] veth0_vlan: entered promiscuous mode [ 1210.653127][T11804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.677471][T11804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.771586][T11759] veth1_vlan: entered promiscuous mode [ 1210.788673][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.795865][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.838134][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.845242][ T5586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.981310][ T5577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.987832][T11804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1211.030057][ T5577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.100900][T11759] veth0_macvtap: entered promiscuous mode [ 1211.133410][T11759] veth1_macvtap: entered promiscuous mode [ 1211.181522][T11801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.222735][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.254291][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.311853][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.343110][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.366779][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.412126][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.447165][T11759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.515496][T11912] netlink: 'syz.1.858': attribute type 11 has an invalid length. [ 1211.593876][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.618119][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.648762][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.668240][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.710218][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.767030][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.847374][T11759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.887438][T11801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.918502][T11759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.952862][T11759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.980317][T11759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.014809][T11759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.072583][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.079765][ T5292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.151574][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.158752][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.325181][T11801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1212.362028][T11801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1212.483068][T11804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.675972][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.713322][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.007425][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.053799][T11804] veth0_vlan: entered promiscuous mode [ 1213.062368][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.203125][T11804] veth1_vlan: entered promiscuous mode [ 1213.247399][T11804] veth0_macvtap: entered promiscuous mode [ 1213.284595][T11804] veth1_macvtap: entered promiscuous mode [ 1213.665628][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.676153][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.748557][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.759266][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.769193][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.779976][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.790044][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.800670][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.871262][T11948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1214.652181][T11804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.768620][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.785566][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.820773][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.878669][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.025526][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.039003][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.045608][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1216.105691][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.145106][T11804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.201899][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.284269][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1216.347606][T11804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.347639][T11804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.347661][T11804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.347683][T11804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.419165][T11801] veth0_vlan: entered promiscuous mode [ 1216.732965][T11801] veth1_vlan: entered promiscuous mode [ 1216.861383][T11801] veth0_macvtap: entered promiscuous mode [ 1216.938655][T11801] veth1_macvtap: entered promiscuous mode [ 1216.955621][ T5577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.976715][ T5577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.230316][T11979] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.866'. [ 1217.253044][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.305653][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.315646][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.356165][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.396674][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.455738][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.497456][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.686079][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.571006][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.596430][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.622043][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.649736][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.680959][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.698348][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.708885][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.718750][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.735524][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.745547][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.765475][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.775412][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.786512][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.797757][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.401913][ T5577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.417653][ T5577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.577437][T11801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.587860][T11801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.601688][T11801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.659168][T11801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.750953][T12005] netlink: 'syz.1.869': attribute type 11 has an invalid length. [ 1223.223847][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.873'. [ 1223.306708][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.320822][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.472597][ T4610] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1223.474960][ T5292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.493810][ T5292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.416923][T12055] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1226.521108][ T29] audit: type=1400 audit(1727932194.885:563): avc: denied { mount } for pid=12040 comm="syz.0.874" name="/" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1226.571275][T12067] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 1226.615748][ T29] audit: type=1400 audit(1727932194.915:564): avc: denied { read } for pid=12040 comm="syz.0.874" name="/" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1227.845649][ T29] audit: type=1400 audit(1727932194.915:565): avc: denied { open } for pid=12040 comm="syz.0.874" path="/" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1228.116503][T12081] No control pipe specified [ 1229.205476][ T29] audit: type=1400 audit(1727932197.635:566): avc: denied { unmount } for pid=11771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1229.391495][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1229.463636][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1229.525844][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1229.549710][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1229.576293][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1229.583713][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1230.587832][T12094] chnl_net:caif_netlink_parms(): no params data found [ 1231.065802][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.120844][T12094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.193162][T12094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.241220][T12094] bridge_slave_0: entered allmulticast mode [ 1231.280205][T12094] bridge_slave_0: entered promiscuous mode [ 1231.429248][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.520581][T12094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.559842][T12094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.589754][T12094] bridge_slave_1: entered allmulticast mode [ 1231.606281][T12094] bridge_slave_1: entered promiscuous mode [ 1231.625541][ T4610] Bluetooth: hci6: command tx timeout [ 1232.483609][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.608981][T12094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.654027][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.674859][T12094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.748650][T12094] team0: Port device team_slave_0 added [ 1232.774458][T12094] team0: Port device team_slave_1 added [ 1232.872178][T12094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.888907][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.955738][T12094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.102811][T12094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.287984][T12123] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1233.365793][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.727172][T12094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.760203][ T4610] Bluetooth: hci6: command tx timeout [ 1234.341207][ T12] bridge_slave_1: left allmulticast mode [ 1234.347110][ T12] bridge_slave_1: left promiscuous mode [ 1234.352863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.407425][ T12] bridge_slave_0: left allmulticast mode [ 1234.408835][ T29] audit: type=1326 audit(1727932202.885:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.0.