last executing test programs: 10m12.632708137s ago: executing program 3 (id=4): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) socket$netlink(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x9) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200005fcdd4ce00000000000000080045000024000000000073907800000300e000000100000000fe9a"], 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[]) socket(0x10, 0x803, 0x0) 10m6.724829794s ago: executing program 4 (id=5): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x0) 9m56.988535169s ago: executing program 32 (id=4): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) socket$netlink(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x9) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200005fcdd4ce00000000000000080045000024000000000073907800000300e000000100000000fe9a"], 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[]) socket(0x10, 0x803, 0x0) 9m54.785051836s ago: executing program 4 (id=16): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x7, 0x1, 0x0, {0x15, 0x4, 0x3, 0xf, 0xf, 0x68, 0xd687, 0x8, 0x1, 0x46c, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0x10, [@rand_addr=0x64010100, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x3d, 0x1, 0x0, [{@multicast2, 0x3d}, {@multicast2, 0x406}, {@local, 0x2}, {@broadcast, 0x401}, {@broadcast, 0xd97d}, {@local, 0x1}]}]}}}}}}}, 0x0) 9m51.781228592s ago: executing program 4 (id=19): epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000540), &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, r0}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x11}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) 9m36.035305189s ago: executing program 33 (id=19): epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000540), &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, r0}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x11}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) 9m28.826216974s ago: executing program 0 (id=45): read(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x0, 0x10000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x1, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRES8=r3], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x400000000000a00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20000020004, r4, 0x1}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x8}, {0xe}, 0x2005, 0xbfbf}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000000001000009cfce63711400078008000140000000"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0x44080) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) 9m17.418897127s ago: executing program 0 (id=55): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(0x0, 0x0, 0x20000000000, 0x0) semctl$GETZCNT(0x0, 0xc48d798da5fe6db3, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5903, 0xda80, 0x24, 0x0, 0x0) r2 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x57de, 0x0, 0x0, 0x0, 0x0) 9m13.777515001s ago: executing program 0 (id=59): r0 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x7}, &(0x7f0000000580)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r0, 0xedd, 0x8acb, 0x41, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 9m13.086045706s ago: executing program 0 (id=60): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x7, @empty}}, 0x0, 0x7fc, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="93d9f7255baba7970886c06b31d58b288066", @ANYRES64=0x0], 0x20) 9m10.274120206s ago: executing program 0 (id=62): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 8m54.047820211s ago: executing program 34 (id=62): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6m15.21633677s ago: executing program 1 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000005d00)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, '),+\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 6m13.600482186s ago: executing program 1 (id=255): setfsgid(0xee00) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') 6m13.017259278s ago: executing program 1 (id=257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 6m11.733103787s ago: executing program 1 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x7000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 6m11.236838549s ago: executing program 1 (id=262): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) flock(0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) 6m7.430026306s ago: executing program 1 (id=267): socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000280)=[{0x6, 0x0, 0x10, 0x6}, {0xfa90, 0xe, 0xfc, 0x3}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) 5m51.14511537s ago: executing program 35 (id=267): socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000280)=[{0x6, 0x0, 0x10, 0x6}, {0xfa90, 0xe, 0xfc, 0x3}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) 5m28.899194329s ago: executing program 6 (id=302): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 5m28.312541518s ago: executing program 6 (id=304): r0 = open(0x0, 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 5m28.005348031s ago: executing program 6 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) 5m25.084092232s ago: executing program 6 (id=307): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) flock(0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) 5m17.366815292s ago: executing program 6 (id=315): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2b4, &(0x7f00000003c0)={[{0xff, 0x4e00, "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"}, {0xdd, 0x4e00, "e8bfa7747be01f3f95b02bbb4f035119bfd33becedcec49d7e812edaa2ecb3d8bb8ec5627c62bec7329d4f2931e06f6cd587ffd271f6d0d75c20092f02cddcd398f343ce4ad4f1c59cf64cb1e91183361f5be97ebd4538b02f49d1290ba9858b57bbeaec15190e072053a6e79b11b02bf44f5611bdd99f71b2fdbbc62d71bb71e2d934e0e99f55b7de7a60b872def220f98f000a8cab1a6182d75c6272d32a08ddbde1e4dd3009957762468bc183dd72a178b9ae9a293c1ffe7114da9e46fac0c5ce2fcdc785151d2a9af9893a03ed8c31f5e905d180f350ab57ad0191"}, {0xc6, 0x4e00, "4211811c1617d1775f52d83f8c5a04390f52fee2b17e8fd09439d991784a5026383ca19636a6ea1c039c569e7fce8b595ea9ba8c845e987f58b34ce804a2ff07244083d96654d9b8e6076a68867902fe6a639a553f433c534f2f5f21183f76a948cdaa29984807c382dd47a3777879173ec64354e038d5bd767dc2c05ba96662ff34e382a8d3ba4006ec4b2e8ed376256886774988d87acaad6831335237ce7ef86b93f47ab292cd4dbce616c4d1317e070e0f13db81ac7bc92e3081c575b0544c5c5c28a584"}]}) 5m13.587754549s ago: executing program 6 (id=318): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r0, 0x1) 4m57.335593643s ago: executing program 36 (id=318): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r0, 0x1) 3m19.887215003s ago: executing program 9 (id=390): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) 3m18.991590113s ago: executing program 9 (id=391): r0 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) 3m18.092577319s ago: executing program 9 (id=394): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x7}, &(0x7f0000000580)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 3m11.519491624s ago: executing program 9 (id=400): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) dup(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x341a80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x3554000) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) io_uring_setup(0x67bb, &(0x7f00000025c0)={0x0, 0xae76, 0x20000, 0x801, 0x106e}) 3m9.532410712s ago: executing program 9 (id=405): setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 3m6.812740271s ago: executing program 9 (id=409): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m51.563062392s ago: executing program 37 (id=409): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.427985968s ago: executing program 2 (id=613): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) pipe(&(0x7f0000000000)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x48600, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xdddd0000, 0x1000, &(0x7f000000d000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.254913849s ago: executing program 7 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 4.155767402s ago: executing program 2 (id=615): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x4, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x7, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.150620462s ago: executing program 7 (id=616): r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa42, 0x9) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x80}}, 0x81) 3.063056399s ago: executing program 7 (id=617): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) 2.900914698s ago: executing program 2 (id=618): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000a93000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bee000/0x400000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.342075157s ago: executing program 7 (id=619): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @b={0x91, 0x3, 0x0, 0x1, 0x0, 0xb, 0xe, {}, 0x0, 0x3, 0x2, 0x0, 0x51, "729eb038141c4bdca69ba96554d39f43116193993d85ea7bded56da2c7fe89f1b70a6361e52552a455106778b298a5468d74ffd16886b0a6246b0ba581fc612912b4170d83c00777e41abc3521f7df8ed4"}}, 0x61) 2.301092618s ago: executing program 2 (id=620): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) dup(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x341a80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x3554000) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) io_uring_setup(0x67bb, &(0x7f00000025c0)={0x0, 0xae76, 0x20000, 0x801, 0x106e}) 1.325110073s ago: executing program 7 (id=621): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1cb041, 0x9) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 1.278733028s ago: executing program 2 (id=622): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) pipe(&(0x7f0000000000)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x48600, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xdddd0000, 0x1000, &(0x7f000000d000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 740.632146ms ago: executing program 7 (id=623): ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x63}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xf, 0x19831, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=624): r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa42, 0x9) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x80}}, 0x81) kernel console output (not intermixed with test programs): T5780] Bluetooth: hci3: command tx timeout [ 456.556304][ T7440] loop6: detected capacity change from 0 to 128 [ 457.788610][ T5780] Bluetooth: hci7: command tx timeout [ 457.788814][ T5788] Bluetooth: hci5: command tx timeout [ 458.152309][ T7440] syz.6.291: attempt to access beyond end of device [ 458.152309][ T7440] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 458.262546][ T7440] syz.6.291: attempt to access beyond end of device [ 458.262546][ T7440] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 458.353573][ T7440] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 458.374123][ T1000] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.393766][ T7440] syz.6.291: attempt to access beyond end of device [ 458.393766][ T7440] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 458.456238][ T7440] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 458.489894][ T7440] syz.6.291: attempt to access beyond end of device [ 458.489894][ T7440] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 458.562681][ T7384] chnl_net:caif_netlink_parms(): no params data found [ 458.591460][ T7440] syz.6.291: attempt to access beyond end of device [ 458.591460][ T7440] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 458.628795][ T7440] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 458.650395][ T7440] syz.6.291: attempt to access beyond end of device [ 458.650395][ T7440] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 458.681409][ T1000] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.689024][ T7440] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 458.903341][ T7454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 458.986044][ T1000] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.309148][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 460.561483][ T7476] loop2: detected capacity change from 0 to 512 [ 460.678878][ T7476] EXT4-fs: journaled quota format not specified [ 460.887238][ T1000] bridge_slave_1: left allmulticast mode [ 460.961642][ T1000] bridge_slave_1: left promiscuous mode [ 460.968174][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.331122][ T1000] bridge_slave_0: left allmulticast mode [ 461.421040][ T1000] bridge_slave_0: left promiscuous mode [ 461.427573][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.528237][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.630584][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.738305][ T1000] bond0 (unregistering): Released all slaves [ 465.984894][ T7508] loop2: detected capacity change from 0 to 764 [ 466.287733][ T7508] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 466.560822][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.568346][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.674850][ T7384] bridge_slave_0: entered allmulticast mode [ 466.722346][ T7384] bridge_slave_0: entered promiscuous mode [ 466.853925][ T1000] hsr_slave_0: left promiscuous mode [ 466.895004][ T1000] hsr_slave_1: left promiscuous mode [ 466.913295][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.941092][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.973224][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.003917][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.106340][ T1000] veth1_macvtap: left promiscuous mode [ 467.119924][ T1000] veth0_macvtap: left promiscuous mode [ 467.139691][ T1000] veth1_vlan: left promiscuous mode [ 467.175035][ T1000] veth0_vlan: left promiscuous mode [ 467.538893][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 468.157045][ T5833] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 468.533834][ T5833] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.545350][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.555327][ T5833] usb 3-1: Product: syz [ 468.561132][ T5833] usb 3-1: Manufacturer: syz [ 468.566402][ T5833] usb 3-1: SerialNumber: syz [ 468.709862][ T5833] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 468.838146][ T794] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 468.912572][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 469.302082][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 469.479040][ T5833] usb 3-1: USB disconnect, device number 12 [ 469.829992][ T7399] chnl_net:caif_netlink_parms(): no params data found [ 469.967292][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.006339][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.040547][ T7384] bridge_slave_1: entered allmulticast mode [ 470.081040][ T7384] bridge_slave_1: entered promiscuous mode [ 470.267555][ T794] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 470.345689][ T794] ath9k_htc: Failed to initialize the device [ 470.366587][ T5833] usb 3-1: ath9k_htc: USB layer deinitialized [ 470.988203][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.996674][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.007270][ T7397] bridge_slave_0: entered allmulticast mode [ 471.037529][ T7397] bridge_slave_0: entered promiscuous mode [ 471.278182][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.324939][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.423414][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.458919][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.466602][ T7397] bridge_slave_1: entered allmulticast mode [ 471.502522][ T7397] bridge_slave_1: entered promiscuous mode [ 471.970509][ T7384] team0: Port device team_slave_0 added [ 472.035694][ T7384] team0: Port device team_slave_1 added [ 472.482170][ T1000] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.545074][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.568725][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.858198][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.042151][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.123322][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.141222][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.243025][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.374364][ T1000] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.455999][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.658075][ T1000] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.935934][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.954288][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.974900][ T7399] bridge_slave_0: entered allmulticast mode [ 474.007519][ T7399] bridge_slave_0: entered promiscuous mode [ 474.075457][ T1000] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.294916][ T7397] team0: Port device team_slave_0 added [ 474.425146][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.449193][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.477781][ T7399] bridge_slave_1: entered allmulticast mode [ 474.503398][ T7399] bridge_slave_1: entered promiscuous mode [ 474.768893][ T7397] team0: Port device team_slave_1 added [ 474.809102][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 474.895236][ T7399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.171502][ T7384] hsr_slave_0: entered promiscuous mode [ 475.201719][ T7384] hsr_slave_1: entered promiscuous mode [ 475.338106][ T7399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.392390][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.410107][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.446405][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.606240][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.633156][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.679256][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.037889][ T7399] team0: Port device team_slave_0 added [ 476.166822][ T7399] team0: Port device team_slave_1 added [ 476.233685][ T1000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.605562][ T1000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.956300][ T7575] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 476.998936][ T1000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.047836][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.313'. [ 477.091945][ T7397] hsr_slave_0: entered promiscuous mode [ 477.113306][ T7397] hsr_slave_1: entered promiscuous mode [ 477.137228][ T7397] debugfs: 'hsr0' already exists in 'hsr' [ 477.168579][ T7397] Cannot create hsr debugfs directory [ 477.229435][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.236562][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.288218][ T7399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.397110][ T7575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.426346][ T1000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.469114][ T7578] bond2: (slave dummy0): Releasing active interface [ 477.511213][ T7578] bond3: (slave dummy0): making interface the new active one [ 477.525047][ T7578] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 477.615108][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.652516][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.723950][ T7399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.512732][ T5837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 478.823337][ T7399] hsr_slave_0: entered promiscuous mode [ 478.842437][ T7399] hsr_slave_1: entered promiscuous mode [ 478.852264][ T7399] debugfs: 'hsr0' already exists in 'hsr' [ 478.858203][ T7399] Cannot create hsr debugfs directory [ 479.376631][ T1000] bridge_slave_1: left allmulticast mode [ 479.384599][ T1000] bridge_slave_1: left promiscuous mode [ 479.393636][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.408077][ T1000] bridge_slave_0: left allmulticast mode [ 479.415329][ T1000] bridge_slave_0: left promiscuous mode [ 479.423328][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.441458][ T1000] bridge_slave_1: left allmulticast mode [ 479.447744][ T1000] bridge_slave_1: left promiscuous mode [ 479.459003][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.472062][ T1000] bridge_slave_0: left allmulticast mode [ 479.477932][ T1000] bridge_slave_0: left promiscuous mode [ 479.488022][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.592553][ T5837] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.377272][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.397399][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.437161][ T1000] bond0 (unregistering): Released all slaves [ 480.490286][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.499381][ T5837] usb 7-1: Product: syz [ 480.503718][ T5837] usb 7-1: Manufacturer: syz [ 480.508937][ T5837] usb 7-1: SerialNumber: syz [ 480.594511][ T5837] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 480.673215][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 480.885625][ T7590] loop2: detected capacity change from 0 to 1024 [ 480.928128][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.019283][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.040346][ T7590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.069981][ T1000] bond0 (unregistering): Released all slaves [ 481.096650][ T1000] bond1 (unregistering): Released all slaves [ 481.123829][ T5833] usb 7-1: USB disconnect, device number 4 [ 481.206195][ T1000] bond2 (unregistering): Released all slaves [ 481.227706][ T1000] bond3 (unregistering): (slave dummy0): Releasing active interface [ 481.256714][ T1000] bond3 (unregistering): Released all slaves [ 481.372175][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.863257][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 481.890341][ T10] ath9k_htc: Failed to initialize the device [ 481.906781][ T5833] usb 7-1: ath9k_htc: USB layer deinitialized [ 482.069718][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d3b200: rx timeout, send abort [ 482.570850][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d30a00: rx timeout, send abort [ 482.581258][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d3b200: abort rx timeout. Force session deactivation [ 482.722918][ T7384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.817192][ T1000] hsr_slave_0: left promiscuous mode [ 482.840013][ T1000] hsr_slave_1: left promiscuous mode [ 482.850957][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.860288][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.876394][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.884223][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.926332][ T1000] hsr_slave_0: left promiscuous mode [ 482.935708][ T1000] hsr_slave_1: left promiscuous mode [ 482.947476][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.961407][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.973046][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.987384][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.034843][ T1000] veth1_macvtap: left promiscuous mode [ 483.041257][ T1000] veth0_macvtap: left promiscuous mode [ 483.047112][ T1000] veth1_vlan: left promiscuous mode [ 483.057125][ T1000] veth0_vlan: left promiscuous mode [ 483.062412][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f44000: rx timeout, send abort [ 483.063915][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056f44000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 483.086456][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d30a00: abort rx timeout. Force session deactivation [ 483.123301][ T1000] veth1_macvtap: left promiscuous mode [ 483.142863][ T1000] veth0_macvtap: left promiscuous mode [ 483.149336][ T1000] veth1_vlan: left promiscuous mode [ 483.154830][ T1000] veth0_vlan: left promiscuous mode [ 485.521258][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 485.588097][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 487.084597][ T7612] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 487.756685][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 488.734349][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 489.546188][ T7384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 489.642401][ T7384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 489.860665][ T7384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 491.166275][ T7397] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 491.399359][ T7397] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 491.494696][ T7397] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 491.702310][ T7397] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 492.234630][ T7399] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 492.523070][ T7399] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 492.682311][ T7399] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 492.837426][ T7399] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 493.746240][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.594351][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.617604][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.778469][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.786026][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.953271][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.960792][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.017228][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.154783][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.162313][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.384308][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.391817][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.640274][ T7399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.918810][ T7399] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.140775][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.148218][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.266556][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.274164][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.503950][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.145003][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.867655][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.454219][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.473430][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.490603][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.512968][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.544304][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.414373][ T7384] veth0_vlan: entered promiscuous mode [ 500.707641][ T7384] veth1_vlan: entered promiscuous mode [ 501.445211][ T7397] veth0_vlan: entered promiscuous mode [ 501.620635][ T5788] Bluetooth: hci1: command tx timeout [ 501.890562][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 502.060959][ T7384] veth0_macvtap: entered promiscuous mode [ 502.138024][ T7397] veth1_vlan: entered promiscuous mode [ 502.539146][ T7399] veth0_vlan: entered promiscuous mode [ 502.664837][ T7399] veth1_vlan: entered promiscuous mode [ 503.092276][ T7397] veth0_macvtap: entered promiscuous mode [ 503.177607][ T7397] veth1_macvtap: entered promiscuous mode [ 503.653069][ T7399] veth0_macvtap: entered promiscuous mode [ 503.665382][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.710581][ T5788] Bluetooth: hci1: command tx timeout [ 503.799578][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.799865][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.800495][ T7683] bridge_slave_0: entered allmulticast mode [ 503.825228][ T7683] bridge_slave_0: entered promiscuous mode [ 503.885280][ T7399] veth1_macvtap: entered promiscuous mode [ 503.907550][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.908032][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.910168][ T7683] bridge_slave_1: entered allmulticast mode [ 503.913266][ T7683] bridge_slave_1: entered promiscuous mode [ 503.976410][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.199449][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.223585][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.225347][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.268852][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.339957][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.346707][ T85] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.346962][ T85] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.347155][ T85] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.347352][ T85] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.504792][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.557166][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.627695][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.932660][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.022214][ T7683] team0: Port device team_slave_0 added [ 505.069655][ T7683] team0: Port device team_slave_1 added [ 505.507160][ T7432] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.670967][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.671037][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.681307][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.682479][ T7432] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.682723][ T7432] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.682916][ T7432] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.687373][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.687437][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.687576][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.823735][ T5780] Bluetooth: hci1: command tx timeout [ 505.971183][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.982091][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.985406][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.996867][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.004254][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.423403][ T5788] Bluetooth: hci2: command tx timeout [ 506.983565][ T7683] hsr_slave_0: entered promiscuous mode [ 506.987660][ T7683] hsr_slave_1: entered promiscuous mode [ 507.023357][ T7683] debugfs: 'hsr0' already exists in 'hsr' [ 507.023437][ T7683] Cannot create hsr debugfs directory [ 507.769959][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.795235][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.805215][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.811717][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.838907][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 