last executing test programs: 4m5.827276508s ago: executing program 1 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) io_setup(0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) 4m5.705186788s ago: executing program 1 (id=614): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x800000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) 4m5.617763625s ago: executing program 1 (id=615): sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) timer_create(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 4m4.559734971s ago: executing program 1 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 4m4.365263196s ago: executing program 1 (id=629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) 4m2.957790571s ago: executing program 1 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 4m2.866832908s ago: executing program 32 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 3.67936549s ago: executing program 0 (id=2631): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000140001002abd7000fddbdf250a08efcd", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff"], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x100004}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x39, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x4, 0x0, @empty, @multicast2}}}}) 2.94882217s ago: executing program 0 (id=2642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x7ffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x2, 0xb}, {0x3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.989945428s ago: executing program 0 (id=2655): syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010600000004000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000401000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000"], 0x64}, 0x1, 0x0, 0x0, 0x48d0}, 0x4008000) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8200800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000ac0)={0x90, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb0}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1e}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x2c0040c0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x10, 0x5, 0xffa, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)=0x1) 1.950889612s ago: executing program 4 (id=2656): socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.784596705s ago: executing program 2 (id=2659): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.701832512s ago: executing program 2 (id=2660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.701448362s ago: executing program 4 (id=2661): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x78, 0x0, "1cdc0dca1d9f68846960e56de42944"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 1.609005739s ago: executing program 2 (id=2663): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f1394ac4ba3d024e34de099eedf5ca5b19e5e6f1b25", 0x3b}], 0x1) 1.60829204s ago: executing program 4 (id=2664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000bfa200000000000007020000f8ffffffb70300000c000000b7040000000000002f6332344b2e6d0cfe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4b7901da}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r5 = io_uring_setup(0x63e7, &(0x7f0000000940)={0x0, 0x18e5, 0x40, 0x2, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) getcwd(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) 1.59782947s ago: executing program 0 (id=2665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x7ffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x2, 0xb}, {0x3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.418265595s ago: executing program 2 (id=2668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x73, 0x0, 0x7ffc0002}]}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 1.265727257s ago: executing program 2 (id=2669): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="8d", 0x1}], 0x1}}], 0x2, 0x40081) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000002000)={[{@utf8}, {@overriderock}, {@check_strict}, {@hide}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@hide}, {@sbsector={'sbsector', 0x3d, 0x6}}, {@unhide}, {@map_acorn}, {@map_normal}, {@map_normal}, {@sbsector={'sbsector', 0x3d, 0xc}}, {@nocompress}, {@session={'session', 0x3d, 0x45}}, {@map_acorn}, {@utf8}, {@uid}]}, 0x4, 0xa16, &(0x7f00000015c0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x6a020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)}], 0x2) 861.95899ms ago: executing program 5 (id=2673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 854.030281ms ago: executing program 5 (id=2674): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r1) 779.727097ms ago: executing program 5 (id=2675): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x78, 0x0, "1cdc0dca1d9f68846960e56de42944"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 685.024354ms ago: executing program 5 (id=2676): syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010600000004000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000401000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000"], 0x64}, 0x1, 0x0, 0x0, 0x48d0}, 0x4008000) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8200800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000ac0)={0x90, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb0}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1e}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x2c0040c0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x10, 0x5, 0xffa, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)=0x1) 674.630155ms ago: executing program 0 (id=2677): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 673.090765ms ago: executing program 4 (id=2678): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f1394ac4ba3d024e34de099eedf5ca5b19e5e6f1b25", 0x3b}], 0x1) 585.693842ms ago: executing program 3 (id=2679): open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000008e13dbdf2514000000240007800c0003000000000000000000080002"], 0x38}}, 0x0) 489.38783ms ago: executing program 0 (id=2680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000140001002abd7000fddbdf250a08efcd", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff"], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x100004}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x39, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x4, 0x0, @empty, @multicast2}}}}) 464.588512ms ago: executing program 3 (id=2681): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 348.344692ms ago: executing program 4 (id=2682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2040000, 0x0) 257.902619ms ago: executing program 3 (id=2683): process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000080)=""/54, 0xffffffffffffff66}, {&(0x7f0000006180)=""/140, 0x8c}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 257.484279ms ago: executing program 5 (id=2684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, 0x0}}], 0x1, 0x3404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xf7, 0x1, [0xe000]}, 0xa) 210.346163ms ago: executing program 2 (id=2685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xff) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x118, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xe8, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x84, 0x2, 0x0, 0x1, [{0x4}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x118}}, 0x0) 195.179384ms ago: executing program 4 (id=2686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xdb4a, 0x3, 0x367a}, {0xf935, 0x7, 0x1, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 189.143235ms ago: executing program 3 (id=2687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 188.193375ms ago: executing program 5 (id=2688): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 15.175819ms ago: executing program 3 (id=2689): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 0s ago: executing program 3 (id=2690): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000", 0x17}], 0x1}, 0x404c080) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): dit(147.250:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.293789][ T27] audit: type=1326 audit(147.250:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.302626][ T7751] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1107'. [ 147.305608][ T7744] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1107'. [ 147.320297][ T27] audit: type=1326 audit(147.250:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.341361][ T27] audit: type=1326 audit(147.250:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.352516][ T7753] netlink: 'syz.2.1111': attribute type 29 has an invalid length. [ 147.377926][ T27] audit: type=1326 audit(147.250:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.383420][ T7753] netlink: 'syz.2.1111': attribute type 29 has an invalid length. [ 147.394627][ T27] audit: type=1326 audit(147.250:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.400683][ T27] audit: type=1326 audit(147.250:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=61 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.410795][ T7760] netlink: 'syz.2.1111': attribute type 29 has an invalid length. [ 147.418601][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.422138][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.430635][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.434159][ T27] audit: type=1326 audit(147.250:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 147.536100][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'. [ 147.605972][ T7770] loop5: detected capacity change from 0 to 512 [ 147.629404][ T7770] EXT4-fs: Ignoring removed oldalloc option [ 147.631560][ T7770] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.653676][ T7770] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 147.655991][ T7770] EXT4-fs (loop5): mount failed [ 148.177500][ T27] audit: type=1326 audit(148.160:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 148.265125][ T7823] netlink: 'syz.0.1138': attribute type 29 has an invalid length. [ 148.267761][ T7823] netlink: 'syz.0.1138': attribute type 29 has an invalid length. [ 148.270836][ T7823] netlink: 'syz.0.1138': attribute type 29 has an invalid length. [ 148.441029][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 148.444355][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1138'. [ 148.501294][ T7832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.510168][ T7832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.512342][ T7832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.533277][ T7830] lo speed is unknown, defaulting to 1000 [ 148.890746][ T7859] loop5: detected capacity change from 0 to 512 [ 149.726066][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.729703][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.731872][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.928300][ T7911] tipc: Enabled bearer , priority 0 [ 149.930990][ T7911] device syzkaller0 entered promiscuous mode [ 150.009954][ T7912] tipc: Resetting bearer [ 150.022679][ T7910] tipc: Resetting bearer [ 150.084705][ T7910] tipc: Disabling bearer [ 150.674360][ T7952] tipc: Enabled bearer , priority 0 [ 150.677116][ T7952] device syzkaller0 entered promiscuous mode [ 150.679629][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 150.733570][ T7952] tipc: Resetting bearer [ 150.740136][ T7951] tipc: Resetting bearer [ 150.785259][ T7951] tipc: Disabling bearer [ 151.009060][ T7966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.012487][ T7966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.015018][ T7966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.450160][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1196'. [ 