last executing test programs: 2m26.787559477s ago: executing program 3 (id=6722): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/219, &(0x7f0000000140)=0xdb) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@broadcast, @initdev}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000ac0)}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2f, 0x4) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a00)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1970eab", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x4, 0x8000}, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/50, 0x32, 0x2101, &(0x7f0000000100)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f000009b000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bc0000c6cac374007d00000000006910a80000000000180000030000000000000038ac01bc00090000006ae0837588a040619500000c00000000cde93770c01bb3cfacdb8cc8e200b9e1fe9f17d3c79e7ac0a04eddab98066bbfbecdf9a0b26309ff622185068355093ab1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 2m23.443683768s ago: executing program 1 (id=6735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) 2m19.289949591s ago: executing program 4 (id=6743): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioperm(0x0, 0x4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x15, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0xb0af8df7c7d8796b, 0x4, 0x18, 0x4}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000dbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff430486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) recvfrom(r1, 0x0, 0x45, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$isdn(0x22, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2m3.894454722s ago: executing program 3 (id=6722): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/219, &(0x7f0000000140)=0xdb) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@broadcast, @initdev}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000ac0)}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2f, 0x4) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a00)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1970eab", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x4, 0x8000}, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/50, 0x32, 0x2101, &(0x7f0000000100)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f000009b000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bc0000c6cac374007d00000000006910a80000000000180000030000000000000038ac01bc00090000006ae0837588a040619500000c00000000cde93770c01bb3cfacdb8cc8e200b9e1fe9f17d3c79e7ac0a04eddab98066bbfbecdf9a0b26309ff622185068355093ab1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 1m59.662379966s ago: executing program 1 (id=6735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) 1m55.112042767s ago: executing program 4 (id=6743): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioperm(0x0, 0x4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x15, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0xb0af8df7c7d8796b, 0x4, 0x18, 0x4}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000dbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff430486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) recvfrom(r1, 0x0, 0x45, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$isdn(0x22, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1m37.115278792s ago: executing program 3 (id=6722): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/219, &(0x7f0000000140)=0xdb) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@broadcast, @initdev}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000ac0)}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2f, 0x4) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a00)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1970eab", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x4, 0x8000}, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/50, 0x32, 0x2101, &(0x7f0000000100)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f000009b000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bc0000c6cac374007d00000000006910a80000000000180000030000000000000038ac01bc00090000006ae0837588a040619500000c00000000cde93770c01bb3cfacdb8cc8e200b9e1fe9f17d3c79e7ac0a04eddab98066bbfbecdf9a0b26309ff622185068355093ab1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 1m34.478279706s ago: executing program 1 (id=6735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) 1m29.229412196s ago: executing program 4 (id=6743): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioperm(0x0, 0x4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x15, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0xb0af8df7c7d8796b, 0x4, 0x18, 0x4}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000dbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff430486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) recvfrom(r1, 0x0, 0x45, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$isdn(0x22, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1m13.43384647s ago: executing program 3 (id=6722): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/219, &(0x7f0000000140)=0xdb) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@broadcast, @initdev}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000ac0)}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2f, 0x4) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a00)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1970eab", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x4, 0x8000}, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/50, 0x32, 0x2101, &(0x7f0000000100)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f000009b000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bc0000c6cac374007d00000000006910a80000000000180000030000000000000038ac01bc00090000006ae0837588a040619500000c00000000cde93770c01bb3cfacdb8cc8e200b9e1fe9f17d3c79e7ac0a04eddab98066bbfbecdf9a0b26309ff622185068355093ab1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 1m12.031706206s ago: executing program 1 (id=6735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) 1m4.759752035s ago: executing program 4 (id=6743): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioperm(0x0, 0x4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x15, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0xb0af8df7c7d8796b, 0x4, 0x18, 0x4}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000dbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff430486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) recvfrom(r1, 0x0, 0x45, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$isdn(0x22, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 48.274990066s ago: executing program 3 (id=6722): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/219, &(0x7f0000000140)=0xdb) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@broadcast, @initdev}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000ac0)}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2f, 0x4) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a00)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1970eab", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x4, 0x8000}, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/50, 0x32, 0x2101, &(0x7f0000000100)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f000009b000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bc0000c6cac374007d00000000006910a80000000000180000030000000000000038ac01bc00090000006ae0837588a040619500000c00000000cde93770c01bb3cfacdb8cc8e200b9e1fe9f17d3c79e7ac0a04eddab98066bbfbecdf9a0b26309ff622185068355093ab1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 46.057433814s ago: executing program 1 (id=6735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) 45.147868561s ago: executing program 4 (id=6743): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioperm(0x0, 0x4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x15, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0xb0af8df7c7d8796b, 0x4, 0x18, 0x4}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000dbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff430486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) recvfrom(r1, 0x0, 0x45, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$isdn(0x22, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 21.44793409s ago: executing program 3 (id=6722): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/219, &(0x7f0000000140)=0xdb) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@broadcast, @initdev}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000ac0)}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2f, 0x4) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a00)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1970eab", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x4, 0x8000}, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/50, 0x32, 0x2101, &(0x7f0000000100)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f000009b000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bc0000c6cac374007d00000000006910a80000000000180000030000000000000038ac01bc00090000006ae0837588a040619500000c00000000cde93770c01bb3cfacdb8cc8e200b9e1fe9f17d3c79e7ac0a04eddab98066bbfbecdf9a0b26309ff622185068355093ab1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 19.509449196s ago: executing program 1 (id=6735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) 13.667618102s ago: executing program 4 (id=6743): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioperm(0x0, 0x4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x15, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0xb0af8df7c7d8796b, 0x4, 0x18, 0x4}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000dbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff430486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) recvfrom(r1, 0x0, 0x45, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$isdn(0x22, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 7.700516843s ago: executing program 0 (id=7189): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_pidfd_open(r2, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2120010000", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b000000000005001000"], 0x30}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c9", 0x6a}], 0x1}}], 0x2, 0x814) 5.519788748s ago: executing program 0 (id=7192): syz_emit_ethernet(0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200000006673c8d892482a8daaaaaaaaaaa20080045000028000000000002907800000000ffffffff11e09077ffec000062ea00f65934fab8d35b076087408a991391578e7acf331af66d9f91bea95245318ae773c05a3e762ac2411fe0623ca856d1486f1049e99d89c680a5dd27ec5b6402664a7af8f92cc26d9ea0ef"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f00003c3000/0x4000)=nil, 0x4000, 0xb) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x0, '\x00', 0x0, 0x0, 0x4}, 0x48) io_setup(0x0, &(0x7f0000000000)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x3, "420600753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a0400"}) io_submit(0x0, 0x4, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000400)="2533084602303ffb533cebabd138b5af71859350822f671e0862ac832c88a579636d00057bc86e3dee7cdec182d15af971d7457743e691b19c1ecdf008fe6a2df2a47ec1af43c011b2a23b5b9e981f6e0d9bf2df5b55e07b4932a011b23910c5a181bde83f243c237ce9dc48b51060c78994075a75351f32519fcc581abe33772184c80ed2cd102043ed8dc5db0cac50120dce3af8f0be856d63e287f93112a11f047aff614b6e197eae222da003b3060ba7", 0xb2, 0x4, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x4bb, r4, &(0x7f00000004c0)="17a5e38b706d88ae308743243943abe63dd818cb4030ccf03cfbd708443a3016cf55a9e5196d30890a72fa3d5258b60352f11b8c12ea1d95155eae71405a5b286fece1855f6555e51f3e5dbd77acad6a831b786ca116e5cbc0fc593b519bc2f6b8ee8624ddbb1906b0dd15e68be2b475", 0x70, 0x9, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xffc1, r1, 0x0, 0x0, 0x80000000, 0x0, 0x3}]) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000040)=0x8001) r5 = dup3(0xffffffffffffffff, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="06510000000000002c0012800b00010062726964676500001c000280050029000000000008001d"], 0x4c}}, 0x0) mprotect(&(0x7f0000444000/0x3000)=nil, 0x3000, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rtc_irq_set_state\x00', r8}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.671748017s ago: executing program 2 (id=7197): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r1, 0x211, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}}, 0x0) 4.579416073s ago: executing program 2 (id=7198): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d712d282dda5f2d23debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) 4.473737645s ago: executing program 0 (id=7199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 4.391670446s ago: executing program 2 (id=7200): munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtaction={0x58, 0x32, 0x215, 0x0, 0x0, {}, [{0x44, 0x1, [@m_ipt={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "3869e0df2876e39979ba19d6ff15f23f8b"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) read$FUSE(r2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb2, &(0x7f00000000c0)=""/178}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.297466953s ago: executing program 2 (id=7201): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"e50d1af8899401000000010000007ea261dd00ff000000000000000000170020"}) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000080)) r9 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000003c0)={0x1, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 3.29877649s ago: executing program 2 (id=7202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 216.37974ms ago: executing program 0 (id=7203): syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 215.770415ms ago: executing program 2 (id=7204): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10, 0x800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = io_uring_setup(0x2ad5, &(0x7f00000001c0)) close(r5) ioctl$TCSETSW2(r4, 0x5425, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet6_sctp(0xa, 0x0, 0x84) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) close_range(r2, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x105, 0x4800003a, r0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) 137.612819ms ago: executing program 0 (id=7205): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=7206): syz_usb_connect(0x0, 0x48, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000042ab9c4040200349b5f60102030109023600020000000009040000031699000009050402"], 0x0) kernel console output (not intermixed with test programs): 804][T23493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 980.239805][ T7398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.253373][ T7398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.331304][T20161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 980.344916][T20161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 980.353960][T20161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 