507.868669][ T5780] Bluetooth: hci1: command tx timeout [ 508.259693][ T5780] Bluetooth: hci3: command tx timeout [ 508.505509][ T5780] Bluetooth: hci2: command tx timeout [ 509.639840][ T7631] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 509.744197][ T12] bridge_slave_1: left allmulticast mode [ 509.751852][ T12] bridge_slave_1: left promiscuous mode [ 509.758338][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.787313][ T12] bridge_slave_0: left allmulticast mode [ 509.797848][ T12] bridge_slave_0: left promiscuous mode [ 509.807268][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.857816][ T7631] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 509.894172][ T7631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.908212][ T7631] usb 3-1: Product: syz [ 509.917850][ T7631] usb 3-1: Manufacturer: syz [ 509.925709][ T7631] usb 3-1: SerialNumber: syz [ 509.938857][ T5780] Bluetooth: hci5: command tx timeout [ 509.967053][ T7631] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 510.017912][ T5403] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 510.341473][ T5780] Bluetooth: hci3: command tx timeout [ 510.471788][ T5830] usb 3-1: USB disconnect, device number 13 [ 510.508602][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 510.581082][ T5780] Bluetooth: hci2: command tx timeout [ 510.602080][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.620378][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.634908][ T12] bond0 (unregistering): Released all slaves [ 510.908246][ T12] hsr_slave_0: left promiscuous mode [ 510.942978][ T12] hsr_slave_1: left promiscuous mode [ 510.961544][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.975837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.029503][ T12] veth0_macvtap: left promiscuous mode [ 511.035707][ T12] veth1_vlan: left promiscuous mode [ 511.042709][ T12] veth0_vlan: left promiscuous mode [ 511.158859][ T5403] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 511.172000][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.184402][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.193331][ T5403] ath9k_htc: Failed to initialize the device [ 511.267749][ T5830] usb 3-1: ath9k_htc: USB layer deinitialized [ 511.851221][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056dfc200: rx timeout, send abort [ 512.021025][ T5780] Bluetooth: hci5: command tx timeout [ 512.033229][ T12] team0 (unregistering): Port device team_slave_1 removed [ 512.065794][ T12] team0 (unregistering): Port device team_slave_0 removed [ 512.295740][ T7723] chnl_net:caif_netlink_parms(): no params data found [ 512.351975][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805555e400: rx timeout, send abort [ 512.360818][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056dfc200: abort rx timeout. Force session deactivation [ 512.419196][ T5780] Bluetooth: hci3: command tx timeout [ 512.503328][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 512.663304][ T5780] Bluetooth: hci2: command tx timeout [ 512.844247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805555f000: rx timeout, send abort [ 512.854196][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805555f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 512.870093][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805555e400: abort rx timeout. Force session deactivation [ 512.892735][ T7683] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 512.990461][ T7683] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 513.311022][ T7791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.327'. [ 514.130365][ T5780] Bluetooth: hci5: command tx timeout [ 514.211961][ T7683] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 514.522567][ T5780] Bluetooth: hci3: command tx timeout [ 514.710791][ T7683] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 514.827930][ T7743] chnl_net:caif_netlink_parms(): no params data found [ 515.478030][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.747586][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.969719][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.004292][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.021747][ T7732] bridge_slave_0: entered allmulticast mode [ 516.033311][ T7732] bridge_slave_0: entered promiscuous mode [ 516.057520][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.065937][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.083947][ T7732] bridge_slave_1: entered allmulticast mode [ 516.094106][ T7732] bridge_slave_1: entered promiscuous mode [ 516.135979][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.164578][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.177673][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.194496][ T5780] Bluetooth: hci5: command tx timeout [ 516.208224][ T7723] bridge_slave_0: entered allmulticast mode [ 516.224008][ T7723] bridge_slave_0: entered promiscuous mode [ 516.524886][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.615288][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.677287][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.685676][ T7723] bridge_slave_1: entered allmulticast mode [ 516.703307][ T7723] bridge_slave_1: entered promiscuous mode [ 516.926751][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.117266][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.183568][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.200668][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.213382][ T7743] bridge_slave_0: entered allmulticast mode [ 517.235571][ T7743] bridge_slave_0: entered promiscuous mode [ 517.274135][ T7723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.318125][ T7723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.481596][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.502987][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.535327][ T7743] bridge_slave_1: entered allmulticast mode [ 517.563689][ T7743] bridge_slave_1: entered promiscuous mode [ 517.663475][ T7732] team0: Port device team_slave_0 added [ 517.894913][ T7732] team0: Port device team_slave_1 added [ 518.125466][ T7743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.157819][ T7723] team0: Port device team_slave_0 added [ 518.233189][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.244055][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.290825][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.387684][ T7743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.435570][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.451068][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.478144][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.806895][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.161329][ T7807] netlink: 'syz.2.329': attribute type 2 has an invalid length. [ 519.871804][ T7723] team0: Port device team_slave_1 added [ 519.895651][ T7743] team0: Port device team_slave_0 added [ 519.923773][ T7743] team0: Port device team_slave_1 added [ 520.009824][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.334739][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.401582][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.414652][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.464098][ T7723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.555489][ T7732] hsr_slave_0: entered promiscuous mode [ 520.575918][ T7732] hsr_slave_1: entered promiscuous mode [ 520.651462][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.700316][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.707427][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.766921][ T7723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.819775][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.827157][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.878216][ T7743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.910135][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.917568][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.945611][ T7743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.328158][ T7723] hsr_slave_0: entered promiscuous mode [ 521.344374][ T7723] hsr_slave_1: entered promiscuous mode [ 521.354978][ T7723] debugfs: 'hsr0' already exists in 'hsr' [ 521.361880][ T7723] Cannot create hsr debugfs directory [ 522.150689][ T7743] hsr_slave_0: entered promiscuous mode [ 522.162168][ T7743] hsr_slave_1: entered promiscuous mode [ 522.171926][ T7743] debugfs: 'hsr0' already exists in 'hsr' [ 522.177795][ T7743] Cannot create hsr debugfs directory [ 522.435920][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.646890][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.706770][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.940402][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.191827][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.630925][ T7683] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.936585][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.944144][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.233242][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.240805][ T7616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.376781][ T12] bridge_slave_1: left allmulticast mode [ 524.398224][ T12] bridge_slave_1: left promiscuous mode [ 524.406440][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.435253][ T12] bridge_slave_0: left allmulticast mode [ 524.446782][ T12] bridge_slave_0: left promiscuous mode [ 524.454933][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.477583][ T12] bridge_slave_1: left allmulticast mode [ 524.491997][ T12] bridge_slave_1: left promiscuous mode [ 524.503540][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.517558][ T12] bridge_slave_0: left allmulticast mode [ 524.526080][ T12] bridge_slave_0: left promiscuous mode [ 524.537829][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.572259][ T12] bridge_slave_1: left allmulticast mode [ 524.578085][ T12] bridge_slave_1: left promiscuous mode [ 524.597799][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.618169][ T12] bridge_slave_0: left allmulticast mode [ 524.624431][ T12] bridge_slave_0: left promiscuous mode [ 524.637151][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.610008][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.634255][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.653663][ T12] bond0 (unregistering): Released all slaves [ 525.825960][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.841806][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.857609][ T12] bond0 (unregistering): Released all slaves [ 526.082397][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.099265][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.113550][ T12] bond0 (unregistering): Released all slaves [ 527.000833][ T12] hsr_slave_0: left promiscuous mode [ 527.014027][ T12] hsr_slave_1: left promiscuous mode [ 527.022325][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.028661][ T5837] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 527.031006][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.051601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.064155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.095183][ T12] hsr_slave_0: left promiscuous mode [ 527.109778][ T12] hsr_slave_1: left promiscuous mode [ 527.126391][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.137889][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.152497][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.163928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.183834][ T12] hsr_slave_0: left promiscuous mode [ 527.197304][ T12] hsr_slave_1: left promiscuous mode [ 527.202409][ T5837] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 527.206145][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.220104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.227662][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.231739][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.241036][ T5837] usb 3-1: Product: syz [ 527.247588][ T5837] usb 3-1: Manufacturer: syz [ 527.247858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.254058][ T5837] usb 3-1: SerialNumber: syz [ 527.299809][ T5837] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 527.323507][ T5403] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 527.323925][ T12] veth1_macvtap: left promiscuous mode [ 527.340905][ T12] veth0_macvtap: left promiscuous mode [ 527.346807][ T12] veth1_vlan: left promiscuous mode [ 527.353869][ T12] veth0_vlan: left promiscuous mode [ 527.363858][ T12] veth1_macvtap: left promiscuous mode [ 527.383303][ T12] veth0_macvtap: left promiscuous mode [ 527.393736][ T12] veth1_vlan: left promiscuous mode [ 527.409232][ T12] veth0_vlan: left promiscuous mode [ 527.420101][ T12] veth1_macvtap: left promiscuous mode [ 527.425800][ T12] veth0_macvtap: left promiscuous mode [ 527.433766][ T12] veth1_vlan: left promiscuous mode [ 527.439627][ T12] veth0_vlan: left promiscuous mode [ 527.776242][ T7617] usb 3-1: USB disconnect, device number 14 [ 528.498758][ T5403] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 528.506693][ T5403] ath9k_htc: Failed to initialize the device [ 528.516218][ T7617] usb 3-1: ath9k_htc: USB layer deinitialized [ 528.690543][ T12] team0 (unregistering): Port device team_slave_1 removed [ 528.707424][ C0] vcan0: j1939_tp_rxtimer: 0xffff888016602e00: rx timeout, send abort [ 528.721276][ T12] team0 (unregistering): Port device team_slave_0 removed [ 529.109016][ T12] team0 (unregistering): Port device team_slave_1 removed [ 529.155099][ T12] team0 (unregistering): Port device team_slave_0 removed [ 529.208147][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563f3800: rx timeout, send abort [ 529.216894][ C0] vcan0: j1939_tp_rxtimer: 0xffff888016602e00: abort rx timeout. Force session deactivation [ 529.570302][ T12] team0 (unregistering): Port device team_slave_1 removed [ 529.602076][ T12] team0 (unregistering): Port device team_slave_0 removed [ 529.703307][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021be9a00: rx timeout, send abort [ 529.713079][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021be9a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 529.728554][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563f3800: abort rx timeout. Force session deactivation [ 530.734755][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.265459][ T7732] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 531.388162][ T7732] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 531.503670][ T7732] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 531.662918][ T7732] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 531.995777][ T7723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.204475][ T7723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.446224][ T7723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.863781][ T7837] netlink: 'syz.2.336': attribute type 2 has an invalid length. [ 533.696426][ T7723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 534.163656][ T7743] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 534.359728][ T7743] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 534.502702][ T7743] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 534.553948][ T7743] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 535.257455][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.343174][ T7683] veth0_vlan: entered promiscuous mode [ 535.561945][ T7683] veth1_vlan: entered promiscuous mode [ 535.647065][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.777784][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.785561][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.002120][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.018570][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.026017][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.437268][ T7723] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.457253][ T7683] veth0_macvtap: entered promiscuous mode [ 536.605567][ T7683] veth1_macvtap: entered promiscuous mode [ 536.706286][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.713838][ T7432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.827795][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.835374][ T7432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.398931][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.632927][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.936017][ T7432] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.976084][ T7432] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.130051][ T7432] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.180555][ T7432] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.231261][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.459190][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.550992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.558589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.691855][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.699445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.995703][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.436627][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.245408][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.566634][ T7732] veth0_vlan: entered promiscuous mode [ 542.714489][ T7732] veth1_vlan: entered promiscuous mode [ 543.178099][ T7723] veth0_vlan: entered promiscuous mode [ 543.372021][ T7723] veth1_vlan: entered promiscuous mode [ 543.403571][ T7732] veth0_macvtap: entered promiscuous mode [ 543.471630][ T7732] veth1_macvtap: entered promiscuous mode [ 543.603662][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805558c200: rx timeout, send abort [ 543.675479][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.813244][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.835046][ T7723] veth0_macvtap: entered promiscuous mode [ 543.955143][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.985376][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.010170][ T7723] veth1_macvtap: entered promiscuous mode [ 544.062199][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.082445][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.104403][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805558d000: rx timeout, send abort [ 544.113173][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805558c200: abort rx timeout. Force session deactivation [ 544.234152][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.347459][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.599564][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f4ca00: rx timeout, send abort [ 544.609553][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056f4ca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 544.625321][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805558d000: abort rx timeout. Force session deactivation [ 544.670242][ T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.695669][ T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.825096][ T7743] veth0_vlan: entered promiscuous mode [ 544.828901][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.891780][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.897092][ T3446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.983544][ T3446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.298123][ T7743] veth1_vlan: entered promiscuous mode [ 545.368860][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.377306][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.897851][ T7743] veth0_macvtap: entered promiscuous mode [ 546.038288][ T7743] veth1_macvtap: entered promiscuous mode [ 547.166829][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.591282][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.224093][ T7949] netlink: 'syz.2.343': attribute type 2 has an invalid length. [ 550.003958][ T7432] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.142998][ T7432] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.289234][ T7432] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.404923][ T7432] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.665480][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801661c600: rx timeout, send abort [ 557.165619][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f51400: rx timeout, send abort [ 557.174905][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801661c600: abort rx timeout. Force session deactivation [ 557.661206][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804bbfd800: rx timeout, send abort [ 557.671263][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804bbfd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 557.687156][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f51400: abort rx timeout. Force session deactivation [ 559.555433][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.618769][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.168695][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.168779][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.812117][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.908559][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.173830][ T8041] netlink: 'syz.9.353': attribute type 2 has an invalid length. [ 562.484258][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.573196][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.697871][ T8057] ip6erspan0: entered promiscuous mode [ 567.443931][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ddae00: rx timeout, send abort [ 567.944675][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056dda600: rx timeout, send abort [ 567.953671][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ddae00: abort rx timeout. Force session deactivation [ 568.411120][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880167bea00: rx timeout, send abort [ 568.421528][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880167bea00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 568.453265][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056dda600: abort rx timeout. Force session deactivation [ 569.296389][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 569.329474][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 569.342676][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.355512][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.368709][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.585215][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 569.603940][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 569.639139][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 569.655311][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 569.667334][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 571.464575][ T5788] Bluetooth: hci4: command tx timeout [ 571.862934][ T5788] Bluetooth: hci6: command tx timeout [ 572.612681][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.625752][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.252930][ T143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.321178][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805558c800: rx timeout, send abort [ 573.594388][ T5788] Bluetooth: hci4: command tx timeout [ 573.755617][ T143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.815592][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 573.821908][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812ec30200: rx timeout, send abort [ 573.831303][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805558c800: abort rx timeout. Force session deactivation [ 573.916446][ T143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.938942][ T5788] Bluetooth: hci6: command tx timeout [ 574.204481][ T143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.368270][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880917d4200: rx timeout, send abort [ 574.377552][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812ec30200: abort rx timeout. Force session deactivation [ 574.393027][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880917d4200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 575.308499][ T8132] netlink: 'syz.7.368': attribute type 2 has an invalid length. [ 575.639590][ T5788] Bluetooth: hci4: command tx timeout [ 576.020939][ T5788] Bluetooth: hci6: command tx timeout [ 577.606659][ T8074] chnl_net:caif_netlink_parms(): no params data found [ 577.925265][ T5788] Bluetooth: hci4: command tx timeout [ 578.910761][ T5788] Bluetooth: hci6: command tx timeout [ 582.027615][ T143] bridge_slave_1: left allmulticast mode [ 582.059560][ T143] bridge_slave_1: left promiscuous mode [ 582.552731][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.821784][ T143] bridge_slave_0: left allmulticast mode [ 582.872903][ T143] bridge_slave_0: left promiscuous mode [ 582.925067][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.497711][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e81c00: rx timeout, send abort [ 584.694795][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.767301][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.856199][ T143] bond0 (unregistering): Released all slaves [ 584.997518][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563f7e00: rx timeout, send abort [ 585.008786][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e81c00: abort rx timeout. Force session deactivation [ 585.314103][ T8188] loop2: detected capacity change from 0 to 512 [ 585.490857][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f49000: rx timeout, send abort [ 585.500994][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056f49000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 585.516772][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563f7e00: abort rx timeout. Force session deactivation [ 585.595868][ T8188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.695220][ T8188] ext4 filesystem being mounted at /168/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.836018][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.872083][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.938163][ T8081] bridge_slave_0: entered allmulticast mode [ 585.986442][ T8081] bridge_slave_0: entered promiscuous mode [ 586.108150][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.209580][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.217036][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.269102][ T8074] bridge_slave_0: entered allmulticast mode [ 586.311878][ T8074] bridge_slave_0: entered promiscuous mode [ 586.346988][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.383962][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.429330][ T8081] bridge_slave_1: entered allmulticast mode [ 586.497688][ T8081] bridge_slave_1: entered promiscuous mode [ 587.704801][ T8209] netlink: 'syz.7.383': attribute type 2 has an invalid length. [ 590.164781][ T143] hsr_slave_0: left promiscuous mode [ 590.231896][ T143] hsr_slave_1: left promiscuous mode [ 590.252717][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.270117][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.402309][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.439105][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.529572][ T143] veth1_macvtap: left promiscuous mode [ 592.535283][ T143] veth0_macvtap: left promiscuous mode [ 592.584862][ T143] veth1_vlan: left promiscuous mode [ 592.599843][ T143] veth0_vlan: left promiscuous mode [ 593.801372][ T143] team0 (unregistering): Port device team_slave_1 removed [ 593.848136][ T143] team0 (unregistering): Port device team_slave_0 removed [ 594.131898][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.144324][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.154766][ T8074] bridge_slave_1: entered allmulticast mode [ 594.200002][ T8074] bridge_slave_1: entered promiscuous mode [ 594.977974][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.045719][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.330687][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.617027][ T8236] xt_hashlimit: size too large, truncated to 1048576 [ 595.703178][ T8241] syz.7.389 uses obsolete (PF_INET,SOCK_PACKET) [ 595.715086][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.155727][ T8081] team0: Port device team_slave_0 added [ 596.232365][ T8081] team0: Port device team_slave_1 added [ 596.298274][ T8074] team0: Port device team_slave_0 added [ 596.485871][ T8074] team0: Port device team_slave_1 added [ 596.697688][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'. [ 596.766955][ T143] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.151018][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.200437][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.288630][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.374428][ T143] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.455227][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.504475][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.589579][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.663770][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.699249][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.787218][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.837953][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.858881][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.506481][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.567915][ T143] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.784839][ T8273] netlink: 'syz.2.395': attribute type 2 has an invalid length. [ 600.260007][ T143] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.666190][ T8074] hsr_slave_0: entered promiscuous mode [ 603.699716][ T8074] hsr_slave_1: entered promiscuous mode [ 603.708137][ T8074] debugfs: 'hsr0' already exists in 'hsr' [ 603.741504][ T8074] Cannot create hsr debugfs directory [ 603.865113][ T8081] hsr_slave_0: entered promiscuous mode [ 603.924550][ T8284] loop2: detected capacity change from 0 to 128 [ 603.964480][ T8081] hsr_slave_1: entered promiscuous mode [ 604.047621][ T8081] debugfs: 'hsr0' already exists in 'hsr' [ 604.079979][ T8081] Cannot create hsr debugfs directory [ 604.105810][ T8284] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 604.219457][ T8284] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 604.478553][ T29] audit: type=1804 audit(1771396491.167:60): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.399" name="/newroot/176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=12 