last executing test programs: 28m18.745924074s ago: executing program 32 (id=1663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c000080"], 0x250}}, 0x4c000) 25m51.334050177s ago: executing program 33 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 23m35.253811912s ago: executing program 5 (id=2256): r0 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4006) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) 23m33.991849393s ago: executing program 5 (id=2258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchdir(0xffffffffffffffff) unshare(0x20000400) 23m28.43549773s ago: executing program 5 (id=2264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000200)=0x48, 0x4) 23m27.458612943s ago: executing program 5 (id=2267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 23m26.136537584s ago: executing program 5 (id=2271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xc010, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x9d, 0x0, @loopback, 0xa09c}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r4, 0x99d}}, 0x48) 23m24.571985985s ago: executing program 5 (id=2273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchdir(0xffffffffffffffff) unshare(0x20000400) 23m9.377270731s ago: executing program 34 (id=2273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchdir(0xffffffffffffffff) unshare(0x20000400) 5m0.908074957s ago: executing program 2 (id=5009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 4m58.110895367s ago: executing program 2 (id=5030): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000011}) close_range(r0, 0xffffffffffffffff, 0x0) 4m58.110452891s ago: executing program 6 (id=5031): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"e6891a6b3d40616e96c2c1897fa141a9", 0x0, 0x0, {0x7fffffffffffffff, 0x406}, {0xff, 0x2}, 0x100000000000d4c, [0xa, 0x10000, 0x81, 0x6, 0x2, 0x0, 0x3, 0x1, 0x6c68, 0x100, 0x708, 0x9, 0xd06, 0xa6b, 0x4, 0x54e0]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x7f}) 4m57.873112566s ago: executing program 6 (id=5032): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 4m57.787034456s ago: executing program 6 (id=5033): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) rt_sigaction(0x22, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 4m57.683223393s ago: executing program 2 (id=5034): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000300000001000000040008802c0004800500030001000000050003000000000005000300010000000500030001000000050003001300000008000100030000000800020001"], 0x54}}, 0x800) 4m57.596875397s ago: executing program 2 (id=5035): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 4m57.4511859s ago: executing program 2 (id=5036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x4, 0x9, 0x0, 0x1, [@generic]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@gettaction={0x28, 0x32, 0xbd5139864f3acfa7, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) 4m56.148138886s ago: executing program 2 (id=5037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c5fc8d3e63588056401261b11905fabd4af", 0x2c}], 0x2) 4m55.271601729s ago: executing program 6 (id=5039): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffffffff, @private0}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @mcast2, 0x4}], 0x1c) 4m55.172052044s ago: executing program 6 (id=5040): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) 4m55.171709416s ago: executing program 4 (id=5041): r0 = io_uring_setup(0x1d58, &(0x7f0000000340)={0x0, 0x2f19, 0x10, 0x2, 0x10000196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) 4m55.106658957s ago: executing program 6 (id=5042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 4m55.000332697s ago: executing program 4 (id=5044): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000300000001000000040008802c0004800500030001000000050003000000000005000300010000000500030001000000050003001300000008000100030000000800020001"], 0x54}}, 0x800) 4m54.931645315s ago: executing program 4 (id=5045): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 4m54.819977443s ago: executing program 4 (id=5046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x4, 0x9, 0x0, 0x1, [@generic]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@gettaction={0x28, 0x32, 0xbd5139864f3acfa7, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) 4m53.811832388s ago: executing program 4 (id=5048): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x8000e, 0x5) r1 = eventfd2(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000400)={0x8, {{0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x0, 0x5, [{{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}}, {{0xa, 0x4e24, 0x1, @mcast1, 0x9}}, {{0xa, 0x4e24, 0xfffffc00, @mcast1, 0x3191}}, {{0xa, 0x4e20, 0x40, @private1, 0x7}}, {{0xa, 0x4e24, 0x7fffffff, @mcast2, 0xffff2f24}}]}, 0x310) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="004401004d"], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m52.99687813s ago: executing program 4 (id=5049): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='neigh_update\x00', r0, 0x0, 0x9}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4m40.921091245s ago: executing program 35 (id=5037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c5fc8d3e63588056401261b11905fabd4af", 0x2c}], 0x2) 4m39.915040623s ago: executing program 36 (id=5042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 4m37.913512666s ago: executing program 37 (id=5049): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='neigh_update\x00', r0, 0x0, 0x9}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3m47.86218834s ago: executing program 7 (id=5148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 3m46.720133418s ago: executing program 7 (id=5149): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) 3m46.719775525s ago: executing program 7 (id=5150): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x1a1d, &(0x7f0000000540)={0x0, 0x755e, 0x13080, 0x3, 0x2b7, 0x0, r0}, &(0x7f0000000080), 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m46.680198375s ago: executing program 7 (id=5151): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 3m46.640345785s ago: executing program 7 (id=5152): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) semop(0x0, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x10}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 3m44.996463219s ago: executing program 7 (id=5153): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff1, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) 3m29.272652394s ago: executing program 38 (id=5153): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff1, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) 10.372534029s ago: executing program 9 (id=5893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x4f6a, &(0x7f0000000180)={0x0, 0xcc76, 0x8, 0x2, 0x8000}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/195, 0xc3}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffd}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x800}}, './cgroup.cpu/cgroup.procs\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x2d, 0x80000, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001d80)=ANY=[@ANYBLOB="1800000000000000000000000b00000018120000", @ANYBLOB="0000000000000000b70300000000000085161c27c336aceef90000cd5c362ca0213285d30000000000950000000000000023b1ba8aa1cc5cbcf20e557759280494914a64e001608a3b898a61b7ae800f54c5908d57f2688f8ad419932d35f9ad5415aabf0c265b6cce695112da3b6c94050f9e38aa95bc61cf275600a691"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001e80)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b010000000000ae30395e2afe7dee5d8d7386dba400000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') pread64(r5, 0x0, 0x0, 0x4009) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r7}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) write$eventfd(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x2}, 0x18) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001f00)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x8000}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, 0x0, 0x8000000003}}], 0x48}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 3.448471763s ago: executing program 8 (id=5948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7ad04e968e21237e", 0x10}, {0x0}, {0x0}], 0x3}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.044114262s ago: executing program 8 (id=5954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 2.98151884s ago: executing program 8 (id=5955): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400088d0}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) 2.739525589s ago: executing program 8 (id=5958): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.596174353s ago: executing program 0 (id=5959): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000019000100000000000000", @ANYRES64], 0x24}}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.573936336s ago: executing program 3 (id=5960): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='rxrpc_call\x00', r0, 0x0, 0x3fc}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000100100000100000014e200000000000010"], 0x28}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.995567072s ago: executing program 8 (id=5961): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @multicast}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) 1.900088401s ago: executing program 0 (id=5962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.805247928s ago: executing program 3 (id=5963): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.740563058s ago: executing program 9 (id=5964): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) 1.724201705s ago: executing program 1 (id=5965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xb) pipe(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) shutdown(r0, 0x0) 1.641370672s ago: executing program 0 (id=5966): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) 1.641105459s ago: executing program 8 (id=5967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r2, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 1.529556891s ago: executing program 9 (id=5968): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400088d0}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) 1.529127425s ago: executing program 3 (id=5969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x0, 0x9, 0x7ff}}, 0x38) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x4f8, 0x0, 0x38, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4da, 0xc5, "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"}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 1.528733513s ago: executing program 1 (id=5970): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 1.460133379s ago: executing program 0 (id=5971): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 1.408060231s ago: executing program 9 (id=5972): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.406423879s ago: executing program 1 (id=5973): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1.392816991s ago: executing program 3 (id=5974): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 1.340222199s ago: executing program 0 (id=5975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37", 0x1c) 1.251140984s ago: executing program 3 (id=5976): mmap$xdp(&(0x7f0000258000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x4, 0x5, 0x0, 0x4, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40881, 0x64088}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000180)=0xa001) 1.251003947s ago: executing program 1 (id=5977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='user.syz\x00') 1.171334262s ago: executing program 1 (id=5978): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 1.083289571s ago: executing program 9 (id=5979): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 389.667785ms ago: executing program 3 (id=5980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 91.329832ms ago: executing program 9 (id=5981): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 90.093005ms ago: executing program 1 (id=5982): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400088d0}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) 0s ago: executing program 0 (id=5983): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) kernel console output (not intermixed with test programs): j=_ pid=23624 comm="syz.7.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f402fe9f6c9 code=0x7ffc0000 [ 2366.709229][ T37] audit: type=1326 audit(1762704430.403:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23624 comm="syz.7.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402fe9f6c9 code=0x7ffc0000 [ 2366.709795][ T37] audit: type=1326 audit(1762704430.403:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23624 comm="syz.7.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402fe9f6c9 code=0x7ffc0000 [ 2366.710055][ T37] audit: type=1326 audit(1762704430.403:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23624 comm="syz.7.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f402fe9f6c9 code=0x7ffc0000 [ 2366.710734][ T37] audit: type=1326 audit(1762704430.403:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23624 comm="syz.7.