980.367567][T20161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 980.370002][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.395644][T20161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 980.403636][T20161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 980.568101][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.679820][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.698904][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.707611][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.741687][T23493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.810684][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.873509][T23427] veth0_vlan: entered promiscuous mode [ 980.901292][T23427] veth1_vlan: entered promiscuous mode [ 981.032984][T23493] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.857744][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.864943][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.925746][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.932911][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.967450][T23427] veth0_macvtap: entered promiscuous mode [ 981.988980][ T11] bridge_slave_1: left allmulticast mode [ 982.001260][ T11] bridge_slave_1: left promiscuous mode [ 982.015117][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.025287][ T11] bridge_slave_0: left allmulticast mode [ 982.042745][ T11] bridge_slave_0: left promiscuous mode [ 982.049016][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.376925][T23582] input: syz0 as /devices/virtual/input/input47 [ 982.482163][T20161] Bluetooth: hci2: command tx timeout [ 983.528567][T20161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 983.563243][T20161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 983.601770][T20161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 983.641621][T20161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 983.663993][T20161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 983.676096][T20161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 983.698400][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.710531][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.723416][ T11] bond0 (unregistering): Released all slaves [ 983.741176][T23427] veth1_macvtap: entered promiscuous mode [ 983.969416][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.989103][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.999566][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.010935][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.021665][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.033521][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.044172][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.054850][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.068786][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.079483][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.089483][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.100167][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.111538][T23427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.167611][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.190302][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.200505][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.214375][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.224316][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.236775][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.246866][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.257599][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.267669][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.278296][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.288814][T23427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.299293][T23427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.310900][T23427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.358948][T23560] chnl_net:caif_netlink_parms(): no params data found [ 984.479943][T23427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.489327][T23427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.498145][T23427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.506940][T23427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.549840][T20161] Bluetooth: hci2: command tx timeout [ 984.589434][ T11] hsr_slave_0: left promiscuous mode [ 984.606924][ T11] hsr_slave_1: left promiscuous mode [ 984.613106][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.622608][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.631644][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.639803][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.670708][ T11] veth1_macvtap: left promiscuous mode [ 984.676326][ T11] veth0_macvtap: left promiscuous mode [ 984.681996][ T11] veth1_vlan: left promiscuous mode [ 984.687433][ T11] veth0_vlan: left promiscuous mode [ 985.399154][ T11] team0 (unregistering): Port device team_slave_1 removed [ 985.471554][ T11] team0 (unregistering): Port device team_slave_0 removed [ 985.744857][T20161] Bluetooth: hci3: command tx timeout [ 986.207075][T23560] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.216327][T23560] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.223619][T23560] bridge_slave_0: entered allmulticast mode [ 986.256838][T23560] bridge_slave_0: entered promiscuous mode [ 986.324132][T23560] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.333697][T23560] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.341117][T23560] bridge_slave_1: entered allmulticast mode [ 986.349779][T23560] bridge_slave_1: entered promiscuous mode [ 986.441355][T23560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.508879][T23560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.618917][T23560] team0: Port device team_slave_0 added [ 986.635193][T20161] Bluetooth: hci2: command tx timeout [ 986.638704][T23560] team0: Port device team_slave_1 added [ 986.668836][T23593] chnl_net:caif_netlink_parms(): no params data found [ 986.694100][ T7398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.705249][ T7398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.779928][T23493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.796419][T23560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.803402][T23560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.830931][T23560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.852367][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.860887][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.878165][T23560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.889813][T23560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.916054][T23560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.972057][T23593] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.980534][T23593] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.988939][T23593] bridge_slave_0: entered allmulticast mode [ 987.000198][T23593] bridge_slave_0: entered promiscuous mode [ 987.055720][T23593] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.062988][T23593] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.075424][T23593] bridge_slave_1: entered allmulticast mode [ 987.082583][T23593] bridge_slave_1: entered promiscuous mode [ 987.173887][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.243516][T23560] hsr_slave_0: entered promiscuous mode [ 987.250207][T23560] hsr_slave_1: entered promiscuous mode [ 987.263100][T23593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.288160][T23593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.411275][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.507495][T23593] team0: Port device team_slave_0 added [ 987.633121][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.663068][T23593] team0: Port device team_slave_1 added [ 987.741056][T23493] veth0_vlan: entered promiscuous mode [ 987.807352][T23593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.824452][T23593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.859810][T20161] Bluetooth: hci3: command tx timeout [ 987.866142][T23593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.912323][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.941664][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 987.956726][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.972172][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.984125][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 987.996311][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 988.006539][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.022175][T23593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.029513][T23593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.056468][T23593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.182784][T23593] hsr_slave_0: entered promiscuous mode [ 988.194591][T23593] hsr_slave_1: entered promiscuous mode [ 988.201340][T23593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 988.209534][T23593] Cannot create hsr debugfs directory [ 988.278347][T23493] veth1_vlan: entered promiscuous mode [ 988.614236][ T11] bridge_slave_1: left allmulticast mode [ 988.633091][ T11] bridge_slave_1: left promiscuous mode [ 988.642656][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.664608][ T11] bridge_slave_0: left allmulticast mode [ 988.670522][ T11] bridge_slave_0: left promiscuous mode [ 988.683572][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.705128][ T5088] Bluetooth: hci2: command tx timeout [ 989.460850][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.472215][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.482980][ T11] bond0 (unregistering): Released all slaves [ 989.524580][T23636] netlink: 'syz.0.6889': attribute type 1 has an invalid length. [ 989.532335][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'. [ 989.836096][T23493] veth0_macvtap: entered promiscuous mode [ 989.847072][T23493] veth1_macvtap: entered promiscuous mode [ 989.908922][ T5088] Bluetooth: hci3: command tx timeout [ 990.070468][ T5088] Bluetooth: hci4: command tx timeout [ 990.724155][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.741995][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.754706][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.765894][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.775944][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.788167][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.798762][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.809239][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.819227][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.830113][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.840401][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.852368][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.883691][T23493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.930265][ T11] hsr_slave_0: left promiscuous mode [ 990.950515][ T11] hsr_slave_1: left promiscuous mode [ 990.964797][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.976548][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.990731][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.000847][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.048674][ T11] veth1_macvtap: left promiscuous mode [ 991.054611][ T11] veth0_macvtap: left promiscuous mode [ 991.060516][ T11] veth1_vlan: left promiscuous mode [ 991.066255][ T11] veth0_vlan: left promiscuous mode [ 991.988928][ T5088] Bluetooth: hci3: command tx timeout [ 992.105605][ T11] team0 (unregistering): Port device team_slave_1 removed [ 992.144665][ T5088] Bluetooth: hci4: command tx timeout [ 992.203098][ T11] team0 (unregistering): Port device team_slave_0 removed [ 992.988057][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.999748][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.009749][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.021990][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.032820][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.044577][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.054709][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.065377][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.075409][T23493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.085880][T23493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.098353][T23493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.178525][T23493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.199382][T23493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.213867][T23493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.229403][T23493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.308328][T23560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 993.349090][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.362532][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.437496][T23560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 993.454320][T23662] sp0: Synchronizing with TNC [ 993.500735][T23624] chnl_net:caif_netlink_parms(): no params data found [ 993.518672][T23560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 993.616253][T23560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 993.946539][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.979354][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.990563][T23624] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.002206][T23624] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.009858][T23624] bridge_slave_0: entered allmulticast mode [ 994.018252][T23624] bridge_slave_0: entered promiscuous mode [ 994.032907][T23624] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.055854][T23624] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.064345][T23624] bridge_slave_1: entered allmulticast mode [ 994.083885][T23624] bridge_slave_1: entered promiscuous mode [ 994.235168][ T5088] Bluetooth: hci4: command tx timeout [ 994.385993][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.490960][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.841864][T23593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 994.864202][T23675] program syz.0.6900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.868494][T23624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.894730][T23624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.986391][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.019659][T23593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 995.130364][T23624] team0: Port device team_slave_0 added [ 995.147969][T23593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 995.170026][T23593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 995.232716][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.253204][T23560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.268429][T23624] team0: Port device team_slave_1 added [ 995.298765][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6907'. [ 