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe41a57dff9 code=0x0 [ 1234.413097][ T12] bridge_slave_0: left promiscuous mode [ 1234.523215][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.774087][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1235.833268][ T4610] Bluetooth: hci6: command tx timeout [ 1236.649933][T12144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1236.770134][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.861758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.878354][ T12] bond0 (unregistering): Released all slaves [ 1237.039035][T12094] hsr_slave_0: entered promiscuous mode [ 1237.053545][T12094] hsr_slave_1: entered promiscuous mode [ 1237.099130][T12094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.127884][T12094] Cannot create hsr debugfs directory [ 1237.974599][ T4610] Bluetooth: hci6: command tx timeout [ 1239.066595][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.072993][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.662802][T12173] No control pipe specified [ 1240.018965][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1240.481668][ T12] hsr_slave_0: left promiscuous mode [ 1240.790994][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1240.827881][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1241.082488][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1241.095010][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1241.104500][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1241.745478][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.777410][ T12] hsr_slave_1: left promiscuous mode [ 1241.804724][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.815800][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.957577][ T29] audit: type=1326 audit(1727932210.435:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a90f7dff9 code=0x0 [ 1241.959117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.098783][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.566608][ T12] veth1_macvtap: left promiscuous mode [ 1242.574094][ T12] veth0_macvtap: left promiscuous mode [ 1242.581001][ T12] veth1_vlan: left promiscuous mode [ 1242.587253][ T12] veth0_vlan: left promiscuous mode [ 1243.577078][T12202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1244.705456][ T4610] Bluetooth: hci2: command tx timeout [ 1244.806149][T12212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1246.261449][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1246.746929][ T4610] Bluetooth: hci2: command tx timeout [ 1248.114983][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1248.226807][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1248.815472][ T4610] Bluetooth: hci2: command tx timeout [ 1249.519192][T12230] netlink: 'syz.0.909': attribute type 39 has an invalid length. [ 1249.540396][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 1249.566118][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.573407][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.466900][ T4610] Bluetooth: hci2: command tx timeout [ 1254.251141][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1254.274716][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1254.287352][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1254.296452][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1254.304224][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1254.311729][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1254.691536][T12178] chnl_net:caif_netlink_parms(): no params data found [ 1254.697855][T12262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1255.779800][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.787361][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.794537][T12178] bridge_slave_0: entered allmulticast mode [ 1255.801447][T12178] bridge_slave_0: entered promiscuous mode [ 1255.808955][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.816330][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.824054][T12178] bridge_slave_1: entered allmulticast mode [ 1255.832262][T12178] bridge_slave_1: entered promiscuous mode [ 1255.904827][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.925975][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.067820][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.169754][T12094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1256.210160][T12250] chnl_net:caif_netlink_parms(): no params data found [ 1256.306871][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.345496][ T4610] Bluetooth: hci7: command tx timeout [ 1256.384032][T12178] team0: Port device team_slave_0 added [ 1256.406614][T12178] team0: Port device team_slave_1 added [ 1256.450651][T12094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1256.549447][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.617347][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.631736][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.684522][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.712569][T12094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1256.776887][T12094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1256.831321][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.851343][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.858672][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.886866][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.022590][T12250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.032913][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.043996][T12250] bridge_slave_0: entered allmulticast mode [ 1257.055236][T12250] bridge_slave_0: entered promiscuous mode [ 1257.065198][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.075664][T12250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.082844][T12250] bridge_slave_1: entered allmulticast mode [ 1257.090047][T12250] bridge_slave_1: entered promiscuous mode [ 1257.110023][T12250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.121234][T12250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.144635][T12250] team0: Port device team_slave_0 added [ 1257.153629][T12250] team0: Port device team_slave_1 added [ 1257.171228][T12250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.249228][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.295632][T12250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.308062][T12250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.315030][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.341200][T12250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.777457][T12178] hsr_slave_0: entered promiscuous mode [ 1257.784507][T12178] hsr_slave_1: entered promiscuous mode [ 1257.796441][T12178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1257.812121][T12178] Cannot create hsr debugfs directory [ 1257.925417][ T51] bridge_slave_1: left allmulticast mode [ 1257.931552][ T51] bridge_slave_1: left promiscuous mode [ 1257.938256][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.099843][ T51] bridge_slave_0: left allmulticast mode [ 1258.200946][ T51] bridge_slave_0: left promiscuous mode [ 1258.231829][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.417334][ T4610] Bluetooth: hci7: command tx timeout [ 1259.313462][T12300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1260.500153][ T4610] Bluetooth: hci7: command tx timeout [ 1260.837132][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.874123][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.008172][ T51] bond0 (unregistering): Released all slaves [ 1261.316457][T12250] hsr_slave_0: entered promiscuous mode [ 1261.335974][T12250] hsr_slave_1: entered promiscuous mode [ 1261.378928][T12250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.406225][T12250] Cannot create hsr debugfs directory [ 1262.109395][T12094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.178740][ T51] hsr_slave_0: left promiscuous mode [ 1262.199790][T12336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1262.216013][ T51] hsr_slave_1: left promiscuous mode [ 1262.348973][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.361535][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.450792][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.470542][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.522444][ T51] veth1_macvtap: left promiscuous mode [ 1262.551260][ T51] veth0_macvtap: left promiscuous mode [ 1262.565746][ T51] veth1_vlan: left promiscuous mode [ 1262.571009][ T51] veth0_vlan: left promiscuous mode [ 1262.595663][ T4610] Bluetooth: hci7: command tx timeout [ 1264.824077][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1264.911080][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1266.322641][T12094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.367713][T12354] netlink: 'syz.3.920': attribute type 11 has an invalid length. [ 1266.427180][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.434273][T10700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.601270][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.608576][T10700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.268000][T12094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1267.480966][T12363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1267.938928][T12178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.360987][T12178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.519072][T12178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.569125][T12384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1268.649826][T12094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.831638][T12178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.083212][T12094] veth0_vlan: entered promiscuous mode [ 1269.257094][T12178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1269.353770][T12094] veth1_vlan: entered promiscuous mode [ 1269.410005][T12178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1269.465875][T12178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1269.537533][T12178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1269.713435][T12094] veth0_macvtap: entered promiscuous mode [ 1269.765088][T12250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1269.886395][T12094] veth1_macvtap: entered promiscuous mode [ 1269.938039][T12250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1269.986552][T12250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1270.027851][T12250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1270.119100][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.179804][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.235509][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.311285][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.371897][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.382834][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.445737][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.462193][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.518149][T12094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.566630][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.748484][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.775428][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.786859][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.796852][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.807330][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.817401][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.828067][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.789922][T12094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.229050][T12094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.285415][T12094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.294188][T12094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.315608][T12094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.431166][T12178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.451669][T12178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.559317][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.566483][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.582730][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.589846][ T5586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.985493][ T29] audit: type=1400 audit(1727932241.585:569): avc: denied { write } for pid=12434 comm="syz.0.931" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1274.037091][T12250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.084763][T10700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.140795][T10700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.175100][ T5586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.190079][T12250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.222011][ T5586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.263799][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.270929][T10700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.391728][T12250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1274.417420][T12250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1274.519528][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.526665][T10700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.123580][T12178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.373553][T12250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.745249][T12178] veth0_vlan: entered promiscuous mode [ 1276.948390][T12178] veth1_vlan: entered promiscuous mode [ 1277.149860][T12178] veth0_macvtap: entered promiscuous mode [ 1277.201397][T12178] veth1_macvtap: entered promiscuous mode [ 1278.904161][T12250] veth0_vlan: entered promiscuous mode [ 1279.039937][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.064887][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.264158][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.099182][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.222991][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.293672][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.324048][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.346197][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.359932][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.371591][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.411717][T12178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.507399][T12485] netlink: 'syz.3.937': attribute type 11 has an invalid length. [ 1280.608992][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.709064][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.811906][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.866576][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.885659][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.923527][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.993977][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.022413][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.082890][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.123916][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.205175][T12178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.247094][T12250] veth1_vlan: entered promiscuous mode [ 1281.430779][T12178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.470234][T12178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.480328][T12178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.500391][T12178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.654551][T12250] veth0_macvtap: entered promiscuous mode [ 1281.719501][T12250] veth1_macvtap: entered promiscuous mode [ 1281.819283][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.858342][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.889047][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.916568][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.953653][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.980146][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.004606][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.031488][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.061086][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.088969][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.113749][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.144691][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.177163][T12250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.221722][T12490] netlink: 'syz.1.939': attribute type 11 has an invalid length. [ 1282.247546][ T5586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.300087][ T5586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.337138][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.389865][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.429758][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.455479][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.486692][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.509754][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.535706][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.565442][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.596822][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.615425][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.640384][T12250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.671882][T12250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.712679][T12250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.788893][T12250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.821980][T12250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.848990][T12250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.870650][T12250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.903851][T10700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.943949][T10700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.065245][T10700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.101323][T10700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.148623][ T5585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.172431][ T5585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.419139][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1284.492401][T12510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.840815][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1284.879579][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1284.896843][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1284.913878][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1284.921609][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1284.930154][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1285.328799][T12518] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1285.762138][T12524] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1287.080072][ T5233] Bluetooth: hci1: command tx timeout [ 1287.540105][T12537] Cannot find set identified by id 0 to match [ 1289.335933][T12541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1289.365715][ T4610] Bluetooth: hci1: command tx timeout [ 1290.652085][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.026872][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.375489][ T4610] Bluetooth: hci1: command tx timeout [ 1291.429365][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.560265][T12513] chnl_net:caif_netlink_parms(): no params data found [ 1291.725175][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.168197][T12513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.232124][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.243571][T12513] bridge_slave_0: entered allmulticast mode [ 1292.283186][T12513] bridge_slave_0: entered promiscuous mode [ 1292.383820][ T12] bridge_slave_1: left allmulticast mode [ 1292.421970][ T12] bridge_slave_1: left promiscuous mode [ 1292.461077][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.511556][ T12] bridge_slave_0: left allmulticast mode [ 1292.529597][ T12] bridge_slave_0: left promiscuous mode [ 1292.550044][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.465213][ T4610] Bluetooth: hci1: command tx timeout [ 1294.771549][T12586] input: syz1 as /devices/virtual/input/input13 [ 1294.862156][ T4610] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1294.873326][ T4610] CPU: 0 UID: 0 PID: 4610 Comm: kworker/u9:1 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1294.884213][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1294.894396][ T4610] Workqueue: hci5 hci_rx_work [ 1294.899112][ T4610] Call Trace: [ 1294.902397][ T4610] [ 1294.905342][ T4610] dump_stack_lvl+0x16c/0x1f0 [ 1294.910061][ T4610] sysfs_warn_dup+0x7f/0xa0 [ 1294.914583][ T4610] sysfs_create_dir_ns+0x24d/0x2b0 [ 1294.919710][ T4610] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1294.925365][ T4610] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1294.930816][ T4610] ? kobject_add_internal+0x12d/0x990 [ 1294.936221][ T4610] ? do_raw_spin_unlock+0x172/0x230 [ 1294.941440][ T4610] kobject_add_internal+0x2c8/0x990 [ 1294.946683][ T4610] kobject_add+0x16f/0x240 [ 1294.951124][ T4610] ? __pfx_kobject_add+0x10/0x10 [ 1294.956077][ T4610] ? class_to_subsys+0x3e/0x160 [ 1294.961039][ T4610] ? do_raw_spin_unlock+0x172/0x230 [ 1294.966253][ T4610] ? kobject_put+0xab/0x5a0 [ 1294.970781][ T4610] device_add+0x289/0x1a70 [ 1294.975216][ T4610] ? __pfx_dev_set_name+0x10/0x10 [ 1294.980249][ T4610] ? __pfx_device_add+0x10/0x10 [ 1294.985219][ T4610] ? mgmt_send_event_skb+0x2f2/0x460 [ 1294.990523][ T4610] hci_conn_add_sysfs+0x17e/0x230 [ 1294.995562][ T4610] le_conn_complete_evt+0x1078/0x1d80 [ 1295.000971][ T4610] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1295.006781][ T4610] ? trace_contention_end+0xea/0x140 [ 1295.012167][ T4610] ? __mutex_lock+0x1a6/0x9c0 [ 1295.016879][ T4610] hci_le_conn_complete_evt+0x23c/0x370 [ 1295.022470][ T4610] hci_le_meta_evt+0x2e2/0x5d0 [ 1295.027260][ T4610] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1295.033354][ T4610] hci_event_packet+0x666/0x1180 [ 1295.038308][ T4610] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1295.043623][ T4610] ? __pfx_hci_event_packet+0x10/0x10 [ 1295.049013][ T4610] ? mark_held_locks+0x9f/0xe0 [ 1295.053791][ T4610] ? kcov_remote_start+0x3cf/0x6e0 [ 1295.058914][ T4610] ? lockdep_hardirqs_on+0x7c/0x110 [ 1295.064140][ T4610] hci_rx_work+0x2c6/0x1610 [ 1295.068658][ T4610] ? lock_acquire+0x2f/0xb0 [ 1295.073167][ T4610] ? process_one_work+0x921/0x1ba0 [ 1295.078353][ T4610] process_one_work+0x9c5/0x1ba0 [ 1295.083334][ T4610] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1295.088991][ T4610] ? __pfx_process_one_work+0x10/0x10 [ 1295.094387][ T4610] ? assign_work+0x1a0/0x250 [ 1295.099083][ T4610] worker_thread+0x6c8/0xf00 [ 1295.103700][ T4610] ? __pfx_worker_thread+0x10/0x10 [ 1295.108821][ T4610] kthread+0x2c1/0x3a0 [ 1295.112909][ T4610] ? _raw_spin_unlock_irq+0x23/0x50 [ 1295.118118][ T4610] ? __pfx_kthread+0x10/0x10 [ 1295.122726][ T4610] ret_from_fork+0x45/0x80 [ 1295.127149][ T4610] ? __pfx_kthread+0x10/0x10 [ 1295.131750][ T4610] ret_from_fork_asm+0x1a/0x30 [ 1295.136541][ T4610] [ 1295.139604][ T29] audit: type=1400 audit(1727932263.335:570): avc: denied { listen } for pid=12589 comm="syz.3.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1295.141224][ T4610] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1295.174650][ T4610] Bluetooth: hci5: failed to register connection device [ 1295.803260][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.000310][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.111919][ T12] bond0 (unregistering): Released all slaves [ 1296.166603][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.173778][T12513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.181357][T12513] bridge_slave_1: entered allmulticast mode [ 1296.254245][T12513] bridge_slave_1: entered promiscuous mode [ 1296.370675][T12603] netlink: 'syz.1.963': attribute type 11 has an invalid length. [ 1296.449173][T12513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.479954][T12513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.537057][T12513] team0: Port device team_slave_0 added [ 1298.631786][T12513] team0: Port device team_slave_1 added [ 1299.323427][T12639] Cannot find set identified by id 0 to match [ 1300.161215][T12513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.185756][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.258164][T12513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.356357][T12634] netlink: 'syz.1.968': attribute type 11 has an invalid length. [ 1300.499113][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.506396][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.749457][T12513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.785446][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.851071][T12513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.185040][ T12] hsr_slave_0: left promiscuous mode [ 1301.209159][ T12] hsr_slave_1: left promiscuous mode [ 1301.260506][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.290844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.331994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.405449][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.499725][ T12] veth1_macvtap: left promiscuous mode [ 1301.565066][ T12] veth0_macvtap: left promiscuous mode [ 1301.570923][ T12] veth1_vlan: left promiscuous mode [ 1301.577871][ T12] veth0_vlan: left promiscuous mode [ 1301.855857][ T9802] Bluetooth: hci5: command 0x0406 tx timeout [ 1302.742576][ T4610] Bluetooth: hci0: command 0x0406 tx timeout [ 1303.688523][T12668] Cannot find set identified by id 0 to match [ 1306.013570][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1306.117876][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1307.262403][T12673] netlink: 'syz.1.976': attribute type 39 has an invalid length. [ 1307.271982][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 1307.330021][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.337387][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.493322][T12681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1307.583886][T12513] hsr_slave_0: entered promiscuous mode [ 1307.755940][ T4610] Bluetooth: hci5: command 0x0406 tx timeout [ 1307.809827][T12513] hsr_slave_1: entered promiscuous mode [ 1310.163317][T12683] netlink: 'syz.3.980': attribute type 11 has an invalid length. [ 1312.454304][ T4610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1312.472688][ T4610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1312.500399][ T4610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1312.509808][ T4610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1312.521215][ T4610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1312.528922][ T4610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1312.699462][T12718] netlink: 'syz.3.985': attribute type 11 has an invalid length. [ 1313.381127][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.725274][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.956698][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.086754][T12513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1314.114114][T12513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1314.578418][ T4610] Bluetooth: hci3: command tx timeout [ 1315.013854][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.128527][T12513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1315.179753][T12513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1315.268499][T12752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1315.840858][T12732] chnl_net:caif_netlink_parms(): no params data found [ 1316.527700][ T12] bridge_slave_1: left allmulticast mode [ 1316.623948][ T12] bridge_slave_1: left promiscuous mode [ 1316.782948][ T4610] Bluetooth: hci3: command tx timeout [ 1316.795662][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.190400][ T12] bridge_slave_0: left allmulticast mode [ 1317.197747][ T12] bridge_slave_0: left promiscuous mode [ 1317.238070][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.480706][T12791] Cannot find set identified by id 0 to match [ 1318.815419][ T4610] Bluetooth: hci3: command tx timeout [ 1320.896964][ T4610] Bluetooth: hci3: command tx timeout [ 1321.448621][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.515968][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.628711][ T12] bond0 (unregistering): Released all slaves [ 1321.772962][T12781] netlink: 'syz.1.994': attribute type 11 has an invalid length. [ 1322.006335][T12827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1323.206883][T12513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.390276][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.409789][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.495580][T12732] bridge_slave_0: entered allmulticast mode [ 1323.535886][T12732] bridge_slave_0: entered promiscuous mode [ 1323.586895][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.621390][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.672676][T12732] bridge_slave_1: entered allmulticast mode [ 1323.741050][T12732] bridge_slave_1: entered promiscuous mode [ 1323.800613][ T12] hsr_slave_0: left promiscuous mode [ 1323.833422][ T12] hsr_slave_1: left promiscuous mode [ 1323.866327][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.894914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.969967][T12844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.056302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.063933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.303388][ T12] veth1_macvtap: left promiscuous mode [ 1324.332376][ T12] veth0_macvtap: left promiscuous mode [ 1324.352927][ T12] veth1_vlan: left promiscuous mode [ 1324.388546][ T12] veth0_vlan: left promiscuous mode [ 1325.380928][ T4610] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 1326.155771][T12873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1006'. [ 1327.124610][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1327.359916][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1328.983775][T12862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1004'. [ 1329.060516][T12875] netlink: 'syz.2.1007': attribute type 39 has an invalid length. [ 1329.068537][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 1329.099544][T12875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.108410][T12875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.175761][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.268890][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.362342][T12513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.867948][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.875087][ T5292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.927247][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.934370][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.007601][T12732] team0: Port device team_slave_0 added [ 1330.166957][T12732] team0: Port device team_slave_1 added [ 1330.582481][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.590171][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.462981][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.486118][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.494588][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.520698][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.924474][T12732] hsr_slave_0: entered promiscuous mode [ 1331.958593][T12732] hsr_slave_1: entered promiscuous mode [ 1331.998431][T12732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.015219][T12732] Cannot create hsr debugfs directory [ 1332.063235][T12513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.648089][T12931] netlink: 'syz.1.1016': attribute type 39 has an invalid length. [ 1332.685145][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 1332.742650][T12934] netlink: 'syz.2.1015': attribute type 11 has an invalid length. [ 1332.765310][T12513] veth0_vlan: entered promiscuous mode [ 1333.928600][T12513] veth1_vlan: entered promiscuous mode [ 1334.506985][T12513] veth0_macvtap: entered promiscuous mode [ 1334.514941][T12513] veth1_macvtap: entered promiscuous mode [ 1338.141204][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.185780][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.201297][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.245407][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.287854][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.326903][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.369459][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.409703][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.444194][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.475084][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.498662][T12513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.854257][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.909765][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.951101][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.989607][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.030507][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.065525][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.112093][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.157249][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.185495][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.225430][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.269706][T12513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.316950][T12513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.359614][T12513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.385400][T12513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.394105][T12513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.804733][ T5577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.839452][ T5577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.941541][T12732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1340.980231][T12732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1341.028920][T12969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1341.068015][ T8332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.079786][T12732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1341.098892][ T8332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.158873][T12732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1341.372455][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.500748][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.540276][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.547397][ T5577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.664429][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.671552][ T5577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.086476][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1342.149510][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1342.163716][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1342.172269][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1342.188141][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1342.262922][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1342.596896][ T29] audit: type=1326 audit(1727932310.975:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.0.1025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4412b7dff9 code=0x0 [ 1342.629775][ T4610] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1342.642283][ T4610] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1342.659204][ T4610] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1342.673357][ T4610] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1342.682565][ T4610] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1342.693315][ T4610] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1343.151978][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.345811][T12986] chnl_net:caif_netlink_parms(): no params data found [ 1343.582515][T13000] chnl_net:caif_netlink_parms(): no params data found [ 1343.861482][T12986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.887099][T12986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.894341][T12986] bridge_slave_0: entered allmulticast mode [ 1344.156036][T12986] bridge_slave_0: entered promiscuous mode [ 1344.201121][T12986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.209179][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.227859][T12986] bridge_slave_1: entered allmulticast mode [ 1344.297958][T12986] bridge_slave_1: entered promiscuous mode [ 1344.501504][ T5233] Bluetooth: hci7: command tx timeout [ 