151.453674][ T7984] tipc: Enabled bearer , priority 0 [ 151.460788][ T7984] device syzkaller0 entered promiscuous mode [ 151.543604][ T7984] tipc: Resetting bearer [ 151.552048][ T7983] tipc: Resetting bearer [ 151.594664][ T7983] tipc: Disabling bearer [ 151.670071][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.673371][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.679397][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.917406][ T8015] loop5: detected capacity change from 0 to 1024 [ 151.941694][ T8015] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 152.600042][ T8015] EXT4-fs (loop5): orphan cleanup on readonly fs [ 152.607674][ T8017] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1206'. [ 152.635187][ T8015] __quota_error: 15 callbacks suppressed [ 152.635200][ T8015] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 152.663961][ T8015] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 152.666686][ T8015] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1207: Failed to acquire dquot type 0 [ 152.701222][ T8015] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 152.704378][ T8015] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 152.707093][ T8015] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1207: Failed to acquire dquot type 0 [ 152.713893][ T8015] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.1207: Freeing blocks not in datazone - block = 0, count = 4096 [ 152.722305][ T8015] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 152.726761][ T8015] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 152.729591][ T8015] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1207: Failed to acquire dquot type 0 [ 152.735687][ T8015] EXT4-fs (loop5): 1 orphan inode deleted [ 152.743252][ T8015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.758108][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 152.829226][ T6150] EXT4-fs (loop5): unmounting filesystem. [ 152.929308][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.936507][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.939195][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.153076][ T8057] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1221'. [ 153.281210][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 153.450343][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.459894][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.462210][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.662144][ T8081] loop5: detected capacity change from 0 to 512 [ 153.675960][ T8081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.715256][ T8081] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.727826][ T8081] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1231'. [ 153.748350][ T27] audit: type=1326 audit(153.730:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 153.755267][ T27] audit: type=1326 audit(153.740:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 153.755847][ T8081] validate_nla: 4 callbacks suppressed [ 153.755856][ T8081] netlink: 'syz.5.1231': attribute type 27 has an invalid length. [ 153.761386][ T27] audit: type=1326 audit(153.740:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 153.775756][ T27] audit: type=1326 audit(153.740:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 153.806573][ T8086] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1232'. [ 153.939481][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 154.028068][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 154.084815][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.086933][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.156390][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 154.487006][ T8085] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 154.691202][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.726944][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.280849][ T8081] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.283706][ T8081] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.286930][ T8081] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.289332][ T8081] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.568202][ T8086] netlink: 'syz.0.1232': attribute type 27 has an invalid length. [ 155.574827][ T8091] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1234'. [ 155.597558][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.599597][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.602010][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.605565][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.624519][ T8093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.634065][ T8110] tipc: Enabled bearer , priority 0 [ 155.636186][ T8111] device syzkaller0 entered promiscuous mode [ 155.667225][ T8118] tipc: Resetting bearer [ 155.675344][ T6150] EXT4-fs (loop5): unmounting filesystem. [ 155.675352][ T8107] tipc: Resetting bearer [ 155.745192][ T8107] tipc: Disabling bearer [ 155.754948][ T8127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.765551][ T8129] loop5: detected capacity change from 0 to 512 [ 155.817638][ T8129] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 156.188639][ T6150] EXT4-fs (loop5): unmounting filesystem. [ 156.535105][ T8147] lo speed is unknown, defaulting to 1000 [ 157.312465][ T8167] loop5: detected capacity change from 0 to 2048 [ 157.323447][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.340139][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.344424][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.360594][ T8167] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 157.421268][ T8167] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1254'. [ 157.436344][ T8174] tipc: Enabled bearer , priority 0 [ 157.452894][ T8174] device syzkaller0 entered