995.389550][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.466751][T23624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.481943][T23624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.529738][T23624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.542849][T23700] program syz.0.6912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.556139][T23624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.580076][T23624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.610957][T23624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.689628][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.889631][T23624] hsr_slave_0: entered promiscuous mode [ 995.912987][T23624] hsr_slave_1: entered promiscuous mode [ 995.926333][T23624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 995.936360][T23624] Cannot create hsr debugfs directory [ 995.979099][T23560] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.038066][T23712] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 996.052393][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.059824][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.122476][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.129727][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.304817][ T5088] Bluetooth: hci4: command tx timeout [ 996.430447][ T11] bridge_slave_1: left allmulticast mode [ 996.463189][ T11] bridge_slave_1: left promiscuous mode [ 996.479976][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.525954][ T11] bridge_slave_0: left allmulticast mode [ 996.533460][ T11] bridge_slave_0: left promiscuous mode [ 996.566066][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.416207][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.442605][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.460081][ T11] bond0 (unregistering): Released all slaves [ 997.493278][T23593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.846480][T23593] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.017627][ T11] hsr_slave_0: left promiscuous mode [ 998.024102][ T11] hsr_slave_1: left promiscuous mode [ 998.035105][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.047786][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.067291][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.084807][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.124741][ T11] veth1_macvtap: left promiscuous mode [ 998.130381][ T11] veth0_macvtap: left promiscuous mode [ 998.136787][ T11] veth1_vlan: left promiscuous mode [ 998.142542][ T11] veth0_vlan: left promiscuous mode [ 998.902822][ T11] team0 (unregistering): Port device team_slave_1 removed [ 998.972552][ T11] team0 (unregistering): Port device team_slave_0 removed [ 999.694619][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.701735][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.886775][T22546] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.893985][T22546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.262616][T23560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.984819][T23560] veth0_vlan: entered promiscuous mode [ 1001.014667][T23624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1001.042965][T23624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1001.095889][T23624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1001.130716][T23560] veth1_vlan: entered promiscuous mode [ 1001.167023][T23624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1001.276126][T23560] veth0_macvtap: entered promiscuous mode [ 1001.312661][T23560] veth1_macvtap: entered promiscuous mode [ 1001.400839][T23593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.439826][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.453436][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.464380][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.475554][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.505018][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.515815][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.525981][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.537518][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.547898][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.558952][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.570632][T23560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.588314][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.599816][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.611051][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.622298][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.632197][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.643568][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.653959][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.665276][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.675307][T23560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.685849][T23560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.697998][T23560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.776654][T23560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.787589][T23560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.794527][T23541] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1001.796466][T23560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.812844][T23560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.839076][T23593] veth0_vlan: entered promiscuous mode [ 1001.889649][T23624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.904197][T23593] veth1_vlan: entered promiscuous mode [ 1001.961465][T23624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.005950][T23541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.043057][T23541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.060236][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.067483][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.086650][T23541] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1002.106312][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.113533][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.121317][T23541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.140959][T23541] usb 3-1: config 0 descriptor?? [ 1002.230069][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.246012][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.257867][T23593] veth0_macvtap: entered promiscuous mode [ 1002.329452][T23593] veth1_macvtap: entered promiscuous mode [ 1002.349904][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.356919][T23624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.380660][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.433644][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.465036][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.481550][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.499162][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.512814][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.523445][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.534108][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.546364][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.557231][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.567915][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.578199][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.590641][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.599124][T23541] corsair 0003:1B1C:1B3E.0015: failed to start in urb: -90 [ 1002.602622][T23593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.630211][T23541] corsair 0003:1B1C:1B3E.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 1002.637596][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.663430][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.673537][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.684198][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.694813][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.705864][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.716065][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.728280][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.739781][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.750643][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.761606][T23593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.772108][T23593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.786951][T23593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.892542][ T45] usb 3-1: USB disconnect, device number 41 [ 1002.976490][T23593] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.013544][T23593] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.043709][T23593] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.053885][T23593] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.140075][T23624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.281885][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.457083][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.542131][ T7390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.553303][ T7390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.593755][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.655364][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.674687][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.726983][T23624] veth0_vlan: entered promiscuous mode [ 1003.869925][T23624] veth1_vlan: entered promiscuous mode [ 1003.897588][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1003.897608][ T29] audit: type=1400 audit(2000000571.803:1510): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=23806 comm="syz.0.6949" [ 1004.142151][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.197967][T23624] veth0_macvtap: entered promiscuous mode [ 1005.277543][T23624] veth1_macvtap: entered promiscuous mode [ 1005.358446][T20161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1005.371765][T20161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1005.384058][T20161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1005.406908][T20161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1005.415399][ T61] bridge_slave_1: left allmulticast mode [ 1005.422643][ T61] bridge_slave_1: left promiscuous mode [ 1005.422713][T20161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1005.438607][T20161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.444743][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.473702][ T61] bridge_slave_0: left allmulticast mode [ 1005.480006][ T61] bridge_slave_0: left promiscuous mode [ 1005.494813][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.216551][T20161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1006.235560][T20161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1006.252023][T20161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1006.315775][T20161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1006.339798][T20161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1006.351463][T20161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1006.351889][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.418173][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.439723][ T61] bond0 (unregistering): Released all slaves [ 1006.473340][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.484369][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.504053][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.540848][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.557576][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.573288][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.585609][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.597286][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.612033][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.624066][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.639344][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.652389][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.666374][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.704871][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.726015][T23624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.761081][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.784144][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.806763][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.827794][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.847964][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.872812][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.884716][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.904074][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.924279][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.944924][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.962832][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.981630][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.999068][T23624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.017265][T23624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.052434][T23624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.231937][T23624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.254471][T23624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.263217][T23624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.299872][T23624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.505071][T20161] Bluetooth: hci2: command tx timeout [ 1007.746941][ T61] hsr_slave_0: left promiscuous mode [ 1007.760905][ T61] hsr_slave_1: left promiscuous mode [ 1007.778925][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.810551][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.824004][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.840608][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.922292][ T61] veth1_macvtap: left promiscuous mode [ 1007.934617][ T61] veth0_macvtap: left promiscuous mode [ 1007.954682][ T61] veth1_vlan: left promiscuous mode [ 1007.969450][ T61] veth0_vlan: left promiscuous mode [ 1008.388140][T20161] Bluetooth: hci3: command tx timeout [ 1009.343855][T23855] input: syz1 as /devices/virtual/input/input49 [ 1009.584516][T20161] Bluetooth: hci2: command tx timeout [ 1009.803862][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1009.934164][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1010.464898][T20161] Bluetooth: hci3: command tx timeout [ 1011.222373][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.253336][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.282940][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.291779][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.522115][T23882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6975'. [ 1011.634009][T23827] chnl_net:caif_netlink_parms(): no params data found [ 1011.665122][T20161] Bluetooth: hci2: command tx timeout [ 1011.705360][T23818] chnl_net:caif_netlink_parms(): no params data found [ 1011.837210][T23893] Bluetooth: MGMT ver 1.22 [ 1011.882347][T23888] random: crng reseeded on system resumption [ 1011.911749][ C0] vcan0: j1939_tp_rxtimer: 0xffff888042605c00: rx timeout, send abort [ 1011.920965][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888042605c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1012.103043][T23827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.110595][T23827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.119091][T23827] bridge_slave_0: entered allmulticast mode [ 1012.128063][T23827] bridge_slave_0: entered promiscuous mode [ 1012.147635][T23818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.154987][T23818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.162429][T23818] bridge_slave_0: entered allmulticast mode [ 1012.170413][T23818] bridge_slave_0: entered promiscuous mode [ 1012.187075][T23818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.194577][T23818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.202080][T23818] bridge_slave_1: entered allmulticast mode [ 1012.215523][T23818] bridge_slave_1: entered promiscuous mode [ 1012.317184][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.343383][T23827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.351241][T23827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.358950][T23827] bridge_slave_1: entered allmulticast mode [ 1012.366486][T23827] bridge_slave_1: entered promiscuous mode [ 1012.401986][T23818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.449680][T23827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.536028][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.554579][T20161] Bluetooth: hci3: command tx timeout [ 1012.621654][T23818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.742916][T23827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.837305][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1012.868394][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1012.880512][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1012.906865][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.917480][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1012.927418][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1012.936718][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1012.992360][T23818] team0: Port device team_slave_0 added [ 1013.089034][T23917] nbd: nbd0 already in use [ 1013.091658][T23827] team0: Port device team_slave_0 added [ 1013.142405][T23818] team0: Port device team_slave_1 added [ 1013.239530][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.289671][T23827] team0: Port device team_slave_1 added [ 1013.339700][ T5126] kernel read not supported for file /rfkill (pid: 5126 comm: kworker/0:4) [ 1013.377250][T23818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.384680][T23818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.415865][T23818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.500198][T23818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.541343][T23818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.579077][T23818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.595023][ T29] audit: type=1804 audit(2000000581.493:1511): pid=23932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6988" name="/root/syzkaller.pooBQG/41/cgroup.controllers" dev="sda1" ino=2050 res=1 errno=0 [ 1013.618144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.634316][T23827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.641480][T23827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.668364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.675669][T23827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.743781][T23827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.751657][ T5088] Bluetooth: hci2: command tx timeout [ 1013.757342][T23827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.783665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.791761][T23827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.839822][T23818] hsr_slave_0: entered promiscuous mode [ 1013.854895][T23818] hsr_slave_1: entered promiscuous mode [ 1014.074143][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.128650][T23827] hsr_slave_0: entered promiscuous mode [ 1014.138859][T23827] hsr_slave_1: entered promiscuous mode [ 1014.146221][T23827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1014.153956][T23827] Cannot create hsr debugfs directory [ 1014.163532][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1014.300390][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.490929][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.624951][ T5088] Bluetooth: hci3: command tx timeout [ 1014.663149][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.788030][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d0ae000: rx timeout, send abort [ 1014.798855][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d0ae000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1014.907775][T23907] chnl_net:caif_netlink_parms(): no params data found [ 1015.086637][ T5088] Bluetooth: hci4: command tx timeout [ 1016.352970][T23970] nbd: nbd2 already in use [ 1016.714888][T23907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.725533][T23907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.732943][T23907] bridge_slave_0: entered allmulticast mode [ 1016.746465][T23907] bridge_slave_0: entered promiscuous mode [ 1016.765127][ T61] bridge_slave_1: left allmulticast mode [ 1016.770817][ T61] bridge_slave_1: left promiscuous mode [ 1016.785789][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.825955][ T61] bridge_slave_0: left allmulticast mode [ 1016.831877][ T61] bridge_slave_0: left promiscuous mode [ 1016.855664][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.885028][ T61] bridge_slave_1: left allmulticast mode [ 1016.894723][ T61] bridge_slave_1: left promiscuous mode [ 1016.900608][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.941470][ T29] audit: type=1804 audit(2000000584.843:1512): pid=23981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.7000" name="/root/syzkaller.pooBQG/51/cgroup.controllers" dev="sda1" ino=2069 res=1 errno=0 [ 1016.982779][ T61] bridge_slave_0: left allmulticast mode [ 1016.988801][ T61] bridge_slave_0: left promiscuous mode [ 1016.997226][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.105338][T20161] Bluetooth: hci4: command tx timeout [ 1017.264947][T20161] Bluetooth: hci0: command 0x0406 tx timeout [ 1018.154760][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.178290][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.209193][ T61] bond0 (unregistering): Released all slaves [ 1018.470502][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.487046][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.498383][ T61] bond0 (unregistering): Released all slaves [ 1018.519478][T23907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.527947][T23907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.536689][T23907] bridge_slave_1: entered allmulticast mode [ 1018.547654][T23907] bridge_slave_1: entered promiscuous mode [ 1018.788362][T23907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.879022][T23907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.075920][T23818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1019.115900][T23907] team0: Port device team_slave_0 added [ 1019.184621][ T5088] Bluetooth: hci4: command tx timeout [ 1019.190760][T23818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1019.215804][T23818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1019.244091][T23907] team0: Port device team_slave_1 added [ 1019.289701][T23818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1019.960647][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880452bb800: rx timeout, send abort [ 1019.969382][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880452bb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1020.111933][T23907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.119227][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.160221][T23907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.296619][ T61] hsr_slave_0: left promiscuous mode [ 1020.302430][ T61] hsr_slave_1: left promiscuous mode [ 1020.310386][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.318558][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.370441][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.390985][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.439263][ T61] hsr_slave_0: left promiscuous mode [ 1020.453219][ T61] hsr_slave_1: left promiscuous mode [ 1020.463793][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.483960][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.524137][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.525735][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1020.545609][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.641437][ T61] veth1_macvtap: left promiscuous mode [ 1020.675954][ T61] veth0_macvtap: left promiscuous mode [ 1020.686690][ T61] veth1_vlan: left promiscuous mode [ 1020.692809][ T61] veth0_vlan: left promiscuous mode [ 1020.715371][ T61] veth1_macvtap: left promiscuous mode [ 1020.724205][ T61] veth0_macvtap: left promiscuous mode [ 1020.731276][ T61] veth1_vlan: left promiscuous mode [ 1020.736765][ T61] veth0_vlan: left promiscuous mode [ 1021.265123][ T5088] Bluetooth: hci4: command tx timeout [ 1021.761960][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1021.832045][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1022.814076][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a533000: rx timeout, send abort [ 1022.822542][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a533000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1022.915240][T24040] syz.2.7023[24040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1022.915496][T24040] syz.2.7023[24040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1023.386905][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1023.487814][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1024.370178][T23907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.381596][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.408099][T23907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.424300][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1024.651668][T23907] hsr_slave_0: entered promiscuous mode [ 1024.674992][T23907] hsr_slave_1: entered promiscuous mode [ 1024.695708][T23907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.703408][T23907] Cannot create hsr debugfs directory [ 1024.826136][T23827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1024.854056][T23827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1024.914215][T23827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1024.945778][T23827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1025.178504][T23818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.339989][T23818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.401141][T23541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.408413][T23541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.461201][T23541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.468382][T23541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.526482][ T8] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1025.537434][T23827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.593779][T23827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.712216][T23541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.719424][T23541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.739394][ T8] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.770875][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.778108][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.783142][ T8] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1025.810569][ T8] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1025.846500][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.951510][T23907] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1025.973814][T23907] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1025.985663][T23907] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1025.996179][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b37a400: rx timeout, send abort [ 1026.004727][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b37a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1026.032766][T23907] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1026.099134][T23818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.332001][T23818] veth0_vlan: entered promiscuous mode [ 1026.345141][ T8] usb 3-1: language id specifier not provided by device, defaulting to English [ 1026.389183][T23907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.412876][T23818] veth1_vlan: entered promiscuous mode [ 1026.450557][T23907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.472307][T18815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.479694][T18815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.518573][T18815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.526055][T18815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.548915][ T8] usb 3-1: USB disconnect, device number 42 [ 1026.550132][T23818] veth0_macvtap: entered promiscuous mode [ 1026.567359][T23818] veth1_macvtap: entered promiscuous mode [ 1026.591010][T23827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.627670][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.639572][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.649583][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.660378][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.670632][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.681207][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.692994][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.703666][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.715072][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.727012][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.738663][T23818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.748984][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.760206][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.771533][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.782194][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.792649][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.803818][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.814724][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.830505][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.840753][T23818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.852699][T23818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.863735][T23818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.903255][T23818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.913833][T23818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.922787][T23818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.932529][T23818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.982009][T23827] veth0_vlan: entered promiscuous mode [ 1027.039200][T23827] veth1_vlan: entered promiscuous mode [ 1027.086965][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.111291][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.154090][T23827] veth0_macvtap: entered promiscuous mode [ 1027.182676][T23827] veth1_macvtap: entered promiscuous mode [ 1027.257786][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.274934][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.287693][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.308666][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.319459][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.330783][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.343794][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.356616][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.366582][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.377251][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.387520][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.398191][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.410010][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.420858][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.433205][T23827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.470649][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.482261][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.493567][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.504797][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.515441][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.526308][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.536434][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.548288][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.558198][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.569331][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.580753][T23827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.591918][T23827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.607671][T23827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.619421][T23827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.630102][T23827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.639612][T23827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.649239][T23827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.742779][T23907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.910922][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.923180][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.993462][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.002693][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.245219][T23907] veth0_vlan: entered promiscuous mode [ 1028.261483][T23907] veth1_vlan: entered promiscuous mode [ 1028.525367][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.639649][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1029.233610][T23907] veth0_macvtap: entered promiscuous mode [ 1029.312050][T23907] veth1_macvtap: entered promiscuous mode [ 1029.341206][T24104] program syz.0.7043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.408215][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.444325][T24108] syz.0.7045[24108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.445062][T24108] syz.0.7045[24108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.456652][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.483490][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.525780][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.554148][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.554225][ T29] audit: type=1326 audit(2000000597.453:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1029.576485][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.619589][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.634487][ T29] audit: type=1326 audit(2000000597.453:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1029.664603][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.675628][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.686892][ T29] audit: type=1326 audit(2000000597.503:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1029.710728][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.720816][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.733429][ T29] audit: type=1326 audit(2000000597.503:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1029.763204][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.774180][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.802342][ T29] audit: type=1326 audit(2000000597.503:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1029.825805][T20161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1029.846632][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.854761][ T29] audit: type=1326 audit(2000000597.513:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1029.856746][T20161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1029.890224][ T29] audit: type=1326 audit(2000000597.793:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1029.909356][T23907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.920280][T20161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1029.940495][T20161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1029.947002][ T29] audit: type=1326 audit(2000000597.793:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8c336cbe7 code=0x7ffc0000 [ 1029.965814][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.985095][T20161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1030.002942][T20161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1030.056599][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.067559][ T29] audit: type=1326 audit(2000000597.793:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8c33115b9 code=0x7ffc0000 [ 1030.090626][ T29] audit: type=1326 audit(2000000597.793:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24109 comm="syz.2.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8c336cbe7 code=0x7ffc0000 [ 1030.094707][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.135304][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.159853][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.173408][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.184647][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.196316][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.214032][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.225661][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.235799][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.246652][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.256842][T23907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.268155][T23907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.282687][T23907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.300256][T24122] lo: entered promiscuous mode [ 1030.318748][T24122] tunl0: entered promiscuous mode [ 1030.324927][T24122] gre0: entered promiscuous mode [ 1030.330774][T24122] gretap0: entered promiscuous mode [ 1030.342707][T24122] erspan0: entered promiscuous mode [ 1030.354012][T24122] ip_vti0: entered promiscuous mode [ 1030.364210][T24122] ip6_vti0: entered promiscuous mode [ 1030.371473][T24122] sit0: entered promiscuous mode [ 1030.377951][T24122] ip6tnl0: entered promiscuous mode [ 1030.387645][T24122] ip6gre0: entered promiscuous mode [ 1030.393738][T24122] syz_tun: entered promiscuous mode [ 1030.400027][T24122] ip6gretap0: entered promiscuous mode [ 1030.409106][T24122] bridge0: entered promiscuous mode [ 1030.415911][T24122] vcan0: entered promiscuous mode [ 1030.421394][T24122] bond0: entered promiscuous mode [ 1030.426844][T24122] bond_slave_0: entered promiscuous mode [ 1030.432622][T24122] bond_slave_1: entered promiscuous mode [ 1030.440023][T24122] team0: entered promiscuous mode [ 1030.445927][T24122] team_slave_0: entered promiscuous mode [ 1030.451735][T24122] team_slave_1: entered promiscuous mode [ 1030.458716][T24122] dummy0: entered promiscuous mode [ 1030.464347][T24122] nlmon0: entered promiscuous mode [ 1030.472338][T24122] caif0: entered promiscuous mode [ 1030.477757][T24122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1030.517210][T23907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.534810][T23907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.543701][T23907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.561609][T23907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.745762][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.764651][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.853672][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.887915][ T7390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.898818][ T7390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.003100][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.119918][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.204292][T24114] chnl_net:caif_netlink_parms(): no params data found [ 1031.293345][T24114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.300752][T24114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.308414][T24114] bridge_slave_0: entered allmulticast mode [ 1031.316271][T24114] bridge_slave_0: entered promiscuous mode [ 1031.324798][T24114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.336468][T24114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.347506][T24114] bridge_slave_1: entered allmulticast mode [ 1031.355570][T24114] bridge_slave_1: entered promiscuous mode [ 1031.468977][T24114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.541585][T24114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.702086][T24114] team0: Port device team_slave_0 added [ 1031.731637][T24114] team0: Port device team_slave_1 added [ 1031.767854][ T51] bridge_slave_1: left allmulticast mode [ 1031.773758][ T51] bridge_slave_1: left promiscuous mode [ 1031.780048][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.790300][ T51] bridge_slave_0: left allmulticast mode [ 1031.796610][ T51] bridge_slave_0: left promiscuous mode [ 1031.802555][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.876626][T20161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1031.888116][T20161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1031.907657][T20161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1031.928684][T20161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1031.942109][T20161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1031.951681][T20161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1032.071562][ T5088] Bluetooth: hci2: command tx timeout [ 1032.381254][T24145] program syz.0.7055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1032.574504][T22546] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1032.646787][T20161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1032.661680][T20161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1032.687072][T20161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1032.725714][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.735629][T20161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1032.749719][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.759042][T20161] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1032.768927][T20161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1032.780191][ T51] bond0 (unregistering): Released all slaves [ 1032.791030][T22546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.808137][T22546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.836022][T22546] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1032.846430][T22546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.872632][T24114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.903477][T24114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.931492][T22546] usb 3-1: config 0 descriptor?? [ 1032.949363][T24114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.982767][T24114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.994272][T24114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.023680][T24114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.230565][T24114] hsr_slave_0: entered promiscuous mode [ 1033.239833][T24114] hsr_slave_1: entered promiscuous mode [ 1033.246459][T24114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.254230][T24114] Cannot create hsr debugfs directory [ 1033.388336][T22546] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 1033.401293][T22546] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 1033.410985][T22546] arvo 0003:1E7D:30D4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1033.493408][ T51] hsr_slave_0: left promiscuous mode [ 1033.500700][ T51] hsr_slave_1: left promiscuous mode [ 1033.511669][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.519759][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.528828][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.536793][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.567530][ T51] veth1_macvtap: left promiscuous mode [ 1033.573358][ T51] veth0_macvtap: left promiscuous mode [ 1033.579779][ T51] veth1_vlan: left promiscuous mode [ 1033.588882][ T51] veth0_vlan: left promiscuous mode [ 1033.821621][ T5128] usb 3-1: USB disconnect, device number 43 [ 1034.084658][T20161] Bluetooth: hci3: command tx timeout [ 1034.144838][T20161] Bluetooth: hci2: command tx timeout [ 1034.427581][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1034.550660][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1034.664372][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1034.680566][ T29] audit: type=1326 audit(2000000602.573:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1034.722655][ T29] audit: type=1326 audit(2000000602.573:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1034.755755][ T29] audit: type=1326 audit(2000000602.573:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1034.787858][ T29] audit: type=1326 audit(2000000602.573:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1034.828174][ T29] audit: type=1326 audit(2000000602.573:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1034.852644][ T29] audit: type=1326 audit(2000000602.573:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1034.879548][T20161] Bluetooth: hci4: command tx timeout [ 1034.891257][ T29] audit: type=1326 audit(2000000602.573:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1034.934804][ T29] audit: type=1326 audit(2000000602.573:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8c336cbe7 code=0x7ffc0000 [ 1034.996399][ T29] audit: type=1326 audit(2000000602.573:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8c33115b9 code=0x7ffc0000 [ 1035.057995][ T29] audit: type=1326 audit(2000000602.573:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24155 comm="syz.2.