1344.618615][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.673416][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.692884][T13000] bridge_slave_0: entered allmulticast mode [ 1344.712953][T13000] bridge_slave_0: entered promiscuous mode [ 1344.741902][T12986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.815652][ T5233] Bluetooth: hci8: command tx timeout [ 1345.152623][T12732] veth0_vlan: entered promiscuous mode [ 1345.197845][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.236049][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.243267][T13000] bridge_slave_1: entered allmulticast mode [ 1345.311916][T13000] bridge_slave_1: entered promiscuous mode [ 1345.388760][T12986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.481378][T13048] netlink: 'syz.0.1029': attribute type 11 has an invalid length. [ 1345.734023][ T8332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.873594][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.968456][T12986] team0: Port device team_slave_0 added [ 1346.037560][ T8332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.063879][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.177416][T12986] team0: Port device team_slave_1 added [ 1346.184496][T12732] veth1_vlan: entered promiscuous mode [ 1346.312299][ T8332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.463369][T13000] team0: Port device team_slave_0 added [ 1346.501197][T13000] team0: Port device team_slave_1 added [ 1346.579717][ T5233] Bluetooth: hci7: command tx timeout [ 1346.640823][ T8332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.694645][T12986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.725423][T12986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.762476][T12986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.788591][T12986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.801778][T12986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.848983][T12986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.901090][ T5233] Bluetooth: hci8: command tx timeout [ 1348.655621][ T5233] Bluetooth: hci7: command tx timeout [ 1348.975574][ T5233] Bluetooth: hci8: command tx timeout [ 1350.735587][ T5233] Bluetooth: hci7: command tx timeout [ 1351.056102][ T5233] Bluetooth: hci8: command tx timeout [ 1353.779147][ T9802] Bluetooth: hci6: command 0x0406 tx timeout [ 1354.321716][T13067] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1354.331871][T13067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1354.343780][T13067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1354.353805][T13067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1354.361306][T13067] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1354.368824][T13067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1354.790960][T13073] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1354.800226][T13073] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1354.808725][T13073] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1354.818731][T13073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1354.826924][T13073] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1354.836467][T13073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1361.937788][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.944080][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.255574][T13073] Bluetooth: hci5: command tx timeout [ 1362.261752][T13073] Bluetooth: hci2: command tx timeout [ 1364.335510][T13073] Bluetooth: hci2: command tx timeout [ 1364.341027][T13073] Bluetooth: hci5: command tx timeout [ 1364.458631][ T8332] bridge_slave_1: left allmulticast mode [ 1364.464289][ T8332] bridge_slave_1: left promiscuous mode [ 1364.471588][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.520034][ T8332] bridge_slave_0: left allmulticast mode [ 1364.525927][ T8332] bridge_slave_0: left promiscuous mode [ 1364.531584][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.627978][ T8332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.664187][ T8332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.687284][ T8332] bond0 (unregistering): Released all slaves [ 1365.734149][T12732] veth0_macvtap: entered promiscuous mode [ 1365.849443][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.856550][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.933218][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.979087][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.002991][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.071308][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.168184][T12732] veth1_macvtap: entered promiscuous mode [ 1366.323034][T12986] hsr_slave_0: entered promiscuous mode [ 1366.343587][T12986] hsr_slave_1: entered promiscuous mode [ 1366.356200][T12986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.363810][T12986] Cannot create hsr debugfs directory [ 1366.415900][T13073] Bluetooth: hci5: command tx timeout [ 1366.421318][T13073] Bluetooth: hci2: command tx timeout [ 1366.720826][T13000] hsr_slave_0: entered promiscuous mode [ 1366.727190][T13000] hsr_slave_1: entered promiscuous mode [ 1366.746497][T13000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.754082][T13000] Cannot create hsr debugfs directory [ 1366.780974][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.805454][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.815286][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.855372][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.865196][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.910723][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.923920][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.953257][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.981432][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.010993][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.035443][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.070761][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.101755][T12732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.221142][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.261327][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.285379][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.315425][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.325257][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.365645][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.411251][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.451388][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.492266][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.535684][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.561826][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.595431][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.639003][T12732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.733765][T12732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.744233][T12732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.753047][T12732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.761835][T12732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.036170][ T8332] hsr_slave_0: left promiscuous mode [ 1368.059942][ T8332] hsr_slave_1: left promiscuous mode [ 1368.106258][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1368.113724][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.167314][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1368.174751][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.262359][ T8332] veth1_macvtap: left promiscuous mode [ 1368.336281][ T8332] veth0_macvtap: left promiscuous mode [ 1368.341844][ T8332] veth1_vlan: left promiscuous mode [ 1368.389715][ T8332] veth0_vlan: left promiscuous mode [ 1368.495899][T13073] Bluetooth: hci2: command tx timeout [ 1368.501312][T13073] Bluetooth: hci5: command tx timeout [ 1370.250306][ T8332] team0 (unregistering): Port device team_slave_1 removed [ 1370.425518][ T8332] team0 (unregistering): Port device team_slave_0 removed [ 1371.812149][T13066] chnl_net:caif_netlink_parms(): no params data found [ 1371.907432][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.915805][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.946407][T13072] chnl_net:caif_netlink_parms(): no params data found [ 1372.703501][ T4610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1372.741365][ T4610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1372.755783][ T4610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1372.792848][ T4610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1372.803836][ T4610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1372.811304][ T4610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1373.437289][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.444515][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.452087][T13072] bridge_slave_0: entered allmulticast mode [ 1373.478405][T13072] bridge_slave_0: entered promiscuous mode [ 1373.534570][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.546727][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.553991][T13072] bridge_slave_1: entered allmulticast mode [ 1373.561334][T13072] bridge_slave_1: entered promiscuous mode [ 1373.696622][T13066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.703760][T13066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.731486][T13066] bridge_slave_0: entered allmulticast mode [ 1373.746273][T13066] bridge_slave_0: entered promiscuous mode [ 