promiscuous mode [ 157.462581][ T8167] netlink: 'syz.5.1254': attribute type 27 has an invalid length. [ 157.547020][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.560796][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.588062][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.602514][ T8167] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.649714][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1254'. [ 157.721805][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 157.721842][ T27] audit: type=1326 audit(157.700:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 157.948994][ T8167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.390361][ T27] audit: type=1326 audit(158.370:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 158.426197][ T8184] tipc: Resetting bearer [ 158.438103][ T8188] lo speed is unknown, defaulting to 1000 [ 158.439941][ T8173] tipc: Resetting bearer [ 158.443694][ T27] audit: type=1326 audit(158.420:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 158.450499][ T27] audit: type=1326 audit(158.420:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 158.456903][ T27] audit: type=1326 audit(158.420:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 158.463020][ T27] audit: type=1326 audit(158.420:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 158.477757][ T8173] tipc: Disabling bearer [ 158.513261][ T6150] EXT4-fs (loop5): unmounting filesystem. [ 158.583825][ T27] audit: type=1326 audit(158.550:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 158.590040][ T27] audit: type=1326 audit(158.550:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 159.472202][ T8226] lo speed is unknown, defaulting to 1000 [ 160.065855][ T8229] tipc: Enabled bearer , priority 0 [ 160.082474][ T8229] device syzkaller0 entered promiscuous mode [ 160.107426][ T8229] tipc: Resetting bearer [ 160.119408][ T8228] tipc: Resetting bearer [ 160.185011][ T8228] tipc: Disabling bearer [ 160.194819][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.173267][ T27] audit: type=1326 audit(161.150:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 161.193538][ T27] audit: type=1326 audit(161.170:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 161.428402][ T8268] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1287'. [ 161.431205][ T8266] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1287'. [ 161.736522][ T8274] lo speed is unknown, defaulting to 1000 [ 162.304429][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1291'. [ 162.329487][ T8280] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.376709][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.384527][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.389141][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.389552][ T8288] binfmt_misc: register: failed to install interpreter file ./file2 [ 162.429908][ T8283] tipc: Enabled bearer , priority 0 [ 162.432320][ T8283] device syzkaller0 entered promiscuous mode [ 162.458053][ T8283] tipc: Resetting bearer [ 162.468793][ T8282] tipc: Resetting bearer [ 162.544619][ T8282] tipc: Disabling bearer [ 162.698301][ T8308] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1300'. [ 162.701025][ T8307] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1300'. [ 162.867933][ T27] audit: type=1326 audit(162.850:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 162.875477][ T27] audit: type=1326 audit(162.850:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 162.887405][ T27] audit: type=1326 audit(162.850:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 162.893478][ T27] audit: type=1326 audit(162.850:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 162.924430][ T27] audit: type=1326 audit(162.910:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 162.930393][ T27] audit: type=1326 audit(162.910:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 163.187597][ T8317] lo speed is unknown, defaulting to 1000 [ 163.914905][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.918261][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.930634][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.953042][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'. [ 163.959456][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1305'. [ 163.983509][ T8341] tipc: Enabled bearer , priority 0 [ 163.987268][ T8341] device syzkaller0 entered promiscuous mode [ 163.992175][ T8338] tipc: Resetting bearer [ 164.004309][ T4311] Bluetooth: hci2: command 0x0406 tx timeout [ 164.005994][ T4311] Bluetooth: hci0: command 0x0406 tx timeout [ 164.007532][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 164.009230][ T4311] Bluetooth: hci3: command 0x0406 tx timeout [ 164.119626][ T8338] tipc: Disabling bearer [ 164.256002][ T8352] lo speed is unknown, defaulting to 1000 [ 164.577624][ T27] audit: type=1326 audit(164.560:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.0.1316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 164.583522][ T27] audit: type=1326 audit(164.560:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.0.1316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 164.591201][ T27] audit: type=1326 audit(164.560:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.0.1316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 164.603480][ T27] audit: type=1326 audit(164.560:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.0.1316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 164.773248][ T8376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.960097][ T8383] »»»»»»: renamed from veth0 [ 165.102280][ T8393] tipc: Enabled bearer , priority 0 [ 165.120442][ T8392] tipc: Resetting bearer [ 166.094223][ T24] tipc: Node number set to 587823788 [ 176.332231][ T8392] tipc: Disabling bearer [ 176.345799][ T8428] lo speed is unknown, defaulting to 1000 [ 