res=1 errno=0 [ 605.497372][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 606.076685][ T143] bridge_slave_1: left allmulticast mode [ 606.100781][ T143] bridge_slave_1: left promiscuous mode [ 606.107403][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.320706][ T143] bridge_slave_0: left allmulticast mode [ 606.326538][ T143] bridge_slave_0: left promiscuous mode [ 606.380323][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.229061][ T8323] netlink: 'syz.2.407': attribute type 2 has an invalid length. [ 610.997887][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.121588][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.224059][ T143] bond0 (unregistering): Released all slaves [ 614.187544][ T143] hsr_slave_0: left promiscuous mode [ 614.255624][ T143] hsr_slave_1: left promiscuous mode [ 614.281256][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.303735][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.327168][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.398690][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.505704][ T143] veth1_macvtap: left promiscuous mode [ 614.511625][ T143] veth0_macvtap: left promiscuous mode [ 614.517851][ T143] veth1_vlan: left promiscuous mode [ 614.550569][ T143] veth0_vlan: left promiscuous mode [ 615.898210][ T143] team0 (unregistering): Port device team_slave_1 removed [ 616.027784][ T143] team0 (unregistering): Port device team_slave_0 removed [ 616.210197][ T8367] netlink: 68 bytes leftover after parsing attributes in process `syz.7.414'. [ 617.852760][ T8074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.946806][ T8074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 618.177887][ T8074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.281473][ T8074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.955420][ T8391] netlink: 'syz.7.419': attribute type 2 has an invalid length. [ 625.868864][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 626.265774][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 626.287138][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 626.300269][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 626.318710][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 626.381126][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 627.569660][ T8081] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 627.726430][ T8081] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 628.750009][ T5788] Bluetooth: hci2: command tx timeout [ 629.436961][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 629.480664][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 629.509096][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 629.552569][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 629.596406][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.087785][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 630.843945][ T5783] Bluetooth: hci2: command tx timeout [ 631.192088][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 631.246209][ T8453] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 631.752085][ T5783] Bluetooth: hci5: command tx timeout [ 631.934032][ T5783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 631.983665][ T5783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 631.997569][ T5783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 632.014787][ T5783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 632.778615][ T5783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 632.909698][ T5788] Bluetooth: hci2: command tx timeout [ 633.787560][ T5788] Bluetooth: hci5: command tx timeout [ 634.059556][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.899542][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.978934][ T5788] Bluetooth: hci7: command tx timeout [ 634.984565][ T5788] Bluetooth: hci2: command tx timeout [ 635.888744][ T5788] Bluetooth: hci5: command tx timeout [ 637.058557][ T5783] Bluetooth: hci7: command tx timeout [ 637.491573][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.7.431'. [ 637.901071][ T8480] loop2: detected capacity change from 0 to 1024 [ 637.933787][ T8480] EXT4-fs: Ignoring removed orlov option [ 637.940853][ T5783] Bluetooth: hci5: command tx timeout [ 638.099960][ T8480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.218283][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.225964][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.275536][ T8414] bridge_slave_0: entered allmulticast mode [ 638.286578][ T8414] bridge_slave_0: entered promiscuous mode [ 638.323407][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.350659][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.366505][ T8414] bridge_slave_1: entered allmulticast mode [ 638.382026][ T8414] bridge_slave_1: entered promiscuous mode [ 638.428215][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.068187][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.134319][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 639.143031][ T5783] Bluetooth: hci7: command tx timeout [ 639.300656][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.169317][ T8414] team0: Port device team_slave_0 added [ 640.601932][ T8414] team0: Port device team_slave_1 added [ 641.072151][ T8512] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 641.275682][ T5783] Bluetooth: hci7: command tx timeout [ 645.571163][ T1128] bridge_slave_1: left allmulticast mode [ 645.576989][ T1128] bridge_slave_1: left promiscuous mode [ 645.596389][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.646853][ T1128] bridge_slave_0: left allmulticast mode [ 645.653265][ T1128] bridge_slave_0: left promiscuous mode [ 645.669509][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.146683][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.186262][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.213152][ T1128] bond0 (unregistering): Released all slaves [ 646.778290][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.786271][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.824150][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.873960][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.889237][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.916711][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.218597][ T1128] hsr_slave_0: left promiscuous mode [ 647.238803][ T1128] hsr_slave_1: left promiscuous mode [ 647.273673][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.342498][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.266029][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 648.327356][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 649.286263][ T8564] No control pipe specified [ 649.493310][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.523406][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.549233][ T8440] bridge_slave_0: entered allmulticast mode [ 649.568899][ T8440] bridge_slave_0: entered promiscuous mode [ 649.594411][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.615806][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.645590][ T8440] bridge_slave_1: entered allmulticast mode [ 649.656426][ T8440] bridge_slave_1: entered promiscuous mode [ 649.837652][ T8414] hsr_slave_0: entered promiscuous mode [ 649.880937][ T8414] hsr_slave_1: entered promiscuous mode [ 649.904261][ T8414] debugfs: 'hsr0' already exists in 'hsr' [ 649.916426][ T8414] Cannot create hsr debugfs directory [ 650.793977][ T8575] netlink: 'syz.2.445': attribute type 2 has an invalid length. [ 651.348627][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 652.221419][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.687739][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.475325][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.082773][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.146663][ T8440] team0: Port device team_slave_0 added [ 654.347537][ T8440] team0: Port device team_slave_1 added [ 654.710822][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.759456][ T8607] No control pipe specified [ 656.137274][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.253586][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.343509][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.462351][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.622595][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.659148][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.705097][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.950169][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.059276][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.078325][ T8450] bridge_slave_0: entered allmulticast mode [ 657.113374][ T8450] bridge_slave_0: entered promiscuous mode [ 657.659406][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.692100][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.716584][ T8450] bridge_slave_1: entered allmulticast mode [ 657.745369][ T8450] bridge_slave_1: entered promiscuous mode [ 658.248346][ T8440] hsr_slave_0: entered promiscuous mode [ 658.313133][ T8440] hsr_slave_1: entered promiscuous mode [ 658.325135][ T8440] debugfs: 'hsr0' already exists in 'hsr' [ 658.392093][ T8440] Cannot create hsr debugfs directory [ 658.510690][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.761978][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.849700][ T8649] No control pipe specified [ 661.253838][ T8450] team0: Port device team_slave_0 added [ 661.350264][ T8450] team0: Port device team_slave_1 added [ 661.874471][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.7.461'. [ 662.802110][ T8664] netlink: 'syz.7.461': attribute type 12 has an invalid length. [ 663.059072][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.066297][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.139841][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.276809][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.285558][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.314502][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.911707][ T8668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 664.052059][ T8668] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 667.070064][ T8668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.076148][ T8668] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 667.232777][ T57] bridge_slave_1: left allmulticast mode [ 667.242592][ T57] bridge_slave_1: left promiscuous mode [ 667.255566][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.268950][ T57] bridge_slave_0: left allmulticast mode [ 667.274785][ T57] bridge_slave_0: left promiscuous mode [ 667.281443][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.295542][ T57] bridge_slave_1: left allmulticast mode [ 667.302118][ T57] bridge_slave_1: left promiscuous mode [ 667.317298][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.332607][ T57] bridge_slave_0: left allmulticast mode [ 667.338679][ T57] bridge_slave_0: left promiscuous mode [ 667.345057][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.670274][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.685039][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.702659][ T57] bond0 (unregistering): Released all slaves [ 667.854027][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.872212][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.890785][ T57] bond0 (unregistering): Released all slaves [ 667.902224][ T8414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 667.944975][ T8679] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 667.951979][ T8679] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 667.982074][ T8679] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 668.002301][ T8679] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 668.009248][ T8679] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 668.017648][ T8668] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 668.020736][ T8679] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 668.033973][ T8668] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 668.070570][ T8450] hsr_slave_0: entered promiscuous mode [ 668.081613][ T8668] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 668.084305][ T8450] hsr_slave_1: entered promiscuous mode [ 668.102663][ T8450] debugfs: 'hsr0' already exists in 'hsr' [ 668.108618][ T8450] Cannot create hsr debugfs directory [ 668.112356][ T8668] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 668.256261][ T8414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.615511][ T8414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.790800][ T8414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 669.828148][ T57] hsr_slave_0: left promiscuous mode [ 669.838985][ T57] hsr_slave_1: left promiscuous mode [ 669.847367][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.881546][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.903738][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.912057][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.949972][ T57] hsr_slave_0: left promiscuous mode [ 669.958245][ T57] hsr_slave_1: left promiscuous mode [ 669.969373][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.985185][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.703702][ T57] veth1_macvtap: left promiscuous mode [ 670.732434][ T57] veth0_macvtap: left promiscuous mode [ 670.740448][ T57] veth1_vlan: left promiscuous mode [ 670.745944][ T57] veth0_vlan: left promiscuous mode [ 672.550363][ T57] team0 (unregistering): Port device team_slave_1 removed [ 672.578994][ T57] team0 (unregistering): Port device team_slave_0 removed [ 673.233624][ T57] team0 (unregistering): Port device team_slave_1 removed [ 673.278144][ T57] team0 (unregistering): Port device team_slave_0 removed [ 674.021940][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.471'. [ 674.128841][ T8704] netlink: 'syz.2.471': attribute type 12 has an invalid length. [ 674.271150][ T8440] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 674.350214][ T8440] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 674.441814][ T8440] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 674.525400][ T8440] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 675.766306][ T8712] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 675.876947][ T8714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 675.902438][ T8712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 676.025302][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.044609][ T8712] bond3: (slave dummy0): Releasing active interface [ 676.095561][ T8712] bond4: (slave dummy0): making interface the new active one [ 676.118114][ T8712] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 676.526710][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.597322][ T8720] geneve2: entered promiscuous mode [ 676.696311][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 676.728166][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 676.763470][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.770961][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.892466][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 676.990882][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 677.031972][ T8450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 