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402fe9f6c9 code=0x7ffc0000 [ 2367.313088][T23588] chnl_net:caif_netlink_parms(): no params data found [ 2368.280628][T23581] chnl_net:caif_netlink_parms(): no params data found [ 2369.557286][T23585] chnl_net:caif_netlink_parms(): no params data found [ 2369.973647][T23588] bridge0: port 1(bridge_slave_0) entered blocking state [ 2369.976422][T23588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2369.976657][T23588] bridge_slave_0: entered allmulticast mode [ 2369.979554][T23588] bridge_slave_0: entered promiscuous mode [ 2370.066503][T23588] bridge0: port 2(bridge_slave_1) entered blocking state [ 2370.066638][T23588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.066890][T23588] bridge_slave_1: entered allmulticast mode [ 2370.069678][ T3558] IPVS: stop unused estimator thread 0... [ 2370.074753][T23588] bridge_slave_1: entered promiscuous mode [ 2370.285657][T23581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2370.286212][T23581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2370.286420][T23581] bridge_slave_0: entered allmulticast mode [ 2370.288152][T23581] bridge_slave_0: entered promiscuous mode [ 2370.476970][T23581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2370.477101][T23581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.477369][T23581] bridge_slave_1: entered allmulticast mode [ 2370.480165][T23581] bridge_slave_1: entered promiscuous mode [ 2370.514609][T23588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2370.586411][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586434][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586450][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586465][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586480][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586495][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586513][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586528][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586542][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.586557][ T5897] hid-generic 0004:0800:0000.0011: unknown main item tag 0x0 [ 2370.595636][ T5897] hid-generic 0004:0800:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2370.688881][T23658] fido_id[23658]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2370.854844][T23588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2370.925525][T23662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5083'. [ 2370.958596][T23585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2370.958725][T23585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2370.958981][T23585] bridge_slave_0: entered allmulticast mode [ 2370.986682][T23585] bridge_slave_0: entered promiscuous mode [ 2372.180410][T23670] program syz.7.5086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2372.850814][T23585] bridge0: port 2(bridge_slave_1) entered blocking state [ 2372.859040][T23585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2372.859297][T23585] bridge_slave_1: entered allmulticast mode [ 2372.871339][T23585] bridge_slave_1: entered promiscuous mode [ 2373.225036][T23581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2373.251911][T23688] netlink: 'syz.7.5094': attribute type 10 has an invalid length. [ 2373.635340][T23581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2373.659879][T23688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2373.681933][T23588] team0: Port device team_slave_0 added [ 2373.901131][T23588] team0: Port device team_slave_1 added [ 2373.905341][T23585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2374.204297][ T3558] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2374.317226][T23292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2374.419716][T23585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2374.422982][T23581] team0: Port device team_slave_0 added [ 2374.504788][T23292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2374.644656][T23581] team0: Port device team_slave_1 added [ 2374.757101][ C0] vkms_vblank_simulate: vblank timer overrun [ 2374.784934][ T3558] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2374.826097][T23588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2374.826109][T23588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2374.826124][T23588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2374.826688][T23292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2375.033857][T23588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2375.033869][T23588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2375.033884][T23588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2375.034450][T23292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2375.104378][T23585] team0: Port device team_slave_0 added [ 2375.315807][ C0] vkms_vblank_simulate: vblank timer overrun [ 2375.356907][ T3558] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2375.374707][T23585] team0: Port device team_slave_1 added [ 2375.375792][T23581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2375.375801][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2375.375817][T23581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2375.495297][T23581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2375.495309][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2375.495324][T23581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2375.838294][ C0] vkms_vblank_simulate: vblank timer overrun [ 2375.868834][ T3558] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2375.892246][T23585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2375.892258][T23585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2375.892274][T23585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2375.994650][T23585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2375.994662][T23585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2375.994678][T23585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2376.115109][T23588] hsr_slave_0: entered promiscuous mode [ 2376.116585][T23588] hsr_slave_1: entered promiscuous mode [ 2376.117586][T23588] debugfs: 'hsr0' already exists in 'hsr' [ 2376.117608][T23588] Cannot create hsr debugfs directory [ 2376.295010][T23581] hsr_slave_0: entered promiscuous mode [ 2376.296459][T23581] hsr_slave_1: entered promiscuous mode [ 2376.297347][T23581] debugfs: 'hsr0' already exists in 'hsr' [ 2376.297363][T23581] Cannot create hsr debugfs directory [ 2376.959945][T23585] hsr_slave_0: entered promiscuous mode [ 2376.960831][T23585] hsr_slave_1: entered promiscuous mode [ 2376.965010][T23585] debugfs: 'hsr0' already exists in 'hsr' [ 2376.965037][T23585] Cannot create hsr debugfs directory [ 2377.517547][T23703] program syz.7.5097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2377.725205][ T3558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.182943][ C0] vkms_vblank_simulate: vblank timer overrun [ 2378.211362][ T3558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.868048][ C0] vkms_vblank_simulate: vblank timer overrun [ 2378.916585][ T3558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.298330][ T3558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.595126][T19159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2379.620309][T19159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2379.629649][T19159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2379.637487][T19159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2379.647228][T19159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2379.832001][ C0] vkms_vblank_simulate: vblank timer overrun [ 2379.916003][ C0] vkms_vblank_simulate: vblank timer overrun [ 2380.135831][ C0] vkms_vblank_simulate: vblank timer overrun [ 2380.199306][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5102'. [ 2380.199380][T23721] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2380.387286][ C0] vkms_vblank_simulate: vblank timer overrun [ 2380.915763][ C0] vkms_vblank_simulate: vblank timer overrun [ 2380.965109][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5103'. [ 2381.144854][ C0] vkms_vblank_simulate: vblank timer overrun [ 2381.358091][T23581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2381.502746][T23581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2381.558820][T23581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2381.664647][T23581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2381.752138][ T5816] Bluetooth: hci0: command tx timeout [ 2381.841871][ C0] vkms_vblank_simulate: vblank timer overrun [ 2381.898854][ T3558] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2382.245371][ C0] vkms_vblank_simulate: vblank timer overrun [ 2382.285984][ T3558] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2382.401240][T23585] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2382.443860][T23585] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2382.728528][ T3558] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2382.835052][T23585] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2383.017789][T23585] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2383.235491][ C0] vkms_vblank_simulate: vblank timer overrun [ 2383.254616][ T3558] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2383.533828][T23588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2383.595710][T23716] chnl_net:caif_netlink_parms(): no params data found [ 2383.605957][T23588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2383.661818][T23588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2383.739827][T23588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2383.831134][ T5816] Bluetooth: hci0: command tx timeout [ 2384.995556][T23716] bridge0: port 1(bridge_slave_0) entered blocking state [ 2384.998288][T23716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.998592][T23716] bridge_slave_0: entered allmulticast mode [ 2385.000838][T23716] bridge_slave_0: entered promiscuous mode [ 2385.161294][T23716] bridge0: port 2(bridge_slave_1) entered blocking state [ 2385.161399][T23716] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.161592][T23716] bridge_slave_1: entered allmulticast mode [ 2385.163179][T23716] bridge_slave_1: entered promiscuous mode [ 2385.166662][ T3558] bridge_slave_1: left allmulticast mode [ 2385.166687][ T3558] bridge_slave_1: left promiscuous mode [ 2385.166913][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.253424][ T3558] bridge_slave_0: left allmulticast mode [ 2385.253453][ T3558] bridge_slave_0: left promiscuous mode [ 2385.253732][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.334664][ T3558] bridge_slave_1: left allmulticast mode [ 2385.334686][ T3558] bridge_slave_1: left promiscuous mode [ 2385.334839][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.411967][ T3558] bridge_slave_0: left allmulticast mode [ 2385.411988][ T3558] bridge_slave_0: left promiscuous mode [ 2385.412148][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.499447][ T3558] bridge_slave_1: left allmulticast mode [ 2385.499469][ T3558] bridge_slave_1: left promiscuous mode [ 2385.499621][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.552801][ T3558] bridge_slave_0: left allmulticast mode [ 2385.552821][ T3558] bridge_slave_0: left promiscuous mode [ 2385.553074][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.911205][ T5816] Bluetooth: hci0: command tx timeout [ 2387.991072][ T5816] Bluetooth: hci0: command tx timeout [ 2388.352483][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2388.411750][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2388.457985][ T3558] bond0 (unregistering): Released all slaves [ 2390.731642][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2390.792681][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2390.813259][ T3558] bond0 (unregistering): Released all slaves [ 2392.971598][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2393.052396][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2393.073470][ T3558] bond0 (unregistering): Released all slaves [ 2393.408423][T23716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2393.433371][T23716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2393.481941][T23787] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5121'. [ 2393.654225][ T3558] tipc: Disabling bearer [ 2393.654428][ T3558] tipc: Left network mode [ 2393.828646][T23716] team0: Port device team_slave_0 added [ 2393.844879][T23581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2393.917740][T23716] team0: Port device team_slave_1 added [ 2394.069582][ T3558] tipc: Disabling bearer [ 2394.069876][ T3558] tipc: Left network mode [ 2394.234784][ T3558] IPVS: stopping backup sync thread 17189 ... [ 2394.262619][T23716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2394.262636][T23716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2394.262661][T23716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2394.288885][T23716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2394.288902][T23716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2394.288929][T23716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2394.821916][T23581] 8021q: adding VLAN 0 to HW filter on device team0 [ 2394.896778][T23810] Bluetooth: MGMT ver 1.23 [ 2394.896804][T23810] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2395.069994][T23812] netlink: 'syz.7.5133': attribute type 10 has an invalid length. [ 2395.337074][ C0] vkms_vblank_simulate: vblank timer overrun [ 2395.472456][T23812] bond0: (slave dummy0): Releasing backup interface [ 2395.525271][T23812] team0: Port device dummy0 added [ 2395.539816][T23716] hsr_slave_0: entered promiscuous mode [ 2395.547270][T23716] hsr_slave_1: entered promiscuous mode [ 2395.548283][T23716] debugfs: 'hsr0' already exists in 'hsr' [ 2395.548306][T23716] Cannot create hsr debugfs directory [ 2395.571993][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 2395.572201][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2395.608527][T23814] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5134'. [ 2395.665095][ C0] vkms_vblank_simulate: vblank timer overrun [ 2395.782307][T23585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2396.082212][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2396.082297][ T7765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2396.168088][ C0] vkms_vblank_simulate: vblank timer overrun [ 2396.371489][ C0] vkms_vblank_simulate: vblank timer overrun [ 2396.935009][ C0] vkms_vblank_simulate: vblank timer overrun [ 2397.241188][ C0] vkms_vblank_simulate: vblank timer overrun [ 2397.465431][ C0] vkms_vblank_simulate: vblank timer overrun [ 2397.505977][T23585] 8021q: adding VLAN 0 to HW filter on device team0 [ 2397.574731][T23827] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2397.851547][ C0] vkms_vblank_simulate: vblank timer overrun [ 2398.132539][ C0] vkms_vblank_simulate: vblank timer overrun [ 2398.177008][T22172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2398.177138][T22172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2398.195642][T23588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2398.227683][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2398.227797][ T7465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2398.327001][ C0] vkms_vblank_simulate: vblank timer overrun [ 2399.391171][ T3558] hsr_slave_0: left promiscuous mode [ 2399.431199][ T3558] hsr_slave_1: left promiscuous mode [ 2399.432450][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2399.432476][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2399.482039][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2399.482067][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2399.497738][T23849] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2399.764139][ C0] vkms_vblank_simulate: vblank timer overrun [ 2399.791202][ T3558] hsr_slave_0: left promiscuous mode [ 2399.811179][ T3558] hsr_slave_1: left promiscuous mode [ 2399.811994][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2399.812011][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2400.688252][ C0] vkms_vblank_simulate: vblank timer overrun [ 2400.704288][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2400.704329][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2400.759332][T23857] 9pnet_fd: Insufficient options for proto=fd [ 2401.014192][ C0] vkms_vblank_simulate: vblank timer overrun [ 2401.031219][ T3558] hsr_slave_0: left promiscuous mode [ 2401.071405][ T3558] hsr_slave_1: left promiscuous mode [ 2401.460548][ T3558] veth1_macvtap: left promiscuous mode [ 2401.466102][ T3558] veth0_macvtap: left promiscuous mode [ 2401.466488][ T3558] veth1_vlan: left promiscuous mode [ 2401.466691][ T3558] veth0_vlan: left promiscuous