1373.819646][T13072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.833119][T13066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.847853][T13066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.855176][T13066] bridge_slave_1: entered allmulticast mode [ 1373.876512][T13066] bridge_slave_1: entered promiscuous mode [ 1374.113493][ T8332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.158922][T13072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.569008][ T8332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.635737][T13066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.809891][ T8332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.852473][T12986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1374.907491][T13066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.941996][T13072] team0: Port device team_slave_0 added [ 1375.106587][T13073] Bluetooth: hci1: command tx timeout [ 1375.118954][T13000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.380930][ T8332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.582995][T12986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1375.658327][T13066] team0: Port device team_slave_0 added [ 1375.717226][T13072] team0: Port device team_slave_1 added [ 1375.741242][T13000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.824758][T12986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1376.037800][T13066] team0: Port device team_slave_1 added [ 1376.075865][T12986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1376.175874][T13000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.216565][T13072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.223545][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.255730][T13072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.270269][T13072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.291620][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.336074][T13072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.408800][T13066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.425451][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.455694][T13066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.507233][T12986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.521296][T13114] chnl_net:caif_netlink_parms(): no params data found [ 1376.552341][T13000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.615863][T13066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.622818][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.685070][T13066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.963789][T12986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.117548][ T8332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.136423][T13073] Bluetooth: hci1: command tx timeout [ 1377.257266][T13072] hsr_slave_0: entered promiscuous mode [ 1377.289571][T13072] hsr_slave_1: entered promiscuous mode [ 1377.345561][T13072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1377.353163][T13072] Cannot create hsr debugfs directory [ 1377.400231][T13066] hsr_slave_0: entered promiscuous mode [ 1377.407016][T13066] hsr_slave_1: entered promiscuous mode [ 1377.416269][T13066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1377.425825][T13066] Cannot create hsr debugfs directory [ 1377.588905][ T8332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.988474][ T8332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.099569][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.106930][T10700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.135290][ T8332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.276802][T13114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.283960][T13114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.306190][T13114] bridge_slave_0: entered allmulticast mode [ 1378.313381][T13114] bridge_slave_0: entered promiscuous mode [ 1378.351318][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.358493][T10700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.367425][T13114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.374567][T13114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.406407][T13114] bridge_slave_1: entered allmulticast mode [ 1378.414140][T13114] bridge_slave_1: entered promiscuous mode [ 1378.592424][T12986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1378.603486][T12986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1378.826876][T13000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1378.882029][T13114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.938900][T13114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.985909][T13000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1379.181011][T13000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1379.201084][T12986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.216335][T13073] Bluetooth: hci1: command tx timeout [ 1379.291138][T13114] team0: Port device team_slave_0 added [ 1379.299522][T13114] team0: Port device team_slave_1 added [ 1379.328415][T13000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1379.648027][T13000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.716180][ T8332] bridge_slave_1: left allmulticast mode [ 1379.721871][ T8332] bridge_slave_1: left promiscuous mode [ 1379.729149][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.759835][ T8332] bridge_slave_0: left allmulticast mode [ 1379.766226][ T8332] bridge_slave_0: left promiscuous mode [ 1379.775812][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.796797][ T8332] bridge_slave_1: left allmulticast mode [ 1379.802483][ T8332] bridge_slave_1: left promiscuous mode [ 1379.808337][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.817211][ T8332] bridge_slave_0: left allmulticast mode [ 1379.822890][ T8332] bridge_slave_0: left promiscuous mode [ 1379.830552][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.851075][ T8332] bridge_slave_1: left allmulticast mode [ 1379.859373][ T8332] bridge_slave_1: left promiscuous mode [ 1379.865704][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.877575][ T8332] bridge_slave_0: left allmulticast mode [ 1379.889132][ T8332] bridge_slave_0: left promiscuous mode [ 1379.894786][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.136008][ T30] INFO: task syz.2.881:12085 blocked for more than 143 seconds. [ 1381.143690][ T30] Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1381.155403][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1381.165796][ T30] task:syz.2.881 state:D stack:25120 pid:12085 tgid:12085 ppid:11801 flags:0x00004004 [ 1381.176185][ T30] Call Trace: [ 1381.179489][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1381.182448][ T30] __schedule+0xef5/0x5750 [ 1381.187110][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1381.192459][ T30] ? __pfx___schedule+0x10/0x10 [ 1381.197712][ T30] ? schedule+0x298/0x350 [ 1381.202087][ T30] ? __pfx_lock_release+0x10/0x10 [ 1381.207354][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1381.215663][ T30] ? lock_acquire+0x2f/0xb0 [ 1381.220299][ T30] ? schedule+0x1fd/0x350 [ 1381.224665][ T30] schedule+0xe7/0x350 [ 1381.267575][ T30] schedule_preempt_disabled+0x13/0x30 [ 1381.273118][ T30] __mutex_lock+0x5b8/0x9c0 [ 1381.277926][ T30] ? hugetlb_wp+0x1b4a/0x3320 [ 1381.282637][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1381.295710][T13073] Bluetooth: hci1: command tx timeout [ 1381.316853][ T30] ? hugetlb_wp+0x1b4a/0x3320 [ 1381.325751][ T30] hugetlb_wp+0x1b4a/0x3320 [ 1381.330324][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 1381.335845][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1381.352201][ T30] ? lock_acquire+0x2f/0xb0 [ 1381.357106][ T30] ? hugetlb_fault+0x1141/0x2fa0 [ 1381.363200][ T30] hugetlb_fault+0x2248/0x2fa0 [ 1381.375873][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1381.386366][ T30] handle_mm_fault+0x930/0xaa0 [ 1381.391188][ T30] do_user_addr_fault+0x60d/0x13f0 [ 1381.396714][ T30] exc_page_fault+0x5c/0xc0 [ 1381.401241][ T30] asm_exc_page_fault+0x26/0x30 [ 1381.415908][ T30] RIP: 0033:0x7fa211945a98 [ 1381.420418][ T30] RSP: 002b:00007ffd2d8fe898 EFLAGS: 00010246 [ 1381.427424][ T30] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564 [ 1381.445515][ T30] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640 [ 1381.453545][ T30] RBP: 00007fa211b37a80 R08: 00007fa211800000 R09: 0000000000000001 [ 1381.475465][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000012c369 [ 1381.505549][ T30] R13: 00007ffd2d8fe9a0 R14: 0000000000000032 R15: fffffffffffffffe [ 1381.515715][ T30] [ 1381.518827][ T30] INFO: task syz.2.881:12089 blocked for more than 143 seconds. [ 1381.555581][ T30] Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1381.563364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1381.573195][ T30] task:syz.2.881 state:D stack:25584 pid:12089 tgid:12085 ppid:11801 flags:0x00004006 [ 1381.585472][ T30] Call Trace: [ 1381.588782][ T30] [ 1381.591736][ T30] __schedule+0xef5/0x5750 [ 1381.596262][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1381.605569][ T30] ? __pfx___schedule+0x10/0x10 [ 1381.610475][ T30] ? schedule+0x298/0x350 [ 1381.614842][ T30] ? __pfx_lock_release+0x10/0x10 [ 1381.620005][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1381.625521][ T30] ? lock_acquire+0x2f/0xb0 [ 1381.630058][ T30] ? schedule+0x1fd/0x350 [ 1381.634420][ T30] schedule+0xe7/0x350 [ 1381.638879][ T30] io_schedule+0xbf/0x130 [ 1381.646534][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 1381.655597][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 