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa8c3375b99 code=0x7ffc0000 [ 1035.569222][T24164] cannot load conntrack support for proto=3 [ 1036.156189][T20161] Bluetooth: hci3: command tx timeout [ 1036.224985][T20161] Bluetooth: hci2: command tx timeout [ 1036.954103][T20161] Bluetooth: hci4: command tx timeout [ 1037.601888][T24148] chnl_net:caif_netlink_parms(): no params data found [ 1037.737806][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1037.737838][T24183] netlink: 'syz.0.7068': attribute type 3 has an invalid length. [ 1037.814583][T24187] trusted_key: encrypted_key: master key parameter is missing [ 1038.016540][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.067794][T24137] chnl_net:caif_netlink_parms(): no params data found [ 1038.232694][T20161] Bluetooth: hci3: command tx timeout [ 1038.237223][T24201] netlink: 'syz.0.7074': attribute type 1 has an invalid length. [ 1038.246730][T24201] netlink: 'syz.0.7074': attribute type 3 has an invalid length. [ 1038.257580][T24201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7074'. [ 1038.260120][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.285406][T24201] NCSI netlink: No device for ifindex 0 [ 1038.304733][T20161] Bluetooth: hci2: command tx timeout [ 1038.423144][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.473333][T24148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.480760][T24148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.493511][T24148] bridge_slave_0: entered allmulticast mode [ 1038.506547][T24148] bridge_slave_0: entered promiscuous mode [ 1038.515820][T24148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.523046][T24148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.531630][T24148] bridge_slave_1: entered allmulticast mode [ 1038.538936][T24148] bridge_slave_1: entered promiscuous mode [ 1038.615826][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.794054][T24148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.812030][T24148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.821912][T24137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.834313][T24137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.841690][T24137] bridge_slave_0: entered allmulticast mode [ 1038.849620][T24137] bridge_slave_0: entered promiscuous mode [ 1038.861756][T24137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.869124][T24137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.883036][T24137] bridge_slave_1: entered allmulticast mode [ 1038.890667][T24137] bridge_slave_1: entered promiscuous mode [ 1039.025488][T20161] Bluetooth: hci4: command tx timeout [ 1039.090475][T24148] team0: Port device team_slave_0 added [ 1039.100281][T24137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.193864][T24148] team0: Port device team_slave_1 added [ 1039.220886][T24137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.334803][T24114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1039.356946][T24114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1039.482302][T24114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1039.516040][T24114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1039.535947][T24231] netlink: 'syz.0.7085': attribute type 1 has an invalid length. [ 1039.545525][T24231] netlink: 'syz.0.7085': attribute type 3 has an invalid length. [ 1039.557947][T24231] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7085'. [ 1039.568456][T24231] NCSI netlink: No device for ifindex 0 [ 1039.587264][T24148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.594249][T24148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.639515][T24148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.661874][T24137] team0: Port device team_slave_0 added [ 1039.687719][T24137] team0: Port device team_slave_1 added [ 1039.787391][T24148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.794354][T24148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.847083][T24148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.908053][T24137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.924830][T24137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.985145][T24137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.023131][T24137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.041955][T24137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.079760][T24137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.213498][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.305191][T20161] Bluetooth: hci3: command tx timeout [ 1040.456832][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.581497][T24148] hsr_slave_0: entered promiscuous mode [ 1040.592920][T24257] netlink: 'syz.0.7097': attribute type 1 has an invalid length. [ 1040.593185][T24148] hsr_slave_1: entered promiscuous mode [ 1040.604335][T24257] netlink: 'syz.0.7097': attribute type 3 has an invalid length. [ 1040.614865][T24257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7097'. [ 1040.623932][T24257] NCSI netlink: No device for ifindex 0 [ 1040.698958][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.808888][T24137] hsr_slave_0: entered promiscuous mode [ 1040.825317][T24137] hsr_slave_1: entered promiscuous mode [ 1040.835779][T24137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.854212][T24137] Cannot create hsr debugfs directory [ 1040.913159][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.107228][T20161] Bluetooth: hci4: command tx timeout [ 1041.428486][T24114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.479516][T24285] trusted_key: encrypted_key: master key parameter is missing [ 1041.485694][T24284] netlink: 'syz.2.7109': attribute type 1 has an invalid length. [ 1041.507175][T24284] netlink: 'syz.2.7109': attribute type 3 has an invalid length. [ 1041.507202][T24284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7109'. [ 1041.507221][T24284] NCSI netlink: No device for ifindex 0 [ 1041.582659][ T51] bridge_slave_1: left allmulticast mode [ 1041.582687][ T51] bridge_slave_1: left promiscuous mode [ 1041.582886][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.605387][ T51] bridge_slave_0: left allmulticast mode [ 1041.635207][ T51] bridge_slave_0: left promiscuous mode [ 1041.635420][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.647265][ T51] bridge_slave_1: left allmulticast mode [ 1041.647294][ T51] bridge_slave_1: left promiscuous mode [ 1041.647515][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.650517][ T51] bridge_slave_0: left allmulticast mode [ 1041.650541][ T51] bridge_slave_0: left promiscuous mode [ 1041.650701][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.851319][T24290] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1044.284012][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.298122][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.309861][ T51] bond0 (unregistering): Released all slaves [ 1044.502807][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.518164][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.529181][ T51] bond0 (unregistering): Released all slaves [ 1044.569725][T24289] netlink: 'syz.2.7110': attribute type 32 has an invalid length. [ 1044.579003][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7110'. [ 1044.588128][T24289] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1044.597957][T24289] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1044.614643][T24303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7115'. [ 1044.682783][T24114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.748420][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.755629][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.818676][T24309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.854897][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.862084][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.191462][T24114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.907696][ T51] hsr_slave_0: left promiscuous mode [ 1045.964949][ T51] hsr_slave_1: left promiscuous mode [ 1045.980864][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.003845][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.022634][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.037766][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.091487][ T51] hsr_slave_0: left promiscuous mode [ 1046.114731][ T51] hsr_slave_1: left promiscuous mode [ 1046.121096][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.128657][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.136923][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.154843][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.609251][ T51] veth1_macvtap: left promiscuous mode [ 1046.660092][ T51] veth0_macvtap: left promiscuous mode [ 1046.834770][ T51] veth1_vlan: left promiscuous mode [ 1046.843391][ T51] veth0_vlan: left promiscuous mode [ 1046.852724][ T51] veth1_macvtap: left promiscuous mode [ 1046.858525][ T51] veth0_macvtap: left promiscuous mode [ 1046.864192][ T51] veth1_vlan: left promiscuous mode [ 1046.869701][ T51] veth0_vlan: left promiscuous mode [ 1047.715279][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1047.792905][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1049.085018][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1049.152284][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1049.902824][T24342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7127'. [ 1049.929049][T24114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.288199][T24114] veth0_vlan: entered promiscuous mode [ 1050.346431][T24137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1050.396169][T24114] veth1_vlan: entered promiscuous mode [ 1050.422171][T24137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1050.502247][T24137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1050.530407][T24114] veth0_macvtap: entered promiscuous mode [ 1050.554155][T24114] veth1_macvtap: entered promiscuous mode [ 1050.595873][T24137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1050.727743][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.769167][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.780407][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.792079][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.802160][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.812694][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.824581][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.847861][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.869038][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.894470][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.937113][T24114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.951206][T24148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1050.997044][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.016961][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.027468][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.039009][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.049109][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.066661][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.078804][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.092932][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.103032][T24114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.113962][T24114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.127059][T24114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.150548][T24148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1051.202377][T24148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1051.220077][T24148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1051.251432][T24114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.274844][T24114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.285815][T24114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.304471][T24114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.555370][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.574514][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.627329][ T7390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.636391][ T7390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.747513][T24372] cannot load conntrack support for proto=3 [ 1051.762843][T20161] Bluetooth: hci1: command 0x0406 tx timeout [ 1052.558774][T24137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.615151][T24148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.645665][T24137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.741760][T24148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.760841][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.767989][T12663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.787349][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.794534][T12663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.821286][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.828525][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.864881][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.872320][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.959368][T24137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.194187][T24390] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7145'. [ 1053.290097][T24137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.367795][T24148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.409489][T24137] veth0_vlan: entered promiscuous mode [ 1053.440684][T24137] veth1_vlan: entered promiscuous mode [ 1053.528791][T24137] veth0_macvtap: entered promiscuous mode [ 1053.550593][T24137] veth1_macvtap: entered promiscuous mode [ 1053.572886][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.583550][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.594353][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.605310][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.625784][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.653705][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.673971][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.694528][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.714519][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.735489][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.753481][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.766928][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.779079][T24137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.806988][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.834647][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.846529][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.863285][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.873298][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.892522][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.902823][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.914981][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.925469][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.935970][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.946386][T24137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.957840][T24137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.970185][T24137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.027866][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.069350][T24137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.078934][T24137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.087793][T24137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.097115][T24137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.151295][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.233695][T24148] veth0_vlan: entered promiscuous mode [ 1054.280822][T24148] veth1_vlan: entered promiscuous mode [ 1054.380673][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.413371][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.415509][T24148] veth0_macvtap: entered promiscuous mode [ 1054.427323][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.586857][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.683496][T24148] veth1_macvtap: entered promiscuous mode [ 1054.719377][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.723155][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7149'. [ 1054.748701][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.789362][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.796176][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.817004][T24413] bridge1: entered promiscuous mode [ 1054.939766][T20161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1054.953876][T20161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1054.966499][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.974800][T20161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1054.977997][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.009080][T20161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1055.018647][T20161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1055.026674][T20161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1055.034882][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.045432][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.061382][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.078136][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.094538][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.118682][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.177905][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.209899][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.220083][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.231889][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.250288][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.263817][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.278099][T24148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.451237][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.462307][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.473915][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.486362][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.600838][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.622924][T24427] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1056.041289][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.604888][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.615971][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.628294][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.654530][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.670144][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.680863][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.696511][T24148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.712032][T24148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.726839][T24148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.801085][T24426] netlink: 'syz.2.7153': attribute type 32 has an invalid length. [ 1056.809165][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1056.818394][T24426] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1056.828670][T24426] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1056.853791][T24148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.880183][T24148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.891554][T24148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.917130][T24148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.995459][ T11] bridge_slave_1: left allmulticast mode [ 1057.001725][ T11] bridge_slave_1: left promiscuous mode [ 1057.008532][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.027365][ T11] bridge_slave_0: left allmulticast mode [ 1057.054648][ T11] bridge_slave_0: left promiscuous mode [ 1057.062728][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.092625][T24437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1057.106014][T20161] Bluetooth: hci2: command tx timeout [ 1057.767387][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.780060][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.791704][ T11] bond0 (unregistering): Released all slaves [ 1059.641169][T24449] binder: 24441:24449 ioctl 4018620d 0 returned -22 [ 1059.869190][T20161] Bluetooth: hci2: command tx timeout [ 1060.331644][ T7394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.352882][ T7390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.365645][ T7394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.386697][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1060.412422][ T7390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.423517][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.438884][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1060.448967][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.462341][ T11] hsr_slave_0: left promiscuous mode [ 1060.462399][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1060.482226][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1060.521840][ T11] hsr_slave_1: left promiscuous mode [ 1060.563898][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.570729][T24458] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1060.570729][T24458] program syz.0.7164 not setting count and/or reply_len properly [ 1060.573754][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.601510][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.609624][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.642630][ T11] veth1_macvtap: left promiscuous mode [ 1060.648496][ T11] veth0_macvtap: left promiscuous mode [ 1060.655353][ T11] veth1_vlan: left promiscuous mode [ 1060.660793][ T11] veth0_vlan: left promiscuous mode [ 1060.800488][T24464] binder_alloc: 24463: binder_alloc_buf size 1500523191332350224 failed, no address space [ 1060.812578][T24464] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1060.869808][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 1060.869826][ T29] audit: type=1400 audit(2000000628.763:1650): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=24465 comm="syz.0.7167" [ 1061.510290][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1061.581733][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1061.915420][ T5088] Bluetooth: hci2: command tx timeout [ 1062.553167][ T5088] Bluetooth: hci3: command tx timeout [ 1062.588426][T24469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7168'. [ 1063.215824][T24416] chnl_net:caif_netlink_parms(): no params data found [ 1063.308476][ T29] audit: type=1326 audit(2000000631.193:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24480 comm="syz.2.7172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8c3375b99 code=0x0 [ 1063.420200][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.641772][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.680492][T24450] chnl_net:caif_netlink_parms(): no params data found [ 1063.702229][T24416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.729211][T24416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.753316][T24416] bridge_slave_0: entered allmulticast mode [ 1063.781814][T24416] bridge_slave_0: entered promiscuous mode [ 1063.886121][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.928765][T24416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.955782][T24416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.986569][ T5088] Bluetooth: hci2: command tx timeout [ 1064.005659][T24416] bridge_slave_1: entered allmulticast mode [ 1064.035230][T24416] bridge_slave_1: entered promiscuous mode [ 1064.049780][ T29] audit: type=1800 audit(2000000631.953:1652): pid=24493 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.7173" name="file1" dev="sda1" ino=2074 res=0 errno=0 [ 1064.273016][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.358448][T20161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1064.372200][T20161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1064.383796][T20161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1064.414193][T20161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1064.427665][T24416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.448060][T20161] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1064.456118][T20161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1064.504287][T24416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.531282][T24502] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1064.531282][T24502] program syz.2.7175 not setting count and/or reply_len properly [ 1064.631214][ T5088] Bluetooth: hci3: command tx timeout [ 1064.671136][T24450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.700180][T24450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.709078][T24450] bridge_slave_0: entered allmulticast mode [ 1064.726331][T24450] bridge_slave_0: entered promiscuous mode [ 1064.738233][T24450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.746346][T24450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.754721][T24450] bridge_slave_1: entered allmulticast mode [ 1064.763207][T24450] bridge_slave_1: entered promiscuous mode [ 1064.812542][T24506] binder_alloc: 24505: binder_alloc_buf size 1500523191332350224 failed, no address space [ 1064.824085][T24506] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1064.847825][T24416] team0: Port device team_slave_0 added [ 1065.015805][T24416] team0: Port device team_slave_1 added [ 1065.169288][T24450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.221241][T24416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.241161][T24416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.285709][T24416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.332292][T24450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.434345][T24416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.442277][T24416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.480007][T24416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.598589][T24450] team0: Port device team_slave_0 added [ 1065.687160][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7181'. [ 1065.822076][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.909314][T24450] team0: Port device team_slave_1 added [ 1065.959567][T24519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.968796][T24519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.016858][T24519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.026344][T24519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.036639][T24519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.043879][T24519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.209731][T24519] team0: Port device bridge0 added [ 1066.372414][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.393244][T24522] bridge_slave_1: left allmulticast mode [ 1066.400624][T24522] bridge_slave_1: left promiscuous mode [ 1066.410003][T24522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.434795][ T932] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1066.458875][T24522] bridge_slave_0: left allmulticast mode [ 1066.471237][T24522] bridge_slave_0: left promiscuous mode [ 1066.478510][T24522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.544862][ T5088] Bluetooth: hci4: command tx timeout [ 1066.555258][T24522] team0: Port device bridge0 removed [ 1066.650086][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1066.663836][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1066.665162][T24450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.674088][ T932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1066.694004][ T932] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1066.702089][T24450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.703147][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.742901][ T5088] Bluetooth: hci3: command tx timeout [ 1066.750662][T24450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.752392][ T932] usb 3-1: config 0 descriptor?? [ 1066.789857][T24416] hsr_slave_0: entered promiscuous mode [ 1066.798233][T24416] hsr_slave_1: entered promiscuous mode [ 1066.813408][T24416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.824501][T24416] Cannot create hsr debugfs directory [ 1066.895836][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.950196][T24450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.958348][T24450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.002233][T24450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.130921][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.229021][ T932] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x1 [ 1067.239880][ T932] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 1067.251106][ T932] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1067.371528][T24497] chnl_net:caif_netlink_parms(): no params data found [ 1067.393868][T24530] can: request_module (can-proto-4) failed. [ 1067.417579][T24450] hsr_slave_0: entered promiscuous mode [ 1067.425287][T24450] hsr_slave_1: entered promiscuous mode [ 1067.431797][T24450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1067.439696][T24450] Cannot create hsr debugfs directory [ 1067.921552][T24497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.944805][T24497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.960393][T24497] bridge_slave_0: entered allmulticast mode [ 1067.968915][T24497] bridge_slave_0: entered promiscuous mode [ 1067.980158][T24497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.991051][T24497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.000602][T24497] bridge_slave_1: entered allmulticast mode [ 1068.008954][T24497] bridge_slave_1: entered promiscuous mode [ 1068.206413][ T11] bridge_slave_1: left allmulticast mode [ 1068.212660][ T11] bridge_slave_1: left promiscuous mode [ 1068.237397][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.271303][ T11] bridge_slave_0: left allmulticast mode [ 1068.291743][ T11] bridge_slave_0: left promiscuous mode [ 1068.316975][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.338403][ T11] bridge_slave_1: left allmulticast mode [ 1068.344281][ T11] bridge_slave_1: left promiscuous mode [ 1068.365225][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.379416][ T11] bridge_slave_0: left allmulticast mode [ 1068.394755][ T11] bridge_slave_0: left promiscuous mode [ 1068.410358][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.626162][ T5088] Bluetooth: hci4: command tx timeout [ 1068.785106][ T5088] Bluetooth: hci3: command tx timeout [ 1068.804208][T24544] binder_alloc: 24543: binder_alloc_buf size 1500523191332350224 failed, no address space [ 1068.815136][T24544] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1070.119446][ T932] usb 3-1: USB disconnect, device number 44 [ 1070.493655][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.509864][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.520700][ T11] bond0 (unregistering): Released all slaves [ 1070.716662][ T5088] Bluetooth: hci4: command tx timeout [ 1070.769745][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.788421][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.800162][ T11] bond0 (unregistering): Released all slaves [ 1070.817120][T24497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.831152][T24497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.909703][T24548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7189'. [ 1070.920328][T24551] netlink: 'syz.2.7190': attribute type 4 has an invalid length. [ 1071.178555][T24497] team0: Port device team_slave_0 added [ 1071.244126][T24497] team0: Port device team_slave_1 added [ 1071.301389][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7192'. [ 1071.341885][T24557] bridge2: entered promiscuous mode [ 1071.451469][T24497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.459885][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.513822][T24497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.641222][T24497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.649273][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.678552][T24497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.143524][T24497] hsr_slave_0: entered promiscuous mode [ 1072.157745][T24497] hsr_slave_1: entered promiscuous mode [ 1072.171735][T24497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.180652][T24497] Cannot create hsr debugfs directory [ 1072.208380][T24574] tc_dump_action: action bad kind [ 1072.401436][ T11] hsr_slave_0: left promiscuous mode [ 1072.416430][ T11] hsr_slave_1: left promiscuous mode [ 1072.429758][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.448924][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.464194][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1072.482421][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.499462][ T11] hsr_slave_0: left promiscuous mode [ 1072.505912][ T11] hsr_slave_1: left promiscuous mode [ 1072.512055][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.519786][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.528499][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1072.536057][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.794993][ T5088] Bluetooth: hci4: command tx timeout [ 1072.832733][ T11] veth1_macvtap: left promiscuous mode [ 1072.858739][ T11] veth0_macvtap: left promiscuous mode [ 1072.891171][ T11] veth1_vlan: left promiscuous mode [ 1072.921860][ T11] veth0_vlan: left promiscuous mode [ 1072.952629][ T11] veth1_macvtap: left promiscuous mode [ 1072.979510][ T11] veth0_macvtap: left promiscuous mode [ 1073.021317][ T11] veth1_vlan: left promiscuous mode [ 1073.048464][ T11] veth0_vlan: left promiscuous mode [ 1074.053260][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1074.111298][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1075.457565][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1075.532412][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1076.296184][T24582] netlink: 'syz.2.7202': attribute type 4 has an invalid length. [ 1076.635204][T24416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1076.666714][T24416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1076.695232][T24416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1076.715753][T24416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1076.746358][ T5088] ================================================================== [ 1076.754728][ T5088] BUG: KASAN: slab-use-after-free in smack_socket_sock_rcv_skb+0xec/0x13a0 [ 1076.763353][ T5088] Read of size 8 at addr ffff888023db9498 by task kworker/u9:7/5088 [ 1076.771384][ T5088] [ 1076.773731][ T5088] CPU: 1 PID: 5088 Comm: kworker/u9:7 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 1076.783990][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1076.794500][ T5088] Workqueue: hci0 hci_rx_work [ 1076.799221][ T5088] Call Trace: [ 1076.802546][ T5088] [ 1076.805485][ T5088] dump_stack_lvl+0x241/0x360 [ 1076.810202][ T5088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1076.815442][ T5088] ? __pfx__printk+0x10/0x10 [ 1076.820067][ T5088] ? _printk+0xd5/0x120 [ 1076.824333][ T5088] ? __virt_addr_valid+0x183/0x520 [ 1076.829474][ T5088] ? __virt_addr_valid+0x183/0x520 [ 1076.834620][ T5088] print_report+0x169/0x550 [ 1076.839242][ T5088] ? __virt_addr_valid+0x183/0x520 [ 1076.844397][ T5088] ? __virt_addr_valid+0x183/0x520 [ 1076.849542][ T5088] ? __virt_addr_valid+0x44e/0x520 [ 1076.854689][ T5088] ? __phys_addr+0xba/0x170 [ 1076.859229][ T5088] ? smack_socket_sock_rcv_skb+0xec/0x13a0 [ 1076.865062][ T5088] kasan_report+0x143/0x180 [ 1076.869579][ T5088] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1076.875580][ T5088] ? smack_socket_sock_rcv_skb+0xec/0x13a0 [ 1076.881506][ T5088] smack_socket_sock_rcv_skb+0xec/0x13a0 [ 1076.887171][ T5088] ? finish_task_switch+0x1e5/0x870 [ 1076.892584][ T5088] ? __pfx_smack_socket_sock_rcv_skb+0x10/0x10 [ 1076.898779][ T5088] ? mark_lock+0x9a/0x350 [ 1076.903163][ T5088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1076.909529][ T5088] ? __pfx___schedule+0x10/0x10 [ 1076.910013][T24450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1076.914386][ T5088] ? irqentry_exit+0x63/0x90 [ 1076.914416][ T5088] ? lockdep_hardirqs_on+0x99/0x150 [ 1076.914446][ T5088] ? preempt_schedule+0xe1/0xf0 [ 1076.935804][ T5088] ? preempt_schedule_common+0x84/0xd0 [ 1076.941623][ T5088] ? preempt_schedule+0xe1/0xf0 [ 1076.946552][ T5088] ? __pfx_preempt_schedule+0x10/0x10 [ 1076.951914][ T5088] security_sock_rcv_skb+0x6d/0xa0 [ 1076.957057][ T5088] sk_filter_trim_cap+0x184/0xa80 [ 1076.962286][ T5088] ? preempt_schedule_thunk+0x1a/0x30 [ 1076.967665][ T5088] ? mark_lock+0x9a/0x350 [ 1076.972220][ T5088] ? __local_bh_enable_ip+0x179/0x200 [ 1076.977756][ T5088] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 1076.983300][ T5088] ? l2cap_sock_recv_cb+0x55/0x4f0 [ 1076.988418][ T5088] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1076.994223][ T5088] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1076.999436][ T5088] l2cap_sock_recv_cb+0x12d/0x4f0 [ 1077.004483][ T5088] l2cap_recv_frame+0x8d47/0x107d0 [ 1077.009630][ T5088] ? validate_chain+0x11e/0x5900 [ 1077.014869][ T5088] ? validate_chain+0x11e/0x5900 [ 1077.019895][ T5088] ? validate_chain+0x11e/0x5900 [ 1077.024948][ T5088] ? validate_chain+0x11e/0x5900 [ 1077.029890][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 1077.035095][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 1077.040308][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 1077.045509][ T5088] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 1077.050886][ T5088] ? validate_chain+0x11e/0x5900 [ 1077.056012][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 1077.061232][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 1077.066445][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 1077.071636][ T5088] ? mark_lock+0x9a/0x350 [ 1077.075967][ T5088] ? __lock_acquire+0x1346/0x1fd0 [ 1077.081029][ T5088] ? mark_lock+0x9a/0x350 [ 1077.085369][ T5088] ? hci_rx_work+0x4e7/0xca0 [ 1077.090419][ T5088] ? __pfx_lock_release+0x10/0x10 [ 1077.095445][ T5088] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1077.101070][ T5088] ? __pfx_lock_release+0x10/0x10 [ 1077.106099][ T5088] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1077.112098][ T5088] ? hci_conn_enter_active_mode+0x260/0x370 [ 1077.118017][ T5088] ? l2cap_recv_acldata+0x48e/0x1550 [ 1077.123313][ T5088] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 1077.129206][ T5088] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 1077.135221][ T5088] hci_rx_work+0x50f/0xca0 [ 1077.139725][ T5088] ? process_scheduled_works+0x945/0x1830 [ 1077.145437][ T5088] process_scheduled_works+0xa2c/0x1830 [ 1077.150985][ T5088] ? __pfx_process_scheduled_works+0x10/0x10 [ 1077.156986][ T5088] ? assign_work+0x364/0x3d0 [ 1077.161604][ T5088] worker_thread+0x86d/0xd50 [ 1077.166210][ T5088] ? __kthread_parkme+0x169/0x1d0 [ 1077.171228][ T5088] ? __pfx_worker_thread+0x10/0x10 [ 1077.176329][ T5088] kthread+0x2f0/0x390 [ 1077.180477][ T5088] ? __pfx_worker_thread+0x10/0x10 [ 1077.185665][ T5088] ? __pfx_kthread+0x10/0x10 [ 1077.190250][ T5088] ret_from_fork+0x4b/0x80 [ 1077.194659][ T5088] ? __pfx_kthread+0x10/0x10 [ 1077.199330][ T5088] ret_from_fork_asm+0x1a/0x30 [ 1077.204541][ T5088] [ 1077.207580][ T5088] [ 1077.209909][ T5088] Allocated by task 24593: [ 1077.214337][ T5088] kasan_save_track+0x3f/0x80 [ 1077.219057][ T5088] __kasan_kmalloc+0x98/0xb0 [ 1077.223655][ T5088] __kmalloc_noprof+0x1f9/0x400 [ 1077.228580][ T5088] sk_prot_alloc+0xe0/0x210 [ 1077.233083][ T5088] sk_alloc+0x38/0x370 [ 1077.237323][ T5088] bt_sock_alloc+0x3c/0x340 [ 1077.241838][ T5088] l2cap_sock_create+0x13f/0x2d0 [ 1077.246787][ T5088] bt_sock_create+0x161/0x230 [ 1077.251645][ T5088] __sock_create+0x490/0x920 [ 1077.256346][ T5088] __sys_socket+0x150/0x3c0 [ 1077.260871][ T5088] __x64_sys_socket+0x7a/0x90 [ 1077.265574][ T5088] do_syscall_64+0xf3/0x230 [ 1077.270108][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.276027][ T5088] [ 1077.278357][ T5088] Freed by task 24593: [ 1077.282431][ T5088] kasan_save_track+0x3f/0x80 [ 1077.287136][ T5088] kasan_save_free_info+0x40/0x50 [ 1077.292175][ T5088] poison_slab_object+0xe0/0x150 [ 1077.297104][ T5088] __kasan_slab_free+0x37/0x60 [ 1077.301859][ T5088] kfree+0x149/0x360 [ 1077.305747][ T5088] __sk_destruct+0x476/0x5f0 [ 1077.310359][ T5088] l2cap_sock_release+0x15b/0x1d0 [ 1077.315389][ T5088] sock_close+0xbc/0x240 [ 1077.319636][ T5088] __fput+0x406/0x8b0 [ 1077.323603][ T5088] task_work_run+0x24f/0x310 [ 1077.328182][ T5088] syscall_exit_to_user_mode+0x168/0x360 [ 1077.333797][ T5088] do_syscall_64+0x100/0x230 [ 1077.338370][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.344251][ T5088] [ 1077.346559][ T5088] The buggy address belongs to the object at ffff888023db9000 [ 1077.346559][ T5088] which belongs to the cache kmalloc-2k of size 2048 [ 1077.360604][ T5088] The buggy address is located 1176 bytes inside of [ 1077.360604][ T5088] freed 2048-byte region [ffff888023db9000, ffff888023db9800) [ 1077.374592][ T5088] [ 1077.376987][ T5088] The buggy address belongs to the physical page: [ 1077.383588][ T5088] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23db8 [ 1077.392469][ T5088] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1077.400961][ T5088] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1077.408946][ T5088] page_type: 0xffffefff(slab) [ 1077.413644][ T5088] raw: 00fff00000000040 ffff888015042000 0000000000000000 dead000000000001 [ 1077.422233][ T5088] raw: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 1077.430814][ T5088] head: 00fff00000000040 ffff888015042000 0000000000000000 dead000000000001 [ 1077.439747][ T5088] head: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 1077.448452][ T5088] head: 00fff00000000003 ffffea00008f6e01 ffffffffffffffff 0000000000000000 [ 1077.457221][ T5088] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1077.465905][ T5088] page dumped because: kasan: bad access detected [ 1077.472417][ T5088] page_owner tracks the page as allocated [ 1077.478204][ T5088] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7400, tgid 7400 (kworker/u8:13), ts 897858391086, free_ts 897824765702 [ 1077.501639][ T5088] post_alloc_hook+0x1f3/0x230 [ 1077.506500][ T5088] get_page_from_freelist+0x2e4c/0x2f10 [ 1077.512072][ T5088] __alloc_pages_noprof+0x256/0x6c0 [ 1077.517291][ T5088] alloc_slab_page+0x5f/0x120 [ 1077.521980][ T5088] allocate_slab+0x5a/0x2f0 [ 1077.526476][ T5088] ___slab_alloc+0xcd1/0x14b0 [ 1077.531155][ T5088] __slab_alloc+0x58/0xa0 [ 1077.535563][ T5088] kmalloc_node_track_caller_noprof+0x281/0x440 [ 1077.541810][ T5088] kmalloc_reserve+0x111/0x2a0 [ 1077.546571][ T5088] __alloc_skb+0x1f3/0x440 [ 1077.550979][ T5088] alloc_skb_with_frags+0xc3/0x770 [ 1077.556108][ T5088] sock_alloc_send_pskb+0x91a/0xa60 [ 1077.561325][ T5088] mld_newpack+0x1c3/0xa90 [ 1077.565753][ T5088] add_grec+0x1492/0x19a0 [ 1077.570097][ T5088] mld_send_initial_cr+0x228/0x4b0 [ 1077.575213][ T5088] ipv6_mc_dad_complete+0x88/0x490 [ 1077.580323][ T5088] page last free pid 5064 tgid 5064 stack trace: [ 1077.586636][ T5088] free_unref_page+0xd19/0xea0 [ 1077.591578][ T5088] skb_release_data+0x6b2/0x880 [ 1077.596737][ T5088] skb_attempt_defer_free+0x42f/0x5c0 [ 1077.602142][ T5088] tcp_recvmsg_locked+0x1500/0x2640 [ 1077.607361][ T5088] tcp_recvmsg+0x25d/0x920 [ 1077.611802][ T5088] inet_recvmsg+0x150/0x2d0 [ 1077.616324][ T5088] sock_recvmsg+0x1ae/0x280 [ 1077.620832][ T5088] sock_read_iter+0x2ca/0x3e0 [ 1077.625500][ T5088] vfs_read+0x9c4/0xbd0 [ 1077.629657][ T5088] ksys_read+0x1a0/0x2c0 [ 1077.633977][ T5088] do_syscall_64+0xf3/0x230 [ 1077.638474][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.644359][ T5088] [ 1077.646666][ T5088] Memory state around the buggy address: [ 1077.652282][ T5088] ffff888023db9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1077.660432][ T5088] ffff888023db9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1077.668498][ T5088] >ffff888023db9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1077.676544][ T5088] ^ [ 1077.681387][ T5088] ffff888023db9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1077.689444][ T5088] ffff888023db9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1077.697496][ T5088] ================================================================== [ 1077.718543][ T5088] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1077.725822][ T5088] CPU: 1 PID: 5088 Comm: kworker/u9:7 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 1077.736351][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1077.746512][ T5088] Workqueue: hci0 hci_rx_work [ 1077.751834][ T5088] Call Trace: [ 1077.755208][ T5088] [ 1077.758146][ T5088] dump_stack_lvl+0x241/0x360 [ 1077.762862][ T5088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1077.768216][ T5088] ? __pfx__printk+0x10/0x10 [ 1077.772823][ T5088] ? preempt_schedule+0xe1/0xf0 [ 1077.777696][ T5088] ? vscnprintf+0x5d/0x90 [ 1077.782051][ T5088] panic+0x349/0x860 [ 1077.785966][ T5088] ? check_panic_on_warn+0x21/0xb0 [ 1077.791096][ T5088] ? __pfx_panic+0x10/0x10 [ 1077.795534][ T5088] ? _raw_spin_unlock_irqrestore+0x130/0x140