mode [ 2401.589670][ T3558] veth0_macvtap: left promiscuous mode [ 2401.598039][ T3558] veth1_vlan: left promiscuous mode [ 2401.598260][ T3558] veth0_vlan: left promiscuous mode [ 2401.714135][ T3558] veth1_macvtap: left promiscuous mode [ 2401.714247][ T3558] veth0_macvtap: left promiscuous mode [ 2401.720722][ T3558] veth1_vlan: left promiscuous mode [ 2401.743374][ T3558] veth0_vlan: left promiscuous mode [ 2402.460952][ C0] vkms_vblank_simulate: vblank timer overrun [ 2402.470704][T23866] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5153'. [ 2402.532326][ C0] vkms_vblank_simulate: vblank timer overrun [ 2402.639686][ C0] vkms_vblank_simulate: vblank timer overrun [ 2402.697169][ C0] vkms_vblank_simulate: vblank timer overrun [ 2402.753437][ C0] vkms_vblank_simulate: vblank timer overrun [ 2402.807064][ C0] vkms_vblank_simulate: vblank timer overrun [ 2402.911310][ C0] vkms_vblank_simulate: vblank timer overrun [ 2402.973334][ C0] vkms_vblank_simulate: vblank timer overrun [ 2403.061211][ C0] vkms_vblank_simulate: vblank timer overrun [ 2403.568343][ C0] vkms_vblank_simulate: vblank timer overrun [ 2403.634319][ C0] vkms_vblank_simulate: vblank timer overrun [ 2404.113331][ C0] vkms_vblank_simulate: vblank timer overrun [ 2404.242918][ C0] vkms_vblank_simulate: vblank timer overrun [ 2404.310586][ C0] vkms_vblank_simulate: vblank timer overrun [ 2404.384694][ C0] vkms_vblank_simulate: vblank timer overrun [ 2404.448925][ C0] vkms_vblank_simulate: vblank timer overrun [ 2405.042617][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2405.361690][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2406.985884][T19159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2406.989866][T19159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2407.000605][T19159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2407.007923][T19159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2407.009335][T19159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2408.486300][T19159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2408.498351][T19159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2408.501755][T19159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2408.502955][T19159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2408.503739][T19159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2409.032443][ T5816] Bluetooth: hci1: command tx timeout [ 2409.964459][T19159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2409.969310][T19159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2409.973194][T19159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2409.984940][T19159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2409.986002][T19159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2410.551024][T19159] Bluetooth: hci4: command tx timeout [ 2411.111242][T19159] Bluetooth: hci1: command tx timeout [ 2411.441575][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2411.547596][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.711607][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2412.091157][T19159] Bluetooth: hci5: command tx timeout [ 2412.662715][T19159] Bluetooth: hci4: command tx timeout [ 2413.191449][T19159] Bluetooth: hci1: command tx timeout [ 2414.151164][T19159] Bluetooth: hci5: command tx timeout [ 2414.731219][T19159] Bluetooth: hci4: command tx timeout [ 2415.291198][T19159] Bluetooth: hci1: command tx timeout [ 2416.231065][T19159] Bluetooth: hci5: command tx timeout [ 2416.791007][T19159] Bluetooth: hci4: command tx timeout [ 2417.591598][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2417.881760][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2418.333964][T19159] Bluetooth: hci5: command tx timeout [ 2418.538088][ T5816] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2418.544714][ T5816] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2418.547495][ T5816] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2418.548623][ T5816] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2418.550027][ T5816] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2420.631231][T23884] Bluetooth: hci8: command tx timeout [ 2421.125678][T23588] 8021q: adding VLAN 0 to HW filter on device team0 [ 2422.711727][T23884] Bluetooth: hci8: command tx timeout [ 2424.200341][T23716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2424.328415][T23716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2424.416954][T23716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2424.511576][T23716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2424.598815][T23875] chnl_net:caif_netlink_parms(): no params data found [ 2424.660016][T23878] chnl_net:caif_netlink_parms(): no params data found [ 2424.675561][T23881] chnl_net:caif_netlink_parms(): no params data found [ 2424.738831][T23870] chnl_net:caif_netlink_parms(): no params data found [ 2424.811335][T23884] Bluetooth: hci8: command tx timeout [ 2425.805874][T23875] bridge0: port 1(bridge_slave_0) entered blocking state [ 2425.805981][T23875] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.806133][T23875] bridge_slave_0: entered allmulticast mode [ 2425.807656][T23875] bridge_slave_0: entered promiscuous mode [ 2425.883200][T23878] bridge0: port 1(bridge_slave_0) entered blocking state [ 2425.883334][T23878] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.883532][T23878] bridge_slave_0: entered allmulticast mode [ 2425.885163][T23878] bridge_slave_0: entered promiscuous mode [ 2426.015167][T23875] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.015260][T23875] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.015418][T23875] bridge_slave_1: entered allmulticast mode [ 2426.016966][T23875] bridge_slave_1: entered promiscuous mode [ 2426.018152][T23881] bridge0: port 1(bridge_slave_0) entered blocking state [ 2426.018270][T23881] bridge0: port 1(bridge_slave_0) entered disabled state [ 2426.018406][T23881] bridge_slave_0: entered allmulticast mode [ 2426.020001][T23881] bridge_slave_0: entered promiscuous mode [ 2426.035731][T23878] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.035868][T23878] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.036424][T23878] bridge_slave_1: entered allmulticast mode [ 2426.075580][T23878] bridge_slave_1: entered promiscuous mode [ 2426.272684][T23881] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.272793][T23881] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.272945][T23881] bridge_slave_1: entered allmulticast mode [ 2426.274518][T23881] bridge_slave_1: entered promiscuous mode [ 2426.353741][T23870] bridge0: port 1(bridge_slave_0) entered blocking state [ 2426.353839][T23870] bridge0: port 1(bridge_slave_0) entered disabled state [ 2426.354195][T23870] bridge_slave_0: entered allmulticast mode [ 2426.355838][T23870] bridge_slave_0: entered promiscuous mode [ 2426.583920][T23870] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.584069][T23870] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.584285][T23870] bridge_slave_1: entered allmulticast mode [ 2426.585851][T23870] bridge_slave_1: entered promiscuous mode [ 2426.593770][T23875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2426.706010][T23878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2426.784695][T23875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2426.788721][T23881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2426.824232][T23878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2426.872744][T23884] Bluetooth: hci8: command tx timeout [ 2426.955487][T23881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2427.065156][T23870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2427.374502][T23870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2427.376134][T23875] team0: Port device team_slave_0 added [ 2427.456488][T23878] team0: Port device team_slave_0 added [ 2427.557264][T23875] team0: Port device team_slave_1 added [ 2427.559891][T23881] team0: Port device team_slave_0 added [ 2427.567503][T23878] team0: Port device team_slave_1 added [ 2427.729249][T23881] team0: Port device team_slave_1 added [ 2427.794705][T23870] team0: Port device team_slave_0 added [ 2428.224397][T23870] team0: Port device team_slave_1 added [ 2428.226799][T23875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2428.226814][T23875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.226841][T23875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2428.323021][T23878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2428.323037][T23878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.323061][T23878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2428.422948][T23875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2428.422959][T23875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.422975][T23875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2428.427036][T23881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2428.427051][T23881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.427066][T23881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2428.428302][T23878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2428.428316][T23878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.428341][T23878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2428.581890][T23881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2428.581906][T23881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.581926][T23881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2428.588637][T23870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2428.588648][T23870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.588664][T23870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2428.611880][T23870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2428.611896][T23870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.611923][T23870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2429.257209][T23875] hsr_slave_0: entered promiscuous mode [ 2429.258077][T23875] hsr_slave_1: entered promiscuous mode [ 2429.268927][T23878] hsr_slave_0: entered promiscuous mode [ 2429.270702][T23878] hsr_slave_1: entered promiscuous mode [ 2429.273023][T23878] debugfs: 'hsr0' already exists in 'hsr' [ 2429.273048][T23878] Cannot create hsr debugfs directory [ 2429.371263][T23881] hsr_slave_0: entered promiscuous mode [ 2429.372153][T23881] hsr_slave_1: entered promiscuous mode [ 2429.372736][T23881] debugfs: 'hsr0' already exists in 'hsr' [ 2429.372752][T23881] Cannot create hsr debugfs directory [ 2429.780807][T23870] hsr_slave_0: entered promiscuous mode [ 2429.782503][T23870] hsr_slave_1: entered promiscuous mode [ 2429.783415][T23870] debugfs: 'hsr0' already exists in 'hsr' [ 2429.783438][T23870] Cannot create hsr debugfs directory [ 2431.650108][T23716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2432.122873][T23716] 8021q: adding VLAN 0 to HW filter on device team0 [ 2432.330282][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2432.330499][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2432.589733][T18233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2432.589862][T18233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2433.883691][T23716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2434.147659][T23716] veth0_vlan: entered promiscuous mode [ 2434.209756][T23716] veth1_vlan: entered promiscuous mode [ 2434.509504][ T3558] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.574042][T23716] veth0_macvtap: entered promiscuous mode [ 2434.580035][T23716] veth1_macvtap: entered promiscuous mode [ 2434.814663][ T3558] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.164126][ T3558] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.213387][T23716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2435.433351][ T3558] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.484795][T23716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2435.547580][ T7765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.547643][ T7765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.547687][ T7765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.547716][ T7765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.179046][ T3558] bridge_slave_1: left allmulticast mode [ 2436.179077][ T3558] bridge_slave_1: left promiscuous mode [ 2436.195723][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2436.252133][ T3558] bridge_slave_0: left allmulticast mode [ 2436.252153][ T3558] bridge_slave_0: left promiscuous mode [ 2436.252332][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2436.324164][ T3558] bridge_slave_1: left allmulticast mode [ 2436.324186][ T3558] bridge_slave_1: left promiscuous mode [ 2436.324332][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2436.392321][ T3558] bridge_slave_0: left allmulticast mode [ 2436.392342][ T3558] bridge_slave_0: left promiscuous mode [ 2436.392503][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2436.453693][ T3558] bridge_slave_1: left allmulticast mode [ 2436.453714][ T3558] bridge_slave_1: left promiscuous mode [ 2436.453860][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2436.512199][ T3558] bridge_slave_0: left allmulticast mode [ 2436.512220][ T3558] bridge_slave_0: left promiscuous mode [ 2436.512390][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2436.583586][ T3558] bridge_slave_1: left allmulticast mode [ 2436.583607][ T3558] bridge_slave_1: left promiscuous mode [ 2436.583755][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2436.642082][ T3558] bridge_slave_0: left allmulticast mode [ 2436.642103][ T3558] bridge_slave_0: left promiscuous mode [ 2436.642269][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2436.733714][ T3558] bridge_slave_1: left allmulticast mode [ 2436.733735][ T3558] bridge_slave_1: left promiscuous mode [ 2436.733880][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2436.802088][ T3558] bridge_slave_0: left allmulticast mode [ 2436.802109][ T3558] bridge_slave_0: left promiscuous mode [ 2436.802258][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2439.041708][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2439.142784][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2439.245124][ T3558] bond0 (unregistering): Released all slaves [ 2439.502615][T23872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2439.517982][T23872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2439.522708][T23872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2439.570937][T23872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2439.571779][T23872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2441.261804][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2441.323239][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2441.343662][ T3558] bond0 (unregistering): Released all slaves [ 2441.671186][T23872] Bluetooth: hci2: command tx timeout [ 2443.291709][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2443.361736][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2443.384350][ T3558] bond0 (unregistering): Released all slaves [ 2443.751158][T23872] Bluetooth: hci2: command tx timeout [ 2445.383139][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2445.451601][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2445.503591][ T3558] bond0 (unregistering): Released all slaves [ 2445.831104][T23872] Bluetooth: hci2: command tx timeout [ 2446.171594][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2446.251672][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2446.313493][ T3558] bond0 (unregistering): Released all slaves [ 2447.911136][T23872] Bluetooth: hci2: command tx timeout [ 2448.010802][T23927] chnl_net:caif_netlink_parms(): no params data found [ 2448.783522][T23875] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2448.828462][T23927] bridge0: port 1(bridge_slave_0) entered blocking state [ 2448.828653][T23927] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.828875][T23927] bridge_slave_0: entered allmulticast mode [ 2448.838825][T23927] bridge_slave_0: entered promiscuous mode [ 2448.844844][T23875] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2448.886504][T23927] bridge0: port 2(bridge_slave_1) entered blocking state [ 2448.886666][T23927] bridge0: port 2(bridge_slave_1) entered disabled state [ 2448.886902][T23927] bridge_slave_1: entered allmulticast mode [ 2448.889615][T23927] bridge_slave_1: entered promiscuous mode [ 2448.899345][T23875] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2449.033201][T23875] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2449.135585][T23927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2449.311263][ T3558] hsr_slave_0: left promiscuous mode [ 2449.331179][ T3558] hsr_slave_1: left promiscuous mode [ 2449.331923][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2449.381646][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2449.521237][ T3558] hsr_slave_0: left promiscuous mode [ 2449.541104][ T3558] hsr_slave_1: left promiscuous mode [ 2449.541852][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2449.582884][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2449.721210][ T3558] hsr_slave_0: left promiscuous mode [ 2449.741122][ T3558] hsr_slave_1: left promiscuous mode [ 2449.741825][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2449.781799][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2449.941124][ T3558] hsr_slave_0: left promiscuous mode [ 2449.961105][ T3558] hsr_slave_1: left promiscuous mode [ 2449.962074][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2449.962096][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2450.001933][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2450.001962][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2450.171157][ T3558] hsr_slave_0: left promiscuous mode [ 2450.191254][ T3558] hsr_slave_1: left promiscuous mode [ 2450.191906][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2450.242670][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2450.377256][ T3558] veth1_macvtap: left promiscuous mode [ 2450.377325][ T3558] veth0_macvtap: left promiscuous mode [ 2450.377480][ T3558] veth1_vlan: left promiscuous mode [ 2450.377584][ T3558] veth0_vlan: left promiscuous mode [ 2451.375710][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2451.541611][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2454.251630][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2454.551816][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2457.691687][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2457.861644][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2462.861700][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2463.171661][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2465.146184][ T3558] team0 (unregistering): Port device dummy0 removed [ 2466.961797][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2467.033617][T23884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2467.037212][T23884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2467.048140][T23884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2467.051721][T23884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2467.052992][T23884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2467.201609][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2467.986151][T23927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2468.284822][T23927] team0: Port device team_slave_0 added [ 2468.303131][T23878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2468.395582][T23927] team0: Port device team_slave_1 added [ 2468.621392][T23878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2468.708795][T23872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2468.726877][T23872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2468.728362][T23872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2468.729483][T23872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2468.730207][T23872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2468.876995][T23878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2469.005050][T23927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2469.005062][T23927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2469.005077][T23927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2469.111597][T23872] Bluetooth: hci0: command tx timeout [ 2469.371216][T23878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2469.426716][T23927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2469.426735][T23927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2469.426761][T23927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2469.907967][T23927] hsr_slave_0: entered promiscuous mode [ 2469.909371][T23927] hsr_slave_1: entered promiscuous mode [ 2469.935216][T23927] debugfs: 'hsr0' already exists in 'hsr' [ 2469.935244][T23927] Cannot create hsr debugfs directory [ 2470.016833][T23881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2470.178771][T23881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2470.316805][T23884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2470.371406][T23884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2470.373482][T23884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2470.378703][T23884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2470.379481][T23884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2470.429951][T23881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2470.791190][T23884] Bluetooth: hci3: command tx timeout [ 2470.962783][T23881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2471.191363][T23884] Bluetooth: hci0: command tx timeout [ 2471.832423][T23943] chnl_net:caif_netlink_parms(): no params data found [ 2472.199114][T23927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2472.481446][T23884] Bluetooth: hci4: command tx timeout [ 2472.897363][T23884] Bluetooth: hci3: command tx timeout [ 2472.913317][T23927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2472.954568][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2473.271091][T23884] Bluetooth: hci0: command tx timeout [ 2473.374874][T23927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2473.493205][T23950] chnl_net:caif_netlink_parms(): no params data found [ 2473.506465][T23943] bridge0: port 1(bridge_slave_0) entered blocking state [ 2473.506668][T23943] bridge0: port 1(bridge_slave_0) entered disabled state [ 2473.506870][T23943] bridge_slave_0: entered allmulticast mode [ 2473.509789][T23943] bridge_slave_0: entered promiscuous mode [ 2473.777654][T23927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2473.865813][T23943] bridge0: port 2(bridge_slave_1) entered blocking state [ 2473.865944][T23943] bridge0: port 2(bridge_slave_1) entered disabled state [ 2473.866173][T23943] bridge_slave_1: entered allmulticast mode [ 2473.868969][T23943] bridge_slave_1: entered promiscuous mode [ 2474.257389][T23943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2474.283028][T23943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2474.553565][T23884] Bluetooth: hci4: command tx timeout [ 2474.906474][T23943] team0: Port device team_slave_0 added [ 2474.908063][T23950] bridge0: port 1(bridge_slave_0) entered blocking state [ 2474.908186][T23950] bridge0: port 1(bridge_slave_0) entered disabled state [ 2474.908331][T23950] bridge_slave_0: entered allmulticast mode [ 2474.909871][T23950] bridge_slave_0: entered promiscuous mode [ 2474.915398][T23960] chnl_net:caif_netlink_parms(): no params data found [ 2474.962501][T23884] Bluetooth: hci3: command tx timeout [ 2475.001598][T23943] team0: Port device team_slave_1 added [ 2475.002440][T23950] bridge0: port 2(bridge_slave_1) entered blocking state [ 2475.002582][T23950] bridge0: port 2(bridge_slave_1) entered disabled state [ 2475.002773][T23950] bridge_slave_1: entered allmulticast mode [ 2475.005585][T23950] bridge_slave_1: entered promiscuous mode [ 2475.351285][T23884] Bluetooth: hci0: command tx timeout [ 2475.475174][T23943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2475.475192][T23943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2475.475217][T23943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2475.480457][T23950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2475.495104][T23943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2475.495120][T23943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2475.495146][T23943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2475.598565][T23950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2475.974010][T23950] team0: Port device team_slave_0 added [ 2476.052989][T23927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2476.164728][T23950] team0: Port device team_slave_1 added [ 2476.202258][T23960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2476.202496][T23960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2476.202820][T23960] bridge_slave_0: entered allmulticast mode [ 2476.204407][T23960] bridge_slave_0: entered promiscuous mode [ 2476.208736][T23927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2476.451631][T23960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2476.451749][T23960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2476.451947][T23960] bridge_slave_1: entered allmulticast mode [ 2476.453572][T23960] bridge_slave_1: entered promiscuous mode [ 2476.454965][T23927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2476.519938][T23943] hsr_slave_0: entered promiscuous mode [ 2476.520806][T23943] hsr_slave_1: entered promiscuous mode [ 2476.522532][T23943] debugfs: 'hsr0' already exists in 'hsr' [ 2476.522558][T23943] Cannot create hsr debugfs directory [ 2476.631210][T23884] Bluetooth: hci4: command tx timeout [ 2476.733189][T23927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2476.756852][T23950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2476.756864][T23950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2476.756879][T23950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2476.866407][T23881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2476.869687][T23950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2476.869698][T23950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2476.869713][T23950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2476.888478][T23960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2476.974856][T23960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2477.031099][T23884] Bluetooth: hci3: command tx timeout [ 2477.393559][T23960] team0: Port device team_slave_0 added [ 2477.495695][T23960] team0: Port device team_slave_1 added [ 2477.578995][T23950] hsr_slave_0: entered promiscuous mode [ 2477.579880][T23950] hsr_slave_1: entered promiscuous mode [ 2477.580473][T23950] debugfs: 'hsr0' already exists in 'hsr' [ 2477.580492][T23950] Cannot create hsr debugfs directory [ 2477.784061][T23881] 8021q: adding VLAN 0 to HW filter on device team0 [ 2477.785644][T23960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2477.785654][T23960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2477.785669][T23960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2477.882751][T23960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2477.882763][T23960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2477.882779][T23960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2478.124685][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 2478.124929][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2478.622533][T23872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2478.626680][T23872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2478.629085][T23872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2478.630406][T23872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2478.638400][T23872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2478.711539][T23872] Bluetooth: hci4: command tx timeout [ 2479.380116][T23960] hsr_slave_0: entered promiscuous mode [ 2479.382865][T23960] hsr_slave_1: entered promiscuous mode [ 2479.383843][T23960] debugfs: 'hsr0' already exists in 'hsr' [ 2479.383867][T23960] Cannot create hsr debugfs directory [ 2480.356901][T23927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2480.393778][T23992] chnl_net:caif_netlink_parms(): no params data found [ 2480.712243][T23872] Bluetooth: hci1: command tx timeout [ 2481.333485][T23927] 8021q: adding VLAN 0 to HW filter on device team0 [ 2481.762489][T23992] bridge0: port 1(bridge_slave_0) entered blocking state [ 2481.762706][T23992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2481.763123][T23992] bridge_slave_0: entered allmulticast mode [ 2481.764711][T23992] bridge_slave_0: entered promiscuous mode [ 2481.772990][T23992] bridge0: port 2(bridge_slave_1) entered blocking state [ 2481.773156][T23992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2481.773378][T23992] bridge_slave_1: entered allmulticast mode [ 2481.776266][T23992] bridge_slave_1: entered promiscuous mode [ 2481.873426][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 2481.873542][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2482.070849][T23992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2482.077802][T23992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2482.143378][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2482.143531][ T7765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2482.562877][T23992] team0: Port device team_slave_0 added [ 2482.638689][T23992] team0: Port device team_slave_1 added [ 2482.791159][T23872] Bluetooth: hci1: command tx timeout [ 2482.995574][T23992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2482.995590][T23992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2482.995616][T23992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2483.196975][T23992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2483.196993][T23992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2483.197028][T23992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2483.614038][T23992] hsr_slave_0: entered promiscuous mode [ 2483.615024][T23992] hsr_slave_1: entered promiscuous mode [ 2483.615627][T23992] debugfs: 'hsr0' already exists in 'hsr' [ 2483.615643][T23992] Cannot create hsr debugfs directory [ 2483.754803][ T3558] bridge_slave_1: left allmulticast mode [ 2483.754833][ T3558] bridge_slave_1: left promiscuous mode [ 2483.756554][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.802085][ T3558] bridge_slave_0: left allmulticast mode [ 2483.802106][ T3558] bridge_slave_0: left promiscuous mode [ 2483.802280][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2483.873801][ T3558] bridge_slave_1: left allmulticast mode [ 2483.873823][ T3558] bridge_slave_1: left promiscuous mode [ 2483.873982][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.952132][ T3558] bridge_slave_0: left allmulticast mode [ 2483.952152][ T3558] bridge_slave_0: left promiscuous mode [ 2483.952321][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.023687][ T3558] bridge_slave_1: left allmulticast mode [ 2484.023709][ T3558] bridge_slave_1: left promiscuous mode [ 2484.023867][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.102880][ T3558] bridge_slave_0: left allmulticast mode [ 2484.102900][ T3558] bridge_slave_0: left promiscuous mode [ 2484.103075][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.173915][ T3558] bridge_slave_1: left allmulticast mode [ 2484.173936][ T3558] bridge_slave_1: left promiscuous mode [ 2484.174099][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.242167][ T3558] bridge_slave_0: left allmulticast mode [ 2484.242187][ T3558] bridge_slave_0: left promiscuous mode [ 2484.242365][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.771610][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2484.851807][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2484.871336][T23872] Bluetooth: hci1: command tx timeout [ 2484.913235][ T3558] bond0 (unregistering): Released all slaves [ 2485.121632][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2485.202527][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2485.263172][ T3558] bond0 (unregistering): Released all slaves [ 2485.471593][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2485.551836][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2485.613258][ T3558] bond0 (unregistering): Released all slaves [ 2486.961199][T23872] Bluetooth: hci1: command tx timeout [ 2487.571664][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2487.631585][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2487.653584][ T3558] bond0 (unregistering): Released all slaves [ 2489.001231][ T3558] hsr_slave_0: left promiscuous mode [ 2489.041368][ T3558] hsr_slave_1: left promiscuous mode [ 2489.042444][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2489.083079][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2489.221333][ T3558] hsr_slave_0: left promiscuous mode [ 2489.241340][ T3558] hsr_slave_1: left promiscuous mode [ 2489.242026][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2489.282878][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2489.431194][ T3558] hsr_slave_0: left promiscuous mode [ 2489.451108][ T3558] hsr_slave_1: left promiscuous mode [ 2489.451836][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2489.502068][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2489.661095][ T3558] hsr_slave_0: left promiscuous mode [ 2489.681137][ T3558] hsr_slave_1: left promiscuous mode [ 2489.681864][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2489.681881][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2489.731965][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2489.731992][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2489.818896][ T3558] veth1_macvtap: left promiscuous mode [ 2489.818967][ T3558] veth0_macvtap: left promiscuous mode [ 2489.819120][ T3558] veth1_vlan: left promiscuous mode [ 2489.819226][ T3558] veth0_vlan: left promiscuous mode [ 2490.721770][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2490.892604][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2492.101843][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2492.264407][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2493.421993][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2493.592116][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2496.652460][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2496.961731][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2499.559717][T23884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2499.610679][T23884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2499.616457][T23884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2499.617497][T23884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2499.618217][T23884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2500.705659][T23943] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2500.778274][T23943] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2500.864343][T23943] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2501.223269][T23943] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2501.243961][T24007] chnl_net:caif_netlink_parms(): no params data found [ 2501.681190][T23872] Bluetooth: hci5: command tx timeout [ 2501.705208][T23950] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2501.748305][T24007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2501.748431][T24007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2501.748607][T24007] bridge_slave_0: entered allmulticast mode [ 2501.750142][T24007] bridge_slave_0: entered promiscuous mode [ 2501.757663][T23950] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2502.105582][T24007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2502.105676][T24007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2502.105863][T24007] bridge_slave_1: entered allmulticast mode [ 2502.107427][T24007] bridge_slave_1: entered promiscuous mode [ 2502.108631][T23950] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2502.233943][T23950] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2502.621249][T24007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2502.627361][T24007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2503.084732][T24007] team0: Port device team_slave_0 added [ 2503.093488][T24007] team0: Port device team_slave_1 added [ 2503.553555][T24007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2503.553567][T24007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2503.553582][T24007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2503.559061][T24007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2503.559072][T24007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2503.559088][T24007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2503.751233][T23872] Bluetooth: hci5: command tx timeout [ 2503.953008][T24007] hsr_slave_0: entered promiscuous mode [ 2503.954462][T24007] hsr_slave_1: entered promiscuous mode [ 2504.583296][T23943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2504.622870][T23960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2504.689684][T23960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2504.782714][T23960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2504.902238][T23960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2505.072061][T23943] 8021q: adding VLAN 0 to HW filter on device team0 [ 2505.106801][T23950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2505.126880][T23992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2505.144921][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2505.145003][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2505.193256][T23992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2505.477193][T23992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2505.539959][T23992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2505.602032][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2505.602216][ T7765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2505.831444][T23872] Bluetooth: hci5: command tx timeout [ 2505.849734][T23950] 8021q: adding VLAN 0 to HW filter on device team0 [ 2506.051693][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 2506.051920][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2506.108152][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2506.108284][ T7465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2506.688148][ T3558] bridge_slave_1: left allmulticast mode [ 2506.688176][ T3558] bridge_slave_1: left promiscuous mode [ 2506.688422][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2506.753003][ T3558] bridge_slave_0: left allmulticast mode [ 2506.753024][ T3558] bridge_slave_0: left promiscuous mode [ 2506.753176][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2506.823703][ T3558] bridge_slave_1: left allmulticast mode [ 2506.823726][ T3558] bridge_slave_1: left promiscuous mode [ 2506.823879][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2506.892535][ T3558] bridge_slave_0: left allmulticast mode [ 2506.892556][ T3558] bridge_slave_0: left promiscuous mode [ 2506.892723][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2507.911121][T23872] Bluetooth: hci5: command tx timeout [ 2508.881603][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2508.941858][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2508.963384][ T3558] bond0 (unregistering): Released all slaves [ 2510.803506][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2510.912952][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2510.973164][ T3558] bond0 (unregistering): Released all slaves [ 2511.108093][T23960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2511.425213][T24007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2511.489920][T23960] 8021q: adding VLAN 0 to HW filter on device team0 [ 2511.498108][T23943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2511.498681][T24007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2511.590606][T24007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2511.681634][T23992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2511.683804][T24007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2511.729964][T22172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2511.730220][T22172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2511.903289][ T3558] hsr_slave_0: left promiscuous mode [ 2511.941137][ T3558] hsr_slave_1: left promiscuous mode [ 2511.941858][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2511.992368][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2512.131325][ T3558] hsr_slave_0: left promiscuous mode [ 2512.151368][ T3558] hsr_slave_1: left promiscuous mode [ 2512.152047][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2512.191623][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2513.331827][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2513.605541][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2516.941583][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2517.115829][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2519.226478][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2519.226691][ T7465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2519.288301][T23992] 8021q: adding VLAN 0 to HW filter on device team0 [ 2519.324546][T15572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2519.324918][T15572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2519.343924][T23950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2519.372070][T18233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2519.372241][T18233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2519.726826][T23943] veth0_vlan: entered promiscuous mode [ 2519.839481][T23943] veth1_vlan: entered promiscuous mode [ 2519.926095][T24007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2520.077854][T24007] 8021q: adding VLAN 0 to HW filter on device team0 [ 2520.168160][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2520.168305][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2520.189568][T23943] veth0_macvtap: entered promiscuous mode [ 2520.259795][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2520.265377][ T7765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2520.268165][T23943] veth1_macvtap: entered promiscuous mode [ 2520.388405][T23950] veth0_vlan: entered promiscuous mode [ 2520.415726][T23943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2520.418760][T23960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2520.444722][T23950] veth1_vlan: entered promiscuous mode [ 2520.450121][T23943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2520.479031][T23992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2520.503858][ T7465] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.510053][ T7465] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.519534][ T7465] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.530677][ T7465] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.843599][T23950] veth0_macvtap: entered promiscuous mode [ 2521.017501][T23950] veth1_macvtap: entered promiscuous mode [ 2521.129767][T23992] veth0_vlan: entered promiscuous mode [ 2521.133797][T23960] veth0_vlan: entered promiscuous mode [ 2521.148522][ T7765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2521.148543][ T7765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2521.174891][T23950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2521.190072][T23992] veth1_vlan: entered promiscuous mode [ 2521.199103][T23960] veth1_vlan: entered promiscuous mode [ 2521.219928][T23950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2521.330905][T24007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2521.333801][T22172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2521.333819][T22172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2521.352217][ T3599] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2521.358096][ T3599] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2521.442699][ T3599] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2521.448084][ T3599] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2521.771225][T24086] program syz.8.5155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2521.785650][T23992] veth0_macvtap: entered promiscuous mode [ 2521.830335][T23960] veth0_macvtap: entered promiscuous mode [ 2521.861922][T23992] veth1_macvtap: entered promiscuous mode [ 2521.882596][T23960] veth1_macvtap: entered promiscuous mode [ 2521.977565][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2521.977587][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2522.036841][T24007] veth0_vlan: entered promiscuous mode [ 