1381.661115][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1381.667264][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1381.681682][ T30] ? __pfx___might_resched+0x10/0x10 [ 1381.687848][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1381.701537][ T30] ? __vma_reservation_common+0x270/0x740 [ 1381.721424][ T30] __filemap_get_folio+0x6a4/0xaf0 [ 1381.741493][ T30] ? huge_pte_alloc+0x22e/0x3a0 [ 1381.762372][ T30] hugetlb_fault+0x16ff/0x2fa0 [ 1381.768145][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1381.774396][ T30] ? find_vma+0xc0/0x140 [ 1381.795518][ T30] ? __pfx_find_vma+0x10/0x10 [ 1381.800244][ T30] handle_mm_fault+0x930/0xaa0 [ 1381.805091][ T30] do_user_addr_fault+0x7a3/0x13f0 [ 1381.835443][ T30] exc_page_fault+0x5c/0xc0 [ 1381.856996][ T30] asm_exc_page_fault+0x26/0x30 [ 1381.874459][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 1381.995450][ T30] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 1382.079507][ T30] RSP: 0018:ffffc900041e7cf8 EFLAGS: 00050202 [ 1382.085902][ T30] RAX: 0000000000400000 RBX: 0000000000000000 RCX: 0000000020000020 [ 1382.096431][ T30] RDX: 0000000000040000 RSI: ffffffff8218c53f RDI: ffffffff8bd19d40 [ 1382.104466][ T30] RBP: ffffc900041e7ed0 R08: 0000000000000000 R09: fffffbfff20be559 [ 1382.113825][ T30] R10: ffffffff905f2acf R11: 0000000000000000 R12: 0000000000400000 [ 1382.122119][ T30] R13: 0000000000000003 R14: 0000000000000000 R15: ffff88807ac08580 [ 1382.130396][ T30] ? userfaultfd_ioctl+0x1e8f/0x3830 [ 1382.135990][ T30] userfaultfd_ioctl+0x1e9b/0x3830 [ 1382.145548][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1382.151045][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 1382.158057][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 1382.165722][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1382.170997][ T30] ? selinux_file_ioctl+0x180/0x270 [ 1382.176946][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 1382.195461][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1382.200990][ T30] ? __x64_sys_ioctl+0x18f/0x220 [ 1382.215558][ T30] __x64_sys_ioctl+0x18f/0x220 [ 1382.220489][ T30] do_syscall_64+0xcd/0x250 [ 1382.225035][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.231539][ T30] RIP: 0033:0x7fa21197dff9 [ 1382.236265][ T30] RSP: 002b:00007fa2113ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.244695][ T30] RAX: ffffffffffffffda RBX: 00007fa211b36058 RCX: 00007fa21197dff9 [ 1382.260581][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000007 [ 1382.280197][ T30] RBP: 00007fa2119f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1382.296552][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.304579][ T30] R13: 0000000000000000 R14: 00007fa211b36058 R15: 00007ffd2d8fe738 [ 1382.313015][ T30] [ 1382.317215][ T30] [ 1382.317215][ T30] Showing all locks held in the system: [ 1382.325746][ T30] 3 locks held by kworker/u8:0/11: [ 1382.355815][ T30] #0: ffff88814b72b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1382.375544][ T30] #1: ffffc90000107d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1382.395557][ T30] #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 1382.406008][ T30] 1 lock held by khungtaskd/30: [ 1382.410885][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 1382.421803][ T35] kworker/u8:2 (35) used greatest stack depth: 20512 bytes left [ 1382.445980][ T30] 3 locks held by kworker/u8:3/51: [ 1382.451105][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1382.486602][ T30] #1: ffffc90000bc7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1382.525396][ T30] #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1382.534578][ T30] 2 locks held by kworker/u8:5/1068: [ 1382.565413][ T30] 2 locks held by dhcpcd/4887: [ 1382.575784][ T30] #0: ffff8880682366c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x970 [ 1382.635563][ T30] #1: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x18f/0x1f0 [ 1382.644544][ T30] 2 locks held by getty/4971: [ 1382.676974][ T30] #0: ffff888032d320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1382.705465][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 1382.735645][ T30] 2 locks held by kworker/1:5/5308: [ 1382.740892][ T30] 1 lock held by syz.4.387/7138: [ 1382.765568][ T30] 5 locks held by kworker/u8:12/8332: [ 1382.770987][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1382.800813][ T30] #1: ffffc900047efd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1382.815618][ T30] #2: ffffffff8fecb110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 1382.824953][ T30] #3: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xb40 [ 1382.845414][ T30] #4: ffffffff8e1c3cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 1382.862895][ T30] 3 locks held by kworker/0:6/11426: [ 1382.882185][ T30] #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1382.899057][ T30] #1: ffffc9000319fd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1382.955555][ T30] #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1382.995506][ T30] 2 locks held by syz.2.881/12085: [ 1383.015608][ T30] #0: ffff88806c881b68 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x13e/0x980 [ 1383.035529][ T30] #1: ffff888140ada7b8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x1b4a/0x3320 [ 1383.056260][ T30] 3 locks held by syz.2.881/12089: [ 1383.061407][ T30] #0: ffff88807d8c0b18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x35/0x6a0 [ 1383.085426][ T30] #1: ffff888140ada7b8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x307/0x2fa0 [ 1383.125384][ T30] #2: ffff88806a1b88e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_vma_lock_read+0x105/0x140 [ 1383.145386][ T30] 1 lock held by syz-executor/12986: [ 1383.150793][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1383.175517][ T30] 1 lock held by syz-executor/13000: [ 1383.180850][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1383.206903][ T30] 1 lock held by syz-executor/13066: [ 1383.212319][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1383.245411][ T30] 7 locks held by syz-executor/13072: [ 1383.250836][ T30] #0: ffff888032f64420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 1383.285398][ T30] #1: ffff88807b029088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 1383.295254][ T30] #2: ffff8881447550f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 1383.337036][ T30] #3: ffffffff8f47a468 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 1383.355540][ T30] #4: ffff88806b0580e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 1383.376190][ T30] #5: ffff88806b05c250 (&devlink->lock_key#79){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 1383.395524][ T30] #6: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6b0 [ 1383.404501][ T30] 1 lock held by syz-executor/13114: [ 1383.425411][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1383.447567][ T30] [ 1383.449934][ T30] ============================================= [ 1383.449934][ T30] [ 1383.475527][ T30] NMI backtrace for cpu 0 [ 1383.479912][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1383.490535][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1383.500611][ T30] Call Trace: [ 1383.503893][ T30] [ 1383.506815][ T30] dump_stack_lvl+0x116/0x1f0 [ 1383.511507][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1383.516469][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1383.522458][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1383.528459][ T30] watchdog+0xf0c/0x1240 [ 1383.532696][ T30] ? __pfx_watchdog+0x10/0x10 [ 1383.537383][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1383.542576][ T30] ? __kthread_parkme+0x148/0x220 [ 1383.547704][ T30] ? __pfx_watchdog+0x10/0x10 [ 1383.552372][ T30] kthread+0x2c1/0x3a0 [ 1383.556433][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1383.561622][ T30] ? __pfx_kthread+0x10/0x10 [ 1383.566206][ T30] ret_from_fork+0x45/0x80 [ 1383.570613][ T30] ? __pfx_kthread+0x10/0x10 [ 1383.575197][ T30] ret_from_fork_asm+0x1a/0x30 [ 1383.579971][ T30] [ 1383.583579][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1383.589255][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1383.594974][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1383.610035][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1383.620529][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1383.630660][ T30] Call Trace: [ 1383.633925][ T30] [ 1383.636859][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1383.641469][ T30] panic+0x71d/0x800 [ 1383.645378][ T30] ? __pfx_panic+0x10/0x10 [ 1383.649821][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1383.655233][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1383.661210][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1383.666573][ T30] ? watchdog+0xd76/0x1240 [ 1383.670976][ T30] ? watchdog+0xd69/0x1240 [ 1383.675387][ T30] watchdog+0xd87/0x1240 [ 1383.679621][ T30] ? __pfx_watchdog+0x10/0x10 [ 1383.684284][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1383.689492][ T30] ? __kthread_parkme+0x148/0x220 [ 1383.694510][ T30] ? __pfx_watchdog+0x10/0x10 [ 1383.699184][ T30] kthread+0x2c1/0x3a0 [ 1383.703247][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1383.708435][ T30] ? __pfx_kthread+0x10/0x10 [ 1383.713018][ T30] ret_from_fork+0x45/0x80 [ 1383.717423][ T30] ? __pfx_kthread+0x10/0x10 [ 1383.722130][ T30] ret_from_fork_asm+0x1a/0x30 [ 1383.726898][ T30] [ 1383.730046][ T30] Kernel Offset: disabled [ 1383.734364][ T30] Rebooting in 86400 seconds..