677.087987][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.095541][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.137272][ T8450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 677.216344][ T8450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 677.320351][ T8450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 677.647743][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.027188][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.284457][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.292120][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.546735][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.554308][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.836487][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.042500][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.143090][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.150634][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.286658][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.294145][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.360737][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.7.479'. [ 680.401952][ T8740] netlink: 'syz.7.479': attribute type 12 has an invalid length. [ 680.975278][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.798031][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.993784][ T8414] veth0_vlan: entered promiscuous mode [ 682.083585][ T8414] veth1_vlan: entered promiscuous mode [ 682.529916][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.484'. [ 682.549474][ T8414] veth0_macvtap: entered promiscuous mode [ 682.606634][ T8760] openvswitch: netlink: Flow key attr not present in new flow. [ 682.645873][ T8414] veth1_macvtap: entered promiscuous mode [ 682.877687][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.976189][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.079694][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.118278][ T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.194642][ T143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.265768][ T143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.665028][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.793986][ T8440] veth0_vlan: entered promiscuous mode [ 684.817378][ T8785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.487'. [ 684.912427][ T8787] netlink: 'syz.2.487': attribute type 12 has an invalid length. [ 684.964949][ T8440] veth1_vlan: entered promiscuous mode [ 685.387304][ T8440] veth0_macvtap: entered promiscuous mode [ 685.473393][ T8440] veth1_macvtap: entered promiscuous mode [ 685.497716][ T8791] loop2: detected capacity change from 0 to 512 [ 685.739455][ T8791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.798916][ T8791] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.800267][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 685.824837][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 685.832110][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.842879][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 685.869407][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 685.893431][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 685.954238][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.033565][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 686.060258][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 686.082835][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 686.114473][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 686.140146][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.388153][ T6025] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.463765][ T6025] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.473206][ T6025] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.561629][ T6025] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.067867][ T8450] veth0_vlan: entered promiscuous mode [ 687.956310][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.237659][ T8450] veth1_vlan: entered promiscuous mode [ 688.261037][ T5788] Bluetooth: hci1: command tx timeout [ 688.522740][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.683783][ T8811] loop2: detected capacity change from 0 to 1024 [ 688.741228][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.805757][ T8811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.116756][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.304088][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 689.313776][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 689.322675][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 689.335322][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 689.368226][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 689.433839][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.497733][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.317993][ T8795] chnl_net:caif_netlink_parms(): no params data found [ 690.346937][ T5783] Bluetooth: hci1: command tx timeout [ 690.606770][ T8826] pim6reg: entered allmulticast mode [ 691.317380][ T8825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.328946][ T57] bridge_slave_1: left allmulticast mode [ 691.351946][ T57] bridge_slave_1: left promiscuous mode [ 691.358546][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.365994][ T8825] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 691.435503][ T57] bridge_slave_0: left allmulticast mode [ 691.441985][ T57] bridge_slave_0: left promiscuous mode [ 691.448553][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.458603][ T5783] Bluetooth: hci2: command tx timeout [ 691.508793][ T8825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 691.514883][ T8825] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 691.688255][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.730551][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.742895][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 691.759499][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 691.782025][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 691.866899][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.890506][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.901020][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 691.917156][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 691.934383][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.188216][ T8836] netlink: 32 bytes leftover after parsing attributes in process `syz.7.495'. [ 692.750776][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.784343][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.835294][ T57] bond0 (unregistering): Released all slaves [ 693.269159][ T8839] netlink: 'syz.7.495': attribute type 12 has an invalid length. [ 693.409758][ T57] hsr_slave_0: left promiscuous mode [ 693.456045][ T57] hsr_slave_1: left promiscuous mode [ 693.472494][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.481132][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.512449][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.545984][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.612017][ T57] veth1_macvtap: left promiscuous mode [ 693.620917][ T57] veth0_macvtap: left promiscuous mode [ 693.642250][ T57] veth1_vlan: left promiscuous mode [ 693.648088][ T57] veth0_vlan: left promiscuous mode [ 694.019070][ T5788] Bluetooth: hci4: command tx timeout [ 695.186227][ T8853] loop7: detected capacity change from 0 to 1024 [ 695.233867][ T8853] EXT4-fs: Ignoring removed mblk_io_submit option [ 695.310590][ T8853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.381328][ T8853] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.490400][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.496991][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.519275][ T57] team0 (unregistering): Port device team_slave_1 removed [ 695.545723][ T57] team0 (unregistering): Port device team_slave_0 removed [ 696.102679][ T5788] Bluetooth: hci4: command tx timeout [ 696.254836][ T8861] loop7: detected capacity change from 0 to 1024 [ 696.286080][ T8861] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 696.295446][ T8861] System zones: 0-1, 3-8 [ 696.304084][ T8861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 696.317684][ T8861] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.373833][ T8861] EXT4-fs error (device loop7): ext4_free_blocks:6726: comm syz.7.500: Freeing blocks not in datazone - block = 0, count = 16 [ 696.501940][ T5993] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 696.631163][ T5993] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 696.682432][ T5993] EXT4-fs (loop7): This should not happen!! Data will be lost [ 696.682432][ T5993] [ 696.728790][ T5993] EXT4-fs (loop7): Total free blocks count 0 [ 696.734966][ T5993] EXT4-fs (loop7): Free/Dirty block details [ 696.768763][ T5993] EXT4-fs (loop7): free_blocks=16 [ 696.773996][ T5993] EXT4-fs (loop7): dirty_blocks=16 [ 696.789450][ T5993] EXT4-fs (loop7): Block reservation details [ 696.795590][ T5993] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 696.813934][ T7732] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 697.114299][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.123544][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.131818][ T8795] bridge_slave_0: entered allmulticast mode [ 697.145006][ T8795] bridge_slave_0: entered promiscuous mode [ 697.335916][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.346347][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.362295][ T8795] bridge_slave_1: entered allmulticast mode [ 697.371759][ T8795] bridge_slave_1: entered promiscuous mode [ 698.140422][ T8795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.178597][ T5788] Bluetooth: hci4: command tx timeout [ 698.214509][ T8795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.439892][ T8818] chnl_net:caif_netlink_parms(): no params data found [ 698.557180][ T8795] team0: Port device team_slave_0 added [ 698.565296][ T8870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 698.584926][ T8870] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 698.775509][ T8795] team0: Port device team_slave_1 added [ 699.113901][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 699.190096][ T8880] netlink: 32 bytes leftover after parsing attributes in process `syz.7.504'. [ 699.239338][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.247374][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.284896][ T8795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.385590][ T8881] netlink: 'syz.7.504': attribute type 12 has an invalid length. [ 699.491100][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.509002][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.569813][ T8795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.181950][ T8795] hsr_slave_0: entered promiscuous mode [ 701.211675][ T8795] hsr_slave_1: entered promiscuous mode [ 701.238316][ T8795] debugfs: 'hsr0' already exists in 'hsr' [ 701.244757][ T8795] Cannot create hsr debugfs directory [ 701.334463][ T8902] netlink: 'syz.7.508': attribute type 2 has an invalid length. [ 701.445161][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.514019][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.522235][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.547745][ T8818] bridge_slave_0: entered allmulticast mode [ 701.592088][ T8818] bridge_slave_0: entered promiscuous mode [ 701.678226][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.765149][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.780905][ T29] audit: type=1326 audit(1771396588.477:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.2.509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fa1f9c629 code=0x0 [ 701.818874][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.826570][ T8818] bridge_slave_1: entered allmulticast mode [ 701.899328][ T8818] bridge_slave_1: entered promiscuous mode [ 702.043826][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.356925][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.465433][ T8818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.475590][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.540031][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.547770][ T8833] bridge_slave_0: entered allmulticast mode [ 702.583727][ T8833] bridge_slave_0: entered promiscuous mode [ 702.598246][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.608604][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.618050][ T8833] bridge_slave_1: entered allmulticast mode [ 702.627764][ T8833] bridge_slave_1: entered promiscuous mode [ 702.914623][ T8818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.391439][ T8818] team0: Port device team_slave_0 added [ 703.507316][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.580824][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.656362][ T8818] team0: Port device team_slave_1 added [ 703.926110][ T8927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.512'. [ 704.173443][ T8928] netlink: 'syz.2.512': attribute type 12 has an invalid length. [ 704.334893][ T8833] team0: Port device team_slave_0 added [ 704.399529][ T8833] team0: Port device team_slave_1 added [ 704.524761][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.548952][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.617083][ T8818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.902276][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.928901][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.979723][ T8818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.000800][ T57] bridge_slave_1: left allmulticast mode [ 705.006614][ T57] bridge_slave_1: left promiscuous mode [ 705.029335][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.047863][ T57] bridge_slave_0: left allmulticast mode [ 705.054265][ T57] bridge_slave_0: left promiscuous mode [ 705.082787][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.114664][ T57] bridge_slave_1: left allmulticast mode [ 705.128963][ T57] bridge_slave_1: left promiscuous mode [ 705.135412][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.172884][ T57] bridge_slave_0: left allmulticast mode [ 705.188620][ T57] bridge_slave_0: left promiscuous mode [ 705.195051][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.799765][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.864271][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.904662][ T57] bond0 (unregistering): Released all slaves [ 708.098144][ T8957] netlink: 'syz.2.517': attribute type 2 has an invalid length. [ 708.195141][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.249397][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.309330][ T57] bond0 (unregistering): Released all slaves [ 708.366060][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.403894][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.431378][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.650393][ T57] hsr_slave_0: left promiscuous mode [ 708.660743][ T57] hsr_slave_1: left promiscuous mode [ 708.670638][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.686546][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.727788][ T57] hsr_slave_0: left promiscuous mode [ 708.736740][ T57] hsr_slave_1: left promiscuous mode [ 