2522.052205][T23992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2522.057533][T23960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2522.126102][T23992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2522.134307][T23960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2522.150408][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2522.150429][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2522.194763][T24007] veth1_vlan: entered promiscuous mode [ 2522.227493][T22172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.241506][T22172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.257921][T22172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.284174][T22172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.303430][T22172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.310752][T22172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.363898][T22172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.395722][T22172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2522.758033][T24007] veth0_macvtap: entered promiscuous mode [ 2522.864227][T24007] veth1_macvtap: entered promiscuous mode [ 2522.883166][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2522.883187][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.019175][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.019197][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.086392][T24007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2523.090833][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.092272][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.135470][T24007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2523.163910][T22172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.163929][T22172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.201339][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.204191][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.206210][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.207112][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.331676][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 2523.331695][ T37] audit: type=1326 audit(1762704587.013:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.331750][ T37] audit: type=1326 audit(1762704587.013:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.331793][ T37] audit: type=1326 audit(1762704587.013:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.331834][ T37] audit: type=1326 audit(1762704587.013:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.331875][ T37] audit: type=1326 audit(1762704587.013:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.331917][ T37] audit: type=1326 audit(1762704587.013:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.338446][ T37] audit: type=1326 audit(1762704587.033:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24111 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f04b7b61f85 code=0x7ffc0000 [ 2523.338488][ T37] audit: type=1326 audit(1762704587.033:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.338517][ T37] audit: type=1326 audit(1762704587.033:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.349129][ T37] audit: type=1326 audit(1762704587.043:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.9.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2523.879378][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5166'. [ 2524.026604][T24128] program syz.8.5168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2524.361127][T24124] hsr_slave_0 (unregistering): left promiscuous mode [ 2524.420413][T24135] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.5169'. [ 2524.448897][T18233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2524.448919][T18233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2524.679606][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2524.679627][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2525.136656][T24159] 9pnet_fd: Insufficient options for proto=fd [ 2529.266789][T24226] fuse: Bad value for 'fd' [ 2530.181001][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 2530.181022][ T37] audit: type=1326 audit(1762704593.713:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24228 comm="syz.1.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2530.181072][ T37] audit: type=1326 audit(1762704593.863:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24228 comm="syz.1.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2530.181113][ T37] audit: type=1326 audit(1762704593.863:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24228 comm="syz.1.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2530.181151][ T37] audit: type=1326 audit(1762704593.863:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24228 comm="syz.1.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2530.265419][T24232] lo speed is unknown, defaulting to 1000 [ 2530.265520][T24232] lo speed is unknown, defaulting to 1000 [ 2530.266788][T24232] lo speed is unknown, defaulting to 1000 [ 2530.333984][T24232] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 2530.881510][T24232] lo speed is unknown, defaulting to 1000 [ 2530.884370][T24232] lo speed is unknown, defaulting to 1000 [ 2531.656804][T24232] lo speed is unknown, defaulting to 1000 [ 2531.669995][T24232] lo speed is unknown, defaulting to 1000 [ 2531.679966][T24232] lo speed is unknown, defaulting to 1000 [ 2531.691179][T24232] lo speed is unknown, defaulting to 1000 [ 2531.775648][T24265] 9pnet_fd: Insufficient options for proto=fd [ 2531.915049][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5221'. [ 2532.413089][T24287] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5229'. [ 2532.523406][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'. [ 2532.909902][T24290] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 2532.909931][T24290] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 2533.006687][T24294] netlink: 'syz.9.5232': attribute type 10 has an invalid length. [ 2533.038868][T24294] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2533.693313][ T37] audit: type=1326 audit(1762704597.373:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24311 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2533.693364][ T37] audit: type=1326 audit(1762704597.383:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24311 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2533.694497][ T37] audit: type=1326 audit(1762704597.393:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24311 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2533.694543][ T37] audit: type=1326 audit(1762704597.393:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24311 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2533.694585][ T37] audit: type=1326 audit(1762704597.393:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24311 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2534.048496][T24320] netlink: 'syz.3.5245': attribute type 3 has an invalid length. [ 2534.267345][ T37] audit: type=1326 audit(1762704597.963:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24327 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2534.405070][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.528026][T24326] syz.1.5248 (24326) used greatest stack depth: 16696 bytes left [ 2535.105805][T24351] sd 0:0:1:0: device reset [ 2535.655200][T24363] netlink: 'syz.9.5264': attribute type 21 has an invalid length. [ 2535.655319][T24363] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5264'. [ 2535.655364][T24363] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5264'. [ 2536.038206][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 2536.038223][ T37] audit: type=1326 audit(1762704599.733:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24371 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2536.039807][ T37] audit: type=1326 audit(1762704599.733:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24371 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2536.040111][ T37] audit: type=1326 audit(1762704599.733:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24371 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2536.040365][ T37] audit: type=1326 audit(1762704599.733:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24371 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2536.134239][ T37] audit: type=1326 audit(1762704599.733:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24371 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5f81f6c9 code=0x7ffc0000 [ 2540.409006][T24425] program syz.1.5290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2542.046004][T24440] dummy0: entered promiscuous mode [ 2542.046582][T24440] vlan2: entered promiscuous mode [ 2542.135496][ T37] audit: type=1326 audit(1762704605.833:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.139795][ T37] audit: type=1326 audit(1762704605.833:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.140101][ T37] audit: type=1326 audit(1762704605.833:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.141745][ T37] audit: type=1326 audit(1762704605.843:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.165532][ T37] audit: type=1326 audit(1762704605.843:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.176867][ T37] audit: type=1326 audit(1762704605.873:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.180517][ T37] audit: type=1326 audit(1762704605.873:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.186982][ T37] audit: type=1326 audit(1762704605.883:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.189266][ T37] audit: type=1326 audit(1762704605.883:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.208806][ T37] audit: type=1326 audit(1762704605.903:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24447 comm="syz.9.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2542.237287][T24448] netlink: 19 bytes leftover after parsing attributes in process `syz.9.5299'. [ 2544.024062][T24473] netlink: 'syz.0.5306': attribute type 3 has an invalid length. [ 2545.118232][T24507] netlink: 'syz.0.5321': attribute type 3 has an invalid length. [ 2545.322637][T24511] team_slave_0: entered promiscuous mode [ 2545.322693][T24511] team_slave_1: entered promiscuous mode [ 2545.326621][T24511] vlan2: entered promiscuous mode [ 2545.326640][T24511] team0: entered promiscuous mode [ 2546.040296][ T7465] Bluetooth: hci2: Frame reassembly failed (-90) [ 2546.285744][T24544] program syz.8.5338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2546.342569][T24547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5340'. [ 2548.086150][T23872] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2550.901017][T24547] team0 (unregistering): Port device team_slave_0 removed [ 2550.936781][T24547] team0 (unregistering): Port device team_slave_1 removed [ 2550.982763][T24566] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2550.982812][T24566] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2550.982833][T24566] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2551.008401][T24573] lo speed is unknown, defaulting to 1000 [ 2551.587723][T24576] lo speed is unknown, defaulting to 1000 [ 2552.762893][ T37] kauditd_printk_skb: 116 callbacks suppressed [ 2552.762920][ T37] audit: type=1326 audit(1762704616.463:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24622 comm="syz.3.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2552.763258][ T37] audit: type=1326 audit(1762704616.463:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24622 comm="syz.3.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2552.763513][ T37] audit: type=1326 audit(1762704616.463:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24622 comm="syz.3.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2552.912782][T24626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5369'. [ 2553.108560][ T37] audit: type=1326 audit(1762704616.803:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24632 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2553.110378][ T37] audit: type=1326 audit(1762704616.803:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24632 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2553.118146][ T37] audit: type=1326 audit(1762704616.813:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24632 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2553.118737][ T37] audit: type=1326 audit(1762704616.813:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24632 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2553.118784][ T37] audit: type=1326 audit(1762704616.813:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24632 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2553.469756][T24642] program syz.1.5378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2553.605360][T24648] netlink: 'syz.0.5380': attribute type 3 has an invalid length. [ 2554.409053][T24673] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2555.514610][T24707] netlink: 'syz.0.5405': attribute type 10 has an invalid length. [ 2555.555100][T24704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2555.580551][T24709] netlink: 'syz.0.5405': attribute type 10 has an invalid length. [ 2555.650243][T24708] macvlan2: entered promiscuous mode [ 2555.658104][T24708] bond1: entered promiscuous mode [ 2555.659442][T24708] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2555.812769][T24708] bond1: left promiscuous mode [ 2556.669524][T24707] team0: Port device dummy0 added [ 2556.745938][T24709] team0: Port device dummy0 removed [ 2556.750791][T24709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2556.915974][ T37] audit: type=1326 audit(1762704620.613:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24733 comm="syz.0.5416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe88d93f6c9 code=0x0 [ 2557.407797][ T37] audit: type=1326 audit(1762704621.103:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24754 comm="syz.3.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2557.548904][T24757] netlink: 'syz.8.5426': attribute type 3 has an invalid length. [ 2558.205950][T24786] serio: Serial port ttyS3 [ 2558.372943][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 2558.372961][ T37] audit: type=1326 audit(1762704622.073:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.377542][ T37] audit: type=1326 audit(1762704622.073:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.440256][ T37] audit: type=1326 audit(1762704622.133:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.441217][ T37] audit: type=1326 audit(1762704622.143:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.441553][ T37] audit: type=1326 audit(1762704622.143:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.442684][ T37] audit: type=1326 audit(1762704622.143:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.442729][ T37] audit: type=1326 audit(1762704622.143:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.442769][ T37] audit: type=1326 audit(1762704622.143:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.442808][ T37] audit: type=1326 audit(1762704622.143:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.443114][ T37] audit: type=1326 audit(1762704622.143:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24798 comm="syz.0.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88d93f6c9 code=0x7ffc0000 [ 2558.596798][T24806] 9pnet_fd: Insufficient options for proto=fd [ 2561.408234][T24847] program syz.1.5462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2561.706944][T24859] 9pnet_fd: Insufficient options for proto=fd [ 2561.769465][T24861] 9pnet_fd: Insufficient options for proto=fd [ 2561.820627][T24864] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2561.931897][T24872] netlink: 'syz.8.5472': attribute type 2 has an invalid length. [ 2561.931918][T24872] netlink: 'syz.8.5472': attribute type 2 has an invalid length. [ 2561.931932][T24872] netlink: 'syz.8.5472': attribute type 1 has an invalid length. [ 2561.931945][T24872] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5472'. [ 2561.935403][T24872] hub 9-0:1.0: USB hub found [ 2561.981067][T24872] hub 9-0:1.0: 1 port detected [ 2562.272591][T24878] program syz.3.5477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2563.227185][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5481'. [ 2563.228298][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5481'. [ 2564.811362][T24931] netlink: 'syz.8.5500': attribute type 3 has an invalid length. [ 2564.848212][T24932] netlink: 'syz.9.5497': attribute type 2 has an invalid length. [ 2564.848234][T24932] netlink: 'syz.9.5497': attribute type 2 has an invalid length. [ 2564.848247][T24932] netlink: 'syz.9.5497': attribute type 1 has an invalid length. [ 2564.848260][T24932] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5497'. [ 2564.867358][T24932] hub 9-0:1.0: USB hub found [ 2564.867710][T24932] hub 9-0:1.0: 1 port detected [ 2565.255069][T24953] program syz.1.5510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2565.272557][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5509'. [ 2565.274535][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5508'. [ 2565.469825][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5508'. [ 2565.520717][T24969] netlink: 'syzkaller': attribute type 10 has an invalid length. [ 2565.780235][T24960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2565.801711][T24960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2566.310272][T24960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2566.330733][T24960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2567.773476][T13970] lo speed is unknown, defaulting to 1000 [ 2567.773510][T13970] s{z2: Port: 1 Link DOWN [ 2567.773540][T24966] netlink: 'syz.1.5514': attribute type 3 has an invalid length. [ 2567.847421][T24969] bond0: (slave dummy0): Releasing backup interface [ 2567.889539][T24969] team0: Port device dummy0 added [ 2567.902089][T24170] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2568.063816][T24985] IPv4: Oversized IP packet from 127.202.26.0 [ 2568.123211][T24170] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2568.125613][T24170] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2568.125659][T24170] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2568.314219][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5527'. [ 2568.577927][T25008] netlink: 'syz.8.5531': attribute type 3 has an invalid length. [ 2568.579421][T15572] Bluetooth: hci2: Frame reassembly failed (-90) [ 2568.613769][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 2568.613787][ T37] audit: type=1326 audit(1762704632.313:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2568.613832][ T37] audit: type=1326 audit(1762704632.313:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2568.613881][ T37] audit: type=1326 audit(1762704632.313:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2568.613922][ T37] audit: type=1326 audit(1762704632.313:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2568.613964][ T37] audit: type=1326 audit(1762704632.313:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2568.614007][ T37] audit: type=1326 audit(1762704632.313:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04b7b315e7 code=0x7ffc0000 [ 2568.614887][ T37] audit: type=1326 audit(1762704632.313:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f04b7b3155c code=0x7ffc0000 [ 2568.615682][ T37] audit: type=1326 audit(1762704632.313:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f04b7b31494 code=0x7ffc0000 [ 2568.615734][ T37] audit: type=1326 audit(1762704632.313:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f04b7b2e32a code=0x7ffc0000 [ 2568.618358][ T37] audit: type=1326 audit(1762704632.313:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25009 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2568.639632][T25012] netlink: 'syzkaller': attribute type 10 has an invalid length. [ 2569.042618][T25020] vlan2: entered promiscuous mode [ 2569.042640][T25020] bond0: entered promiscuous mode [ 2569.042655][T25020] bond_slave_0: entered promiscuous mode [ 2569.042928][T25020] bond_slave_1: entered promiscuous mode [ 2569.043153][T25020] dummy0: entered promiscuous mode [ 2569.681272][T25036] fuse: Unknown parameter 'user_i00000000000000000000' [ 2570.586021][T25039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5543'. [ 2570.708802][T23884] Bluetooth: hci2: command 0x1003 tx timeout [ 2570.821104][T23872] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2571.992832][T25050] netlink: 'syzkaller': attribute type 10 has an invalid length. [ 2572.308378][T25061] netlink: 580 bytes leftover after parsing attributes in process `syz.1.5552'. [ 2572.876012][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5559'. [ 2572.877083][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5559'. [ 2572.877598][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5559'. [ 2572.878700][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5559'. [ 2573.622437][T25081] netlink: 'syz.8.5560': attribute type 3 has an invalid length. [ 2574.013874][T25089] 9pnet_fd: Insufficient options for proto=fd [ 2574.196471][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5567'. [ 2574.196500][T25098] tipc: Started in network mode [ 2574.196524][T25098] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 2574.196578][T25098] tipc: Enabling of bearer rejected, failed to enable media [ 2574.257929][T25100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5569'. [ 2574.557646][T23884] Bluetooth: hci2: command 0x1003 tx timeout [ 2574.557862][T23872] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2574.911483][T25112] netlink: 'syz.1.5572': attribute type 3 has an invalid length. [ 2574.968728][T25114] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5573'. [ 2575.266872][T25122] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5577'. [ 2575.597759][ T1423] Bluetooth: hci2: Frame reassembly failed (-84) [ 2575.691257][T25135] geneve2: entered promiscuous mode [ 2575.691277][T25135] geneve2: entered allmulticast mode [ 2575.789277][T25137] netlink: 'syz.1.5584': attribute type 3 has an invalid length. [ 2575.943920][T25141] can0: slcan on ptm1. [ 2576.114264][T25141] can0 (unregistered): slcan off ptm1. [ 2576.183880][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 2576.183899][ T37] audit: type=1326 audit(1762704639.883:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.184015][ T37] audit: type=1326 audit(1762704639.883:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.185240][ T37] audit: type=1326 audit(1762704639.883:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.185273][ T37] audit: type=1326 audit(1762704639.883:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.185296][ T37] audit: type=1326 audit(1762704639.883:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.185504][ T37] audit: type=1326 audit(1762704639.883:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.356188][ T37] audit: type=1326 audit(1762704640.053:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.356380][ T37] audit: type=1326 audit(1762704640.053:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25147 comm="syz.9.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2576.653926][T25158] netlink: 580 bytes leftover after parsing attributes in process `syz.9.5594'. [ 2576.759698][T25163] netlink: 'syz.9.5596': attribute type 3 has an invalid length. [ 2578.138155][T23872] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2578.464391][T25188] netlink: 468 bytes leftover after parsing attributes in process `syz.1.5606'. [ 2578.510223][T25192] netlink: 'syz.9.5608': attribute type 3 has an invalid length. [ 2578.899772][T25199] fuse: Unknown parameter 'user_id00000000000000000000' [ 2580.061630][ T37] audit: type=1326 audit(1762704643.763:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25200 comm="syz.9.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2580.062174][ T37] audit: type=1326 audit(1762704643.763:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25200 comm="syz.9.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b7b2f6c9 code=0x7ffc0000 [ 2581.419189][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 2581.419207][ T37] audit: type=1326 audit(1762704645.113:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.421069][ T37] audit: type=1326 audit(1762704645.113:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.422844][ T37] audit: type=1326 audit(1762704645.123:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.423162][ T37] audit: type=1326 audit(1762704645.123:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.423638][ T37] audit: type=1326 audit(1762704645.123:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.424105][ T37] audit: type=1326 audit(1762704645.123:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.424540][ T37] audit: type=1326 audit(1762704645.123:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.425183][ T37] audit: type=1326 audit(1762704645.123:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.425492][ T37] audit: type=1326 audit(1762704645.123:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2581.427284][ T37] audit: type=1326 audit(1762704645.123:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.8.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2582.681525][T25236] netlink: 'syz.9.5627': attribute type 4 has an invalid length. [ 2582.681549][T25236] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5627'. [ 2582.721836][T25236] .`: renamed from bond0 [ 2582.762739][T25244] netlink: 'syzkaller': attribute type 10 has an invalid length. [ 2586.327226][T25270] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5639'. [ 2586.761582][T25278] netlink: 468 bytes leftover after parsing attributes in process `syz.1.5643'. [ 2586.792369][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5644'. [ 2587.899110][T25292] fuse: Bad value for 'fd' [ 2588.483775][T25298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5650'. [ 2588.483801][T25298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5650'. [ 2588.663214][T25305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5654'. [ 2589.217942][T25316] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5659'. [ 2589.548486][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 2589.548504][ T37] audit: type=1326 audit(1762704653.243:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.550296][ T37] audit: type=1326 audit(1762704653.243:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570032][ T37] audit: type=1326 audit(1762704653.253:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570088][ T37] audit: type=1326 audit(1762704653.263:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570129][ T37] audit: type=1326 audit(1762704653.263:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570170][ T37] audit: type=1326 audit(1762704653.263:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570211][ T37] audit: type=1326 audit(1762704653.263:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570252][ T37] audit: type=1326 audit(1762704653.263:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570293][ T37] audit: type=1326 audit(1762704653.263:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2589.570334][ T37] audit: type=1326 audit(1762704653.263:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25325 comm="syz.8.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2590.321146][T23872] Bluetooth: hci2: command 0x1003 tx timeout [ 2590.321414][T23884] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2591.549931][T25391] netlink: 'syz.9.5689': attribute type 6 has an invalid length. [ 2591.904778][T25400] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5693'. [ 2592.173831][T25412] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5696'. [ 2592.337728][T25415] ip6gre1: entered allmulticast mode [ 2592.384662][T25422] batadv_slave_1: entered promiscuous mode [ 2592.385504][T25420] batadv_slave_1: left promiscuous mode [ 2592.552153][T25428] netlink: 'syz.3.5704': attribute type 1 has an invalid length. [ 2592.552175][T25428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5704'. [ 2592.603330][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5706'. [ 2592.603784][T25430] dummy0: Device is already in use. [ 2592.849191][T25362] Bluetooth: hci4: command 0x0406 tx timeout [ 2592.869423][T25363] Bluetooth: hci0: command 0x0406 tx timeout [ 2592.869460][T25363] Bluetooth: hci3: command 0x0406 tx timeout [ 2594.014889][T25445] IPv6: Can't replace route, no match found [ 2594.039528][T25448] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5712'. [ 2594.299159][T25456] batadv_slave_1: entered promiscuous mode [ 2594.300845][T25455] batadv_slave_1: left promiscuous mode [ 2594.543518][T25458] lo speed is unknown, defaulting to 1000 [ 2595.634924][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 2595.836524][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.859787][T25482] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5725'. [ 2596.517401][T25501] netlink: 460 bytes leftover after parsing attributes in process `syz.3.5733'. [ 2596.658184][T25504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5734'. [ 2597.171576][T25524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5742'. [ 2597.531238][T25538] IPv6: Can't replace route, no match found [ 2597.764445][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 2597.764463][ T37] audit: type=1326 audit(1762704917.462:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25536 comm="syz.3.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2597.764757][ T37] audit: type=1326 audit(1762704917.462:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25536 comm="syz.3.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2597.765560][ T37] audit: type=1326 audit(1762704917.462:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25536 comm="syz.3.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2597.765999][ T37] audit: type=1326 audit(1762704917.462:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25536 comm="syz.3.