708.746608][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.756771][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.771229][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.779288][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.821737][ T57] veth1_vlan: left promiscuous mode [ 708.827523][ T57] veth0_vlan: left promiscuous mode [ 708.841988][ T57] veth1_macvtap: left promiscuous mode [ 708.847854][ T57] veth0_macvtap: left promiscuous mode [ 708.857206][ T57] veth1_vlan: left promiscuous mode [ 708.869061][ T57] veth0_vlan: left promiscuous mode [ 709.634219][ T8968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.520'. [ 710.537984][ T57] team0 (unregistering): Port device team_slave_1 removed [ 710.619043][ T57] team0 (unregistering): Port device team_slave_0 removed [ 711.067501][ T57] team0 (unregistering): Port device team_slave_1 removed [ 711.105000][ T57] team0 (unregistering): Port device team_slave_0 removed [ 711.324519][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.331840][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.364436][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.445382][ T8969] netlink: 'syz.2.520': attribute type 12 has an invalid length. [ 713.010472][ T8818] hsr_slave_0: entered promiscuous mode [ 713.111632][ T8818] hsr_slave_1: entered promiscuous mode [ 713.150817][ T8818] debugfs: 'hsr0' already exists in 'hsr' [ 713.157734][ T8818] Cannot create hsr debugfs directory [ 714.412022][ T8833] hsr_slave_0: entered promiscuous mode [ 714.529554][ T8833] hsr_slave_1: entered promiscuous mode [ 714.566790][ T8833] debugfs: 'hsr0' already exists in 'hsr' [ 714.609977][ T8833] Cannot create hsr debugfs directory [ 715.711586][ T8992] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 715.735929][ T8992] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 717.117488][ T8795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 717.309763][ T8795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 717.445924][ T8795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 717.625642][ T8795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 720.149802][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.024324][ T8795] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.056996][ T9035] netlink: 'syz.7.533': attribute type 2 has an invalid length. [ 723.259533][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.267505][ T7616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.481164][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.488697][ T7616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.710975][ T8818] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 723.746030][ T9039] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 723.825235][ T8818] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 723.905739][ T8818] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 723.974176][ T8818] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 724.554535][ T9050] loop7: detected capacity change from 0 to 512 [ 724.631339][ T9050] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.537: invalid indirect mapped block 4294967295 (level 1) [ 724.752713][ T9050] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 724.759072][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 724.775052][ C0] EXT4-fs (loop7): initial error at time 1771396611: ext4_free_branches:1023: inode 11 [ 724.785118][ C0] EXT4-fs (loop7): last error at time 1771396611: ext4_free_branches:1023: inode 11 [ 724.889187][ T9050] EXT4-fs (loop7): Remounting filesystem read-only [ 724.896785][ T9050] EXT4-fs (loop7): 2 truncates cleaned up [ 724.984210][ T9050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.001276][ T8833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 725.116834][ T8833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 725.215196][ T8833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 725.330570][ T8833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 725.681745][ T7732] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.010830][ T8818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.347390][ T8818] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.487331][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.494871][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.694775][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.702272][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.221095][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.243746][ T9083] netlink: 'syz.7.541': attribute type 2 has an invalid length. [ 727.538205][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.903725][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.082843][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.090619][ T7616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.855381][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.862905][ T7616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.016715][ T8795] veth0_vlan: entered promiscuous mode [ 731.062750][ T9096] loop7: detected capacity change from 0 to 1024 [ 731.175946][ T9096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 731.229194][ T9096] System zones: 0-1, 3-8 [ 731.254765][ T9096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 731.339436][ T9096] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.437684][ T8795] veth1_vlan: entered promiscuous mode [ 731.747198][ T7732] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 731.777402][ T8818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.076113][ T8795] veth0_macvtap: entered promiscuous mode [ 732.365604][ T8795] veth1_macvtap: entered promiscuous mode [ 732.979327][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.540657][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.635821][ T85] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.665798][ T85] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.729279][ T85] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.792704][ T85] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.873657][ T9130] loop2: detected capacity change from 0 to 1024 [ 734.121626][ T9130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.218218][ T9136] netlink: 'syz.7.549': attribute type 2 has an invalid length. [ 734.556888][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.857749][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.048900][ T8818] veth0_vlan: entered promiscuous mode [ 735.184856][ T8818] veth1_vlan: entered promiscuous mode [ 735.673010][ T8818] veth0_macvtap: entered promiscuous mode [ 735.782853][ T8818] veth1_macvtap: entered promiscuous mode [ 736.561066][ T8818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.183204][ T8818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.684438][ T34] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.761413][ T34] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.943599][ T7616] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.270466][ T7432] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.645318][ T9171] loop2: detected capacity change from 0 to 1024 [ 739.823759][ T9171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 739.876738][ T9171] System zones: 0-1, 3-8 [ 739.923978][ T9171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 739.969041][ T9171] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.342702][ T8833] veth0_vlan: entered promiscuous mode [ 740.452454][ T8833] veth1_vlan: entered promiscuous mode [ 740.493446][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 740.864613][ T8833] veth0_macvtap: entered promiscuous mode [ 741.007287][ T8833] veth1_macvtap: entered promiscuous mode [ 741.313200][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.390936][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.612342][ T7793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.643479][ T7793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.709639][ T7793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.761640][ T7793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.069938][ T9223] netlink: 'syz.2.557': attribute type 2 has an invalid length. [ 748.629924][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 748.649543][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 748.663402][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 748.712753][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 748.726044][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 748.911745][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 748.938855][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 748.960346][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 748.977870][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 749.005171][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 750.956811][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.968141][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.977444][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.990157][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.001189][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.061834][ T5783] Bluetooth: hci5: command tx timeout [ 751.181402][ T9249] chnl_net:caif_netlink_parms(): no params data found [ 751.420171][ T1128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.891274][ T1128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.143579][ T1128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.446473][ T1128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.129919][ T5783] Bluetooth: hci1: command tx timeout [ 753.149882][ T5783] Bluetooth: hci5: command tx timeout [ 753.939488][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.008808][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.016636][ T9249] bridge_slave_0: entered allmulticast mode [ 754.119571][ T9249] bridge_slave_0: entered promiscuous mode [ 754.240423][ T1128] bridge_slave_1: left allmulticast mode [ 754.298935][ T1128] bridge_slave_1: left promiscuous mode [ 754.305427][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.496775][ T1128] bridge_slave_0: left allmulticast mode [ 754.577221][ T1128] bridge_slave_0: left promiscuous mode [ 754.605084][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.942538][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 754.962075][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 754.986429][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 754.999066][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 755.014590][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 755.138569][ T5788] Bluetooth: hci1: command tx timeout [ 755.218848][ T5788] Bluetooth: hci5: command tx timeout [ 755.395174][ T9311] netlink: 'syz.7.566': attribute type 2 has an invalid length. [ 756.305890][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.396123][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.492171][ T1128] bond0 (unregistering): Released all slaves [ 756.617943][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.681354][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.759184][ T9249] bridge_slave_1: entered allmulticast mode [ 757.451780][ T5788] Bluetooth: hci2: command tx timeout [ 757.457358][ T5788] Bluetooth: hci1: command tx timeout [ 757.719777][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.726362][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.734799][ T5783] Bluetooth: hci5: command tx timeout [ 757.798915][ T9249] bridge_slave_1: entered promiscuous mode [ 759.293364][ T1128] hsr_slave_0: left promiscuous mode [ 759.360619][ T1128] hsr_slave_1: left promiscuous mode [ 759.390265][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.483008][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.515142][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.603992][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.779612][ T9320] Bluetooth: hci2: command tx timeout [ 759.788874][ T5780] Bluetooth: hci1: command tx timeout [ 759.894099][ T1128] veth1_macvtap: left promiscuous mode [ 759.906260][ T1128] veth0_macvtap: left promiscuous mode [ 759.946774][ T1128] veth1_vlan: left promiscuous mode [ 759.989899][ T1128] veth0_vlan: left promiscuous mode [ 761.860327][ T9320] Bluetooth: hci2: command tx timeout [ 762.653627][ T9343] netlink: 'syz.2.574': attribute type 2 has an invalid length. [ 763.028912][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 763.067142][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 763.965953][ T9320] Bluetooth: hci2: command tx timeout [ 764.787465][ T9249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.907278][ T9249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.650942][ T9249] team0: Port device team_slave_0 added [ 769.929317][ T9249] team0: Port device team_slave_1 added [ 770.348512][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.357797][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.732895][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.767294][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.834207][ T9372] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 771.225557][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.233477][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.262493][ T9249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.333472][ T9274] chnl_net:caif_netlink_parms(): no params data found [ 771.400984][ T57] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.415034][ T57] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.435437][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.443098][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.469907][ T9249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.557726][ T57] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.589083][ T57] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.712947][ T1128] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.800369][ T9389] netlink: 'syz.2.582': attribute type 2 has an invalid length. [ 772.117224][ T1128] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.359787][ T1128] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.495347][ T9249] hsr_slave_0: entered promiscuous mode [ 772.521531][ T9249] hsr_slave_1: entered promiscuous mode [ 772.570104][ T9249] debugfs: 'hsr0' already exists in 'hsr' [ 772.591355][ T9249] Cannot create hsr debugfs directory [ 774.326579][ T1128] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.063945][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.071979][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.081813][ T9274] bridge_slave_0: entered allmulticast mode [ 775.092345][ T9274] bridge_slave_0: entered promiscuous mode [ 775.107794][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.115662][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.172773][ T9274] bridge_slave_1: entered allmulticast mode [ 775.183253][ T9274] bridge_slave_1: entered promiscuous mode [ 775.785177][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.931122][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.025495][ T9299] chnl_net:caif_netlink_parms(): no params data found [ 776.404467][ T1128] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.473222][ T9274] team0: Port device team_slave_0 added [ 776.512241][ T9274] team0: Port device