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2597.766093][ T37] audit: type=1326 audit(1762704917.462:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25536 comm="syz.3.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2597.827427][ T37] audit: type=1326 audit(1762704917.512:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25536 comm="syz.3.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2598.893442][ T37] audit: type=1326 audit(1762704918.592:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25559 comm="syz.8.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2598.894419][ T37] audit: type=1326 audit(1762704918.592:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25559 comm="syz.8.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2598.907296][T25561] IPv6: sit1: Disabled Multicast RS [ 2598.912602][T25561] sit1: entered allmulticast mode [ 2598.960790][ T37] audit: type=1326 audit(1762704918.652:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25559 comm="syz.8.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2598.967811][ T37] audit: type=1326 audit(1762704918.662:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25559 comm="syz.8.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2600.633163][T25604] fuse: Unknown parameter '0x0000000000000009' [ 2603.024470][T25643] fuse: Unknown parameter '0x0000000000000009' [ 2603.545571][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 2606.011573][T25704] netlink: 87 bytes leftover after parsing attributes in process `syz.8.5811'. [ 2606.325669][T25716] tipc: Started in network mode [ 2606.325700][T25716] tipc: Node identity fe5418347356, cluster identity 4711 [ 2606.325905][T25716] tipc: Enabled bearer , priority 0 [ 2606.327043][T25716] syzkaller0: entered promiscuous mode [ 2606.327066][T25716] syzkaller0: entered allmulticast mode [ 2606.537223][T25716] tipc: Resetting bearer [ 2606.575330][T25715] tipc: Resetting bearer [ 2606.823244][T25715] tipc: Disabling bearer [ 2608.735298][T25737] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5824'. [ 2608.735336][T25737] ksmbd: Unknown IPC event: 3, ignore. [ 2608.949646][T25743] netlink: 'syz.9.5828': attribute type 3 has an invalid length. [ 2609.013096][T25746] program syz.0.5827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2609.073529][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 2609.073546][ T37] audit: type=1326 audit(1762704928.772:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.086476][ T37] audit: type=1326 audit(1762704928.782:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.086532][ T37] audit: type=1326 audit(1762704928.782:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.086582][ T37] audit: type=1326 audit(1762704928.782:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.086624][ T37] audit: type=1326 audit(1762704928.782:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.095458][ T37] audit: type=1326 audit(1762704928.792:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.100984][ T37] audit: type=1326 audit(1762704928.792:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.101042][ T37] audit: type=1326 audit(1762704928.792:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.101084][ T37] audit: type=1326 audit(1762704928.792:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.101126][ T37] audit: type=1326 audit(1762704928.792:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25745 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67af81f6c9 code=0x7ffc0000 [ 2609.802416][T25763] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5837'. [ 2610.000672][T25770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2610.000728][T25770] IPv6: NLM_F_CREATE should be set when creating new route [ 2610.000760][T25770] IPv6: NLM_F_CREATE should be set when creating new route [ 2610.024082][T25770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2610.221624][T25776] netlink: 'syzkaller': attribute type 10 has an invalid length. [ 2612.302914][T25806] infiniband syû: set active [ 2612.302937][T25806] infiniband syû: added bond_slave_0 [ 2612.321601][T25806] syû: rxe_create_cq: returned err = -12 [ 2612.321682][T25806] infiniband syû: Couldn't create ib_mad CQ [ 2612.321910][T25806] infiniband syû: Couldn't open port 1 [ 2612.476834][T25806] RDS/IB: syû: added [ 2612.478015][T25806] smc: adding ib device syû with port count 1 [ 2612.478312][T25806] smc: ib device syû port 1 has no pnetid [ 2613.779224][T25846] @: renamed from vlan0 (while UP) [ 2615.444190][T25860] program syz.8.5873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2615.645139][T25868] netlink: 580 bytes leftover after parsing attributes in process `syz.8.5874'. [ 2615.930362][T25874] netlink: 'syzkaller': attribute type 10 has an invalid length. [ 2615.986399][T25874] team0: Port device dummy0 added [ 2616.261016][T25884] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5881'. [ 2616.664593][T25896] netlink: 580 bytes leftover after parsing attributes in process `syz.8.5887'. [ 2616.904835][T25903] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5890'. [ 2616.986464][T25906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5891'. [ 2617.152929][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5890'. [ 2617.745937][T25927] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2617.745937][T25927] The task syz.1.5895 (25927) triggered the difference, watch for misbehavior. [ 2617.915552][T25912] lo speed is unknown, defaulting to 1000 [ 2617.916894][T25912] lo speed is unknown, defaulting to 1000 [ 2617.922965][T25912] lo speed is unknown, defaulting to 1000 [ 2618.649999][T25912] infiniband sz1: set down [ 2618.650071][T11732] lo speed is unknown, defaulting to 1000 [ 2618.650161][T25912] infiniband sz1: added lo [ 2618.676516][T25912] sz1: rxe_create_cq: returned err = -12 [ 2618.676593][T25912] infiniband sz1: Couldn't create ib_mad CQ [ 2618.676756][T25912] infiniband sz1: Couldn't open port 1 [ 2618.738796][T25912] RDS/IB: sz1: added [ 2618.739257][T25912] smc: adding ib device sz1 with port count 1 [ 2618.739286][T25912] smc: ib device sz1 port 1 has no pnetid [ 2618.739375][T11732] lo speed is unknown, defaulting to 1000 [ 2618.769019][T25912] lo speed is unknown, defaulting to 1000 [ 2620.054502][ T37] kauditd_printk_skb: 72 callbacks suppressed [ 2620.054520][ T37] audit: type=1326 audit(1762704939.752:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.055418][ T37] audit: type=1326 audit(1762704939.752:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.102923][ T37] audit: type=1326 audit(1762704939.802:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.102978][ T37] audit: type=1326 audit(1762704939.802:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.103020][ T37] audit: type=1326 audit(1762704939.802:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.103061][ T37] audit: type=1326 audit(1762704939.802:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.103102][ T37] audit: type=1326 audit(1762704939.802:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.106437][ T37] audit: type=1326 audit(1762704939.802:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.106489][ T37] audit: type=1326 audit(1762704939.802:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.106529][ T37] audit: type=1326 audit(1762704939.802:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25972 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725f4df6c9 code=0x7ffc0000 [ 2620.139620][T25976] 9pnet_fd: Insufficient options for proto=fd [ 2620.698437][T25912] lo speed is unknown, defaulting to 1000 [ 2621.320035][T25998] 9pnet_fd: Insufficient options for proto=fd [ 2621.892104][T26006] 9pnet_fd: Insufficient options for proto=fd [ 2621.992981][T25912] lo speed is unknown, defaulting to 1000 [ 2622.663578][T25912] lo speed is unknown, defaulting to 1000 [ 2623.515183][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 2624.223801][T25912] lo speed is unknown, defaulting to 1000 [ 2625.675427][T26089] batadv_slave_1: entered promiscuous mode [ 2625.676300][T26089] batadv_slave_1: left promiscuous mode [ 2625.999301][T26107] netlink: 580 bytes leftover after parsing attributes in process `syz.1.5970'. [ 2627.449711][ C0] ------------[ cut here ]------------ [ 2627.449728][ C0] refcount_t: addition on 0; use-after-free. [ 2627.450291][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 2627.450338][ C0] Modules linked in: [ 2627.450372][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2627.450428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2627.450461][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 2627.450487][ C0] Code: 00 00 e8 39 60 45 fd 5b 41 5e c3 cc cc cc cc cc e8 2b 60 45 fd c6 05 c0 15 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 17 a7 09 fd 90 <0f> 0b 90 90 eb d7 e8 0b 60 45 fd c6 05 a1 15 47 0a 01 90 48 c7 c7 [ 2627.450508][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 2627.450528][ C0] RAX: 15b02048b1a7ce00 RBX: 0000000000000002 RCX: ffff88801b2f5a00 [ 2627.450546][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2627.450560][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2627.450575][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 2627.450592][ C0] R13: ffff888037cc0460 R14: ffff888037cc0080 R15: dffffc0000000000 [ 2627.450610][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 2627.450628][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2627.450644][ C0] CR2: 00007f04b5d95f98 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 2627.450663][ C0] Call Trace: [ 2627.450678][ C0] [ 2627.450690][ C0] mptcp_schedule_work+0x164/0x1a0 [ 2627.450721][ C0] mptcp_tout_timer+0x21/0xa0 [ 2627.450752][ C0] call_timer_fn+0x17e/0x5f0 [ 2627.450783][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2627.450811][ C0] ? call_timer_fn+0xbe/0x5f0 [ 2627.450838][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2627.450930][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2627.450957][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2627.450980][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2627.451009][ C0] __run_timer_base+0x648/0x970 [ 2627.451054][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2627.451102][ C0] run_timer_softirq+0xb7/0x180 [ 2627.451127][ C0] handle_softirqs+0x22f/0x710 [ 2627.451163][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2627.451203][ C0] run_ktimerd+0xcf/0x190 [ 2627.451230][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 2627.451256][ C0] ? schedule+0x91/0x360 [ 2627.451291][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2627.451316][ C0] smpboot_thread_fn+0x542/0xa60 [ 2627.451345][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2627.451382][ C0] kthread+0x711/0x8a0 [ 2627.451416][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2627.451443][ C0] ? __pfx_kthread+0x10/0x10 [ 2627.451468][ C0] ? rt_spin_unlock+0x150/0x200 [ 2627.451497][ C0] ? rt_spin_unlock+0x161/0x200 [ 2627.451519][ C0] ? __pfx_kthread+0x10/0x10 [ 2627.451550][ C0] ret_from_fork+0x4bc/0x870 [ 2627.451580][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2627.451612][ C0] ? __switch_to_asm+0x39/0x70 [ 2627.451632][ C0] ? __switch_to_asm+0x33/0x70 [ 2627.451652][ C0] ? __pfx_kthread+0x10/0x10 [ 2627.451686][ C0] ret_from_fork_asm+0x1a/0x30 [ 2627.451729][ C0] [ 2627.451749][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2627.451766][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2627.451790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2627.451803][ C0] Call Trace: [ 2627.451811][ C0] [ 2627.451820][ C0] dump_stack_lvl+0x99/0x250 [ 2627.451851][ C0] ? __asan_memcpy+0x40/0x70 [ 2627.451877][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2627.451908][ C0] ? __pfx__printk+0x10/0x10 [ 2627.451951][ C0] vpanic+0x237/0x6d0 [ 2627.451972][ C0] ? __pfx_vpanic+0x10/0x10 [ 2627.452006][ C0] panic+0xb9/0xc0 [ 2627.452027][ C0] ? __pfx_panic+0x10/0x10 [ 2627.452076][ C0] __warn+0x31b/0x4b0 [ 2627.452095][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2627.452124][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2627.452146][ C0] report_bug+0x2be/0x4f0 [ 2627.452173][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2627.452197][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2627.452221][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 2627.452245][ C0] handle_bug+0x84/0x160 [ 2627.452267][ C0] exc_invalid_op+0x1a/0x50 [ 2627.452289][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2627.452310][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 2627.452335][ C0] Code: 00 00 e8 39 60 45 fd 5b 41 5e c3 cc cc cc cc cc e8 2b 60 45 fd c6 05 c0 15 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 17 a7 09 fd 90 <0f> 0b 90 90 eb d7 e8 0b 60 45 fd c6 05 a1 15 47 0a 01 90 48 c7 c7 [ 2627.452355][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 2627.452375][ C0] RAX: 15b02048b1a7ce00 RBX: 0000000000000002 RCX: ffff88801b2f5a00 [ 2627.452392][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2627.452406][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2627.452420][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 2627.452438][ C0] R13: ffff888037cc0460 R14: ffff888037cc0080 R15: dffffc0000000000 [ 2627.452478][ C0] mptcp_schedule_work+0x164/0x1a0 [ 2627.452506][ C0] mptcp_tout_timer+0x21/0xa0 [ 2627.452537][ C0] call_timer_fn+0x17e/0x5f0 [ 2627.452565][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2627.452593][ C0] ? call_timer_fn+0xbe/0x5f0 [ 2627.452620][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2627.452660][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2627.452711][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2627.452738][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2627.452769][ C0] __run_timer_base+0x648/0x970 [ 2627.452814][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2627.452861][ C0] run_timer_softirq+0xb7/0x180 [ 2627.452889][ C0] handle_softirqs+0x22f/0x710 [ 2627.452928][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2627.452962][ C0] run_ktimerd+0xcf/0x190 [ 2627.452988][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 2627.453012][ C0] ? schedule+0x91/0x360 [ 2627.453044][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2627.453078][ C0] smpboot_thread_fn+0x542/0xa60 [ 2627.453106][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2627.453144][ C0] kthread+0x711/0x8a0 [ 2627.453179][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2627.453204][ C0] ? __pfx_kthread+0x10/0x10 [ 2627.453231][ C0] ? rt_spin_unlock+0x150/0x200 [ 2627.453262][ C0] ? rt_spin_unlock+0x161/0x200 [ 2627.453284][ C0] ? __pfx_kthread+0x10/0x10 [ 2627.453315][ C0] ret_from_fork+0x4bc/0x870 [ 2627.453345][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2627.453377][ C0] ? __switch_to_asm+0x39/0x70 [ 2627.453399][ C0] ? __switch_to_asm+0x33/0x70 [ 2627.453420][ C0] ? __pfx_kthread+0x10/0x10 [ 2627.453452][ C0] ret_from_fork_asm+0x1a/0x30 [ 2627.453496][ C0] [ 2627.453791][ C0] Kernel Offset: disabled