team_slave_1 added [ 776.514253][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.7.589'. [ 776.627671][ T1128] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.721777][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.7.589'. [ 776.837991][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.861601][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.963181][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.088078][ T9436] netlink: 'syz.2.590': attribute type 2 has an invalid length. [ 777.091351][ T1128] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.181347][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.218702][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.269386][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.623195][ T1128] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.253732][ T9274] hsr_slave_0: entered promiscuous mode [ 780.307511][ T9274] hsr_slave_1: entered promiscuous mode [ 780.322159][ T9274] debugfs: 'hsr0' already exists in 'hsr' [ 780.350316][ T9274] Cannot create hsr debugfs directory [ 780.810531][ T9299] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.818126][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.826024][ T9299] bridge_slave_0: entered allmulticast mode [ 780.835529][ T9299] bridge_slave_0: entered promiscuous mode [ 781.561086][ T9299] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.600387][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.608122][ T9299] bridge_slave_1: entered allmulticast mode [ 781.637108][ T9299] bridge_slave_1: entered promiscuous mode [ 782.366443][ T9299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.466390][ T9299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.736545][ T9473] netlink: 'syz.7.599': attribute type 2 has an invalid length. [ 783.042610][ T1128] bridge_slave_1: left allmulticast mode [ 783.068702][ T1128] bridge_slave_1: left promiscuous mode [ 783.075150][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.126187][ T1128] bridge_slave_0: left allmulticast mode [ 783.132380][ T1128] bridge_slave_0: left promiscuous mode [ 783.160850][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.210567][ T1128] bridge_slave_1: left allmulticast mode [ 783.231218][ T1128] bridge_slave_1: left promiscuous mode [ 783.237644][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.294776][ T1128] bridge_slave_0: left allmulticast mode [ 783.309649][ T1128] bridge_slave_0: left promiscuous mode [ 783.317448][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.956195][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.995738][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.075628][ T1128] bond0 (unregistering): Released all slaves [ 787.645324][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.710039][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.726155][ T1128] bond0 (unregistering): Released all slaves [ 787.843348][ T9299] team0: Port device team_slave_0 added [ 787.913439][ T9299] team0: Port device team_slave_1 added [ 788.452641][ T1128] hsr_slave_0: left promiscuous mode [ 788.486180][ T1128] hsr_slave_1: left promiscuous mode [ 788.496397][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.509093][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.531861][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.549242][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.653372][ T1128] hsr_slave_0: left promiscuous mode [ 788.671332][ T1128] hsr_slave_1: left promiscuous mode [ 788.689356][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.696892][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.743974][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.769579][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.888965][ T1128] veth1_macvtap: left promiscuous mode [ 788.894654][ T1128] veth0_macvtap: left promiscuous mode [ 788.901476][ T1128] veth1_vlan: left promiscuous mode [ 788.906964][ T1128] veth0_vlan: left promiscuous mode [ 788.948745][ T1128] veth1_macvtap: left promiscuous mode [ 788.954428][ T1128] veth0_macvtap: left promiscuous mode [ 788.996962][ T1128] veth1_vlan: left promiscuous mode [ 789.014819][ T1128] veth0_vlan: left promiscuous mode [ 791.394173][ T9559] loop7: detected capacity change from 0 to 512 [ 791.527548][ T9559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.651477][ T9559] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.015904][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 792.090340][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 792.313590][ T7732] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.891791][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 793.937412][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 795.284306][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.316419][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.369736][ T9299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.417224][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.445585][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.526081][ T9614] loop2: detected capacity change from 0 to 512 [ 795.537356][ T9299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.629140][ C1] ===================================================== [ 795.636643][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 795.645379][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 795.651759][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 795.658891][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 795.664984][ C1] sysvec_call_function_single+0x7c/0x90 [ 795.670821][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 795.676939][ C1] __msan_metadata_ptr_for_load_4+0x2c/0x40 [ 795.682972][ C1] kmem_cache_alloc_lru_noprof+0x53/0x1280 [ 795.689014][ C1] __d_alloc+0x55/0xa00 [ 795.693315][ C1] d_alloc+0x57/0x300 [ 795.697410][ C1] lookup_one_qstr_excl+0x1a1/0x7b0 [ 795.702826][ C1] start_dirop+0x70/0x120 [ 795.707246][ C1] simple_start_creating+0x13d/0x180 [ 795.712760][ C1] debugfs_start_creating+0x19a/0x390 [ 795.718385][ C1] __debugfs_create_file+0xab/0x850 [ 795.723731][ C1] debugfs_create_file_full+0x60/0x80 [ 795.729252][ C1] ref_tracker_dir_debugfs+0x262/0x510 [ 795.734927][ C1] alloc_netdev_mqs+0x2c9/0x2270 [ 795.740060][ C1] rtnl_create_link+0x505/0x1640 [ 795.745182][ C1] rtnl_newlink_create+0x300/0x1250 [ 795.750490][ C1] rtnl_newlink+0x2b3c/0x39a0 [ 795.755318][ C1] rtnetlink_rcv_msg+0x106f/0x14b0 [ 795.760585][ C1] netlink_rcv_skb+0x54d/0x680 [ 795.765567][ C1] rtnetlink_rcv+0x35/0x40 [ 795.770124][ C1] netlink_unicast+0xf04/0x12b0 [ 795.775099][ C1] netlink_sendmsg+0x10b2/0x1250 [ 795.780190][ C1] __sys_sendto+0xa77/0xb90 [ 795.784857][ C1] __x64_sys_sendto+0x130/0x200 [ 795.789838][ C1] x64_sys_call+0x39a0/0x3ea0 [ 795.794660][ C1] do_syscall_64+0x134/0xf80 [ 795.799424][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.805526][ C1] [ 795.807891][ C1] Local variable iter created at: [ 795.812961][ C1] tdp_mmu_zap_leafs+0x52/0x6e0 [ 795.817979][ C1] kvm_tdp_mmu_unmap_gfn_range+0x910/0xb50 [ 795.823917][ C1] [ 795.826321][ C1] CPU: 1 UID: 0 PID: 9299 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 795.835903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.846052][ C1] ===================================================== [ 795.853035][ C1] Disabling lock debugging due to kernel taint [ 795.859247][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 795.865756][ C1] CPU: 1 UID: 0 PID: 9299 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 795.876924][ C1] Tainted: [B]=BAD_PAGE [ 795.881131][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.891282][ C1] Call Trace: [ 795.894637][ C1] [ 795.897543][ C1] __dump_stack+0x26/0x30 [ 795.902013][ C1] dump_stack_lvl+0x50/0x1c0 [ 795.906736][ C1] ? dump_stack+0x12/0x25 [ 795.911201][ C1] dump_stack+0x1e/0x25 [ 795.915487][ C1] vpanic+0x7b4/0x1430 [ 795.919718][ C1] panic+0x15d/0x160 [ 795.923794][ C1] kmsan_report+0x31a/0x320 [ 795.928451][ C1] ? __msan_warning+0x1b/0x30 [ 795.933257][ C1] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 795.939807][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 795.947055][ C1] ? __sysvec_call_function_single+0x4b/0x3e0 [ 795.953264][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 795.959230][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 795.965541][ C1] ? __msan_metadata_ptr_for_load_4+0x2c/0x40 [ 795.971754][ C1] ? kmem_cache_alloc_lru_noprof+0x53/0x1280 [ 795.977899][ C1] ? __d_alloc+0x55/0xa00 [ 795.982338][ C1] ? d_alloc+0x57/0x300 [ 795.986606][ C1] ? lookup_one_qstr_excl+0x1a1/0x7b0 [ 795.992144][ C1] ? start_dirop+0x70/0x120 [ 795.996750][ C1] ? simple_start_creating+0x13d/0x180 [ 796.002378][ C1] ? debugfs_start_creating+0x19a/0x390 [ 796.008089][ C1] ? __debugfs_create_file+0xab/0x850 [ 796.013614][ C1] ? debugfs_create_file_full+0x60/0x80 [ 796.019580][ C1] ? ref_tracker_dir_debugfs+0x262/0x510 [ 796.025390][ C1] ? alloc_netdev_mqs+0x2c9/0x2270 [ 796.030646][ C1] ? rtnl_create_link+0x505/0x1640 [ 796.035893][ C1] ? rtnl_newlink_create+0x300/0x1250 [ 796.041385][ C1] ? rtnl_newlink+0x2b3c/0x39a0 [ 796.046387][ C1] ? rtnetlink_rcv_msg+0x106f/0x14b0 [ 796.051829][ C1] ? netlink_rcv_skb+0x54d/0x680 [ 796.056916][ C1] ? rtnetlink_rcv+0x35/0x40 [ 796.061652][ C1] ? netlink_unicast+0xf04/0x12b0 [ 796.066812][ C1] ? netlink_sendmsg+0x10b2/0x1250 [ 796.072073][ C1] ? __sys_sendto+0xa77/0xb90 [ 796.076878][ C1] ? __x64_sys_sendto+0x130/0x200 [ 796.082033][ C1] ? x64_sys_call+0x39a0/0x3ea0 [ 796.087035][ C1] ? do_syscall_64+0x134/0xf80 [ 796.091948][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.098147][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.103418][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.109385][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.114649][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 796.121125][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.126386][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.132359][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.137633][ C1] __msan_warning+0x1b/0x30 [ 796.142271][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 796.148651][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.154653][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 796.161727][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 796.167773][ C1] sysvec_call_function_single+0x7c/0x90 [ 796.173573][ C1] [ 796.176580][ C1] [ 796.179580][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 796.185738][ C1] RIP: 0010:__msan_metadata_ptr_for_load_4+0x2c/0x40 [ 796.192598][ C1] Code: 1e fa 55 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 be 04 00 00 00 31 d2 e8 cc 27 00 00 48 89 5d f0 ff 75 f0 9d <48> 83 c4 10 5b 5d c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 [ 796.212343][ C1] RSP: 0018:ffff88802c382d28 EFLAGS: 00000286 [ 796.218535][ C1] RAX: ffff8880bb9dff1c RBX: 0000000000000286 RCX: 000000000050095b [ 796.226605][ C1] RDX: ffff8881001dff1c RSI: 0000000000000001 RDI: ffff8881005dff1c [ 796.234682][ C1] RBP: ffff88802c382d40 R08: ffffea000000000f R09: 0000000000000000 [ 796.242774][ C1] R10: ffff888237c90028 R11: 0000000000000000 R12: ffff88802c383020 [ 796.250854][ C1] R13: ffff888119f0ac78 R14: ffff88811a8a4840 R15: 0000000000000cc0 [ 796.258976][ C1] kmem_cache_alloc_lru_noprof+0x53/0x1280 [ 796.264982][ C1] ? __d_alloc+0x55/0xa00 [ 796.269470][ C1] ? __d_lookup+0x860/0x8e0 [ 796.274142][ C1] __d_alloc+0x55/0xa00 [ 796.278412][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.283692][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.288962][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.294939][ C1] d_alloc+0x57/0x300 [ 796.299045][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.304340][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.310330][ C1] lookup_one_qstr_excl+0x1a1/0x7b0 [ 796.315727][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 796.321962][ C1] start_dirop+0x70/0x120 [ 796.326411][ C1] simple_start_creating+0x13d/0x180 [ 796.331878][ C1] debugfs_start_creating+0x19a/0x390 [ 796.337432][ C1] __debugfs_create_file+0xab/0x850 [ 796.342810][ C1] debugfs_create_file_full+0x60/0x80 [ 796.348353][ C1] ref_tracker_dir_debugfs+0x262/0x510 [ 796.353988][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.359271][ C1] ? __kvmalloc_node_noprof+0x618/0x18d0 [ 796.365031][ C1] ? kmsan_internal_poison_memory+0x78/0x90 [ 796.371063][ C1] ? alloc_netdev_mqs+0x139/0x2270 [ 796.376325][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.381600][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.387575][ C1] alloc_netdev_mqs+0x2c9/0x2270 [ 796.392665][ C1] ? __pfx_xfrmi_dev_setup+0x10/0x10 [ 796.398210][ C1] rtnl_create_link+0x505/0x1640 [ 796.403295][ C1] ? __pfx_xfrmi_dev_setup+0x10/0x10 [ 796.408755][ C1] rtnl_newlink_create+0x300/0x1250 [ 796.414096][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.419403][ C1] rtnl_newlink+0x2b3c/0x39a0 [ 796.424308][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 796.430796][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.436059][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 796.442539][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 796.448761][ C1] ? apparmor_capable+0x320/0x400 [ 796.454005][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.459269][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.465244][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.470526][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.476503][ C1] ? __rcu_read_unlock+0x6c/0xd0 [ 796.481655][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 796.486841][ C1] rtnetlink_rcv_msg+0x106f/0x14b0 [ 796.492117][ C1] ? stack_depot_save_flags+0x35/0x790 [ 796.497736][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.503040][ C1] netlink_rcv_skb+0x54d/0x680 [ 796.507986][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 796.513624][ C1] rtnetlink_rcv+0x35/0x40 [ 796.518192][ C1] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 796.523460][ C1] netlink_unicast+0xf04/0x12b0 [ 796.528478][ C1] netlink_sendmsg+0x10b2/0x1250 [ 796.533602][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.539043][ C1] __sys_sendto+0xa77/0xb90 [ 796.543696][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 796.548964][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 796.554973][ C1] __x64_sys_sendto+0x130/0x200 [ 796.559986][ C1] x64_sys_call+0x39a0/0x3ea0 [ 796.564816][ C1] do_syscall_64+0x134/0xf80 [ 796.569555][ C1] ? clear_bhb_loop+0x50/0xa0 [ 796.574368][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.580388][ C1] RIP: 0033:0x7fc9ddd5cece [ 796.584903][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 796.604644][ C1] RSP: 002b:00007ffd1dd66398 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 796.613194][ C1] RAX: ffffffffffffffda RBX: 000055555ecfd500 RCX: 00007fc9ddd5cece [ 796.621269][ C1] RDX: 0000000000000054 RSI: 00007fc9deb44670 RDI: 0000000000000003 [ 796.629336][ C1] RBP: 0000000000000001 R08: 00007ffd1dd66414 R09: 000000000000000c [ 796.637397][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 796.645457][ C1] R13: 0000000000000000 R14: 00007fc9deb44670 R15: 0000000000000000 [ 796.653555][ C1] [ 796.657006][ C1] Kernel Offset: disabled [ 796.661366][ C1] Rebooting in 86400 seconds..