177.907269][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1354'. [ 178.451146][ T8489] lo speed is unknown, defaulting to 1000 [ 179.559288][ T8492] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 179.561886][ T8492] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 180.226409][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.247045][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.249272][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.473126][ T8502] lo speed is unknown, defaulting to 1000 [ 180.511955][ T8504] netlink: 'syz.5.1363': attribute type 29 has an invalid length. [ 180.531541][ T8504] netlink: 'syz.5.1363': attribute type 29 has an invalid length. [ 180.542647][ T8504] netlink: 'syz.5.1363': attribute type 29 has an invalid length. [ 181.811363][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'. [ 181.828702][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1363'. [ 182.594847][ T8544] lo speed is unknown, defaulting to 1000 [ 182.815859][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 182.815871][ T27] audit: type=1326 audit(182.800:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.831606][ T27] audit: type=1326 audit(182.800:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.838099][ T27] audit: type=1326 audit(182.810:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.872920][ T27] audit: type=1326 audit(182.810:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.894374][ T27] audit: type=1326 audit(182.810:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.914573][ T27] audit: type=1326 audit(182.810:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.935307][ T27] audit: type=1326 audit(182.810:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.942673][ T8571] netem: change failed [ 182.944415][ T27] audit: type=1326 audit(182.810:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.950213][ T27] audit: type=1326 audit(182.810:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 182.956887][ T27] audit: type=1326 audit(182.810:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.1381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 183.025714][ T8577] netlink: 'syz.3.1386': attribute type 29 has an invalid length. [ 183.031447][ T8577] netlink: 'syz.3.1386': attribute type 29 has an invalid length. [ 183.039970][ T8577] netlink: 'syz.3.1386': attribute type 29 has an invalid length. [ 183.368176][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 183.372078][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1386'. [ 183.842306][ T8613] lo speed is unknown, defaulting to 1000 [ 184.425599][ T8636] netlink: 'syz.4.1412': attribute type 29 has an invalid length. [ 184.428154][ T8636] netlink: 'syz.4.1412': attribute type 29 has an invalid length. [ 184.431613][ T8636] netlink: 'syz.4.1412': attribute type 29 has an invalid length. [ 184.468287][ T8629] infiniband syz!: set down [ 184.470012][ T8629] infiniband syz!: added team_slave_0 [ 184.554099][ T8629] RDS/IB: syz!: added [ 184.555867][ T8629] smc: adding ib device syz! with port count 1 [ 184.564194][ T8629] smc: ib device syz! port 1 has pnetid [ 184.662162][ T8644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1415'. [ 184.821011][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 184.827028][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1412'. [ 184.999890][ T8654] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 185.054466][ T8628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.062206][ T8628] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.066007][ T8628] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 185.080174][ T8654] 9pnet_fd: Insufficient options for proto=fd [ 185.082254][ T8628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.085724][ T8628] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.093521][ T8628] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 185.096207][ T8628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.098015][ T8628] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.099936][ T8628] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 185.102112][ T8628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.104008][ T8628] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.106184][ T8628] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 185.108356][ T8628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.110154][ T8628] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.111953][ T8628] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 185.525838][ T8662] lo speed is unknown, defaulting to 1000 [ 186.238035][ T8676] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.299009][ T8680] lo speed is unknown, defaulting to 1000 [ 186.339803][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.352473][ T8686] netlink: 'syz.0.1430': attribute type 29 has an invalid length. [ 186.396818][ T8676] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.410709][ T8686] netlink: 'syz.0.1430': attribute type 29 has an invalid length. [ 186.418327][ T8689] netlink: 'syz.0.1430': attribute type 29 has an invalid length. [ 186.497316][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 186.503843][ T8676] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.531649][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1430'. [ 186.611390][ T8676] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.823487][ T8676] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.835514][ T8676] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.842990][ T8676] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.849222][ T8676] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.993493][ T8700] bridge0: port 3(batadv1) entered blocking state [ 186.997342][ T8700] bridge0: port 3(batadv1) entered disabled state [ 186.999915][ T8700] device batadv1 entered promiscuous mode [ 187.006407][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1435'. [ 187.008892][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.020852][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.124540][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.126343][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.128037][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.129766][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.160395][ T8715] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 187.240390][ T8711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.243347][ T8711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.249884][ T8715] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 187.259987][ T8719] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 187.307315][ T8723] loop5: detected capacity change from 0 to 128 [ 187.317095][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 187.332146][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1443'. [ 187.365247][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.367085][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.402364][ T8711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.449992][ T8711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.514554][ T4398] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 187.517398][ T4398] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 187.635666][ T8711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.638576][ T8711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.677008][ T8731] netlink: 'syz.5.1447': attribute type 4 has an invalid length. [ 187.729261][ T8734] netlink: 'syz.5.1447': attribute type 4 has an invalid length. [ 187.748456][ T8735] lo speed is unknown, defaulting to 1000 [ 187.897055][ T8711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.902415][ T8711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.211506][ T8711] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.215407][ T8711] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.237442][ T8711] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.249217][ T8711] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.286752][ T8711] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.288992][ T8711] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.312020][ T8711] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.319636][ T8711] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.414368][ T4311] Bluetooth: hci0: command 0x0406 tx timeout [ 188.511693][ T8763] netlink: 'syz.5.1459': attribute type 29 has an invalid length. [ 188.521282][ T8763] netlink: 'syz.5.1459': attribute type 29 has an invalid length. [ 188.886917][ T8777] lo speed is unknown, defaulting to 1000 [ 189.033310][ T8763] __nla_validate_parse: 1 callbacks suppressed [ 189.033323][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1459'. [ 189.048964][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1459'. [ 189.217260][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 189.218898][ T4322] Bluetooth: hci3: command 0x0406 tx timeout [ 189.220547][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 189.222220][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 189.238665][ T8787] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 189.401753][ T8799] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 2, id = 0 [ 189.512477][ T27] kauditd_printk_skb: 173 callbacks suppressed [ 189.512510][ T27] audit: type=1326 audit(189.490:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 189.548223][ T27] audit: type=1326 audit(189.490:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=104 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 189.576599][ T27] audit: type=1326 audit(189.490:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 189.917705][ T8826] loop5: detected capacity change from 0 to 512 [ 189.928853][ T8826] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.935256][ T8826] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 189.962259][ T8826] EXT4-fs (loop5): 1 truncate cleaned up [ 189.965159][ T8826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.968631][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 189.974021][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1483'. [ 190.045079][ T6150] EXT4-fs (loop5): unmounting filesystem. [ 190.045791][ T8832] lo speed is unknown, defaulting to 1000 [ 190.340213][ T8840] netem: change failed [ 190.508553][ T8845] lo speed is unknown, defaulting to 1000 [ 190.866460][ T8861] device veth1_macvtap left promiscuous mode [ 190.868158][ T8861] device macsec0 entered promiscuous mode [ 190.944993][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.948765][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.950984][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.178239][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 191.183093][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1503'. [ 191.409544][ T8884] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1508'. [ 191.622576][ T8894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.626559][ T8894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.628861][ T8894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.742233][ T8892] lo speed is unknown, defaulting to 1000 [ 191.889007][ T8905] validate_nla: 7 callbacks suppressed [ 191.889021][ T8905] netlink: 'syz.5.1519': attribute type 29 has an invalid length. [ 191.898484][ T8905] netlink: 'syz.5.1519': attribute type 29 has an invalid length. [ 191.902329][ T8905] netlink: 'syz.5.1519': attribute type 29 has an invalid length. [ 192.007576][ T8911] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1521'. [ 192.137767][ T27] audit: type=1326 audit(192.120:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 192.166968][ T27] audit: type=1326 audit(192.150:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 192.177698][ T27] audit: type=1326 audit(192.160:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 192.183452][ T27] audit: type=1326 audit(192.160:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 192.212182][ T27] audit: type=1326 audit(192.160:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 192.225963][ T27] audit: type=1326 audit(192.160:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 192.240900][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1519'. [ 192.242205][ T27] audit: type=1326 audit(192.160:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 192.278417][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1519'. [ 192.480294][ T8926] lo speed is unknown, defaulting to 1000 [ 192.990105][ T8955] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 193.034339][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.052572][ T8955] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.353280][ T8963] lo speed is unknown, defaulting to 1000 [ 193.462757][ T8971] netlink: 'syz.5.1548': attribute type 29 has an invalid length. [ 193.468999][ T8971] netlink: 'syz.5.1548': attribute type 29 has an invalid length. [ 193.483042][ T8971] netlink: 'syz.5.1548': attribute type 29 has an invalid length. [ 194.046296][ T8999] lo speed is unknown, defaulting to 1000 [ 194.951553][ T9035] lo speed is unknown, defaulting to 1000 [ 195.021027][ T9034] loop5: detected capacity change from 0 to 2048 [ 195.034194][ T9030] __nla_validate_parse: 4 callbacks suppressed [ 195.034207][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1575'. [ 195.109301][ T9034] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.141678][ T9034] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.177635][ T9034] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 195.202164][ T9034] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.202164][ T9034] [ 195.217151][ T9034] EXT4-fs (loop5): Total free blocks count 0 [ 195.227436][ T9034] EXT4-fs (loop5): Free/Dirty block details [ 195.234833][ T9034] EXT4-fs (loop5): free_blocks=2415919104 [ 195.236595][ T9034] EXT4-fs (loop5): dirty_blocks=32 [ 195.260151][ T9034] EXT4-fs (loop5): Block reservation details [ 195.261889][ T9034] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 195.372271][ T55] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.480323][ T9046] rdma_op 0000000000a53692 conn xmit_rdma 0000000000000000 [ 195.650531][ T9061] loop5: detected capacity change from 0 to 4096 [ 195.672378][ T9061] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 195.752423][ T6150] EXT4-fs (loop5): unmounting filesystem. [ 195.771822][ T9073] tipc: Enabled bearer , priority 0 [ 195.784491][ T9073] device syzkaller0 entered promiscuous mode [ 195.877329][ T9075] lo speed is unknown, defaulting to 1000 [ 196.020133][ T9072] tipc: Resetting bearer [ 196.186559][ T9072] tipc: Disabling bearer [ 196.794980][ T9113] tipc: Enabled bearer , priority 0 [ 196.802152][ T9113] tipc: Resetting bearer [ 196.856323][ T9118] netlink: '+}[@': attribute type 3 has an invalid length. [ 196.904457][ T9112] tipc: Disabling bearer [ 196.924419][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 196.931185][ T9117] lo speed is unknown, defaulting to 1000 [ 196.965008][ T9118] usb usb1: check_ctrlrecip: process 9118 (+}[@) requesting ep 01 but needs 81 [ 197.162181][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 197.162194][ T27] audit: type=1326 audit(197.140:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 197.175416][ T27] audit: type=1326 audit(197.160:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=69 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 197.194598][ T27] audit: type=1326 audit(197.160:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 197.200623][ T27] audit: type=1326 audit(197.160:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 197.319802][ T9142] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 197.337801][ T9142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.457901][ T9142] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 197.462598][ T9142] bond1: (slave batadv1): making interface the new active one [ 197.470038][ T9142] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 197.493011][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 197.498696][ T9144] lo speed is unknown, defaulting to 1000 [ 197.553118][ T9146] lo speed is unknown, defaulting to 1000 [ 197.819996][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 197.901698][ T9158] loop5: detected capacity change from 0 to 512 [ 197.920106][ T9158] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.921903][ T9158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.948149][ T9158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.950558][ T9158] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.016567][ T9158] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.1628: Allocating blocks 41-42 which overlap fs metadata [ 198.022805][ T9158] Quota error (device loop5): write_blk: dquota write failed [ 198.034120][ T9158] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 198.036684][ T9158] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.1628: Allocating blocks 41-42 which overlap fs metadata [ 198.044106][ T9158] Quota error (device loop5): write_blk: dquota write failed [ 198.046223][ T9158] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 198.049041][ T9158] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1628: Failed to acquire dquot type 1 [ 198.074077][ T9158] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 198.108899][ T9158] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #12: comm syz.5.1628: corrupted inode contents [ 198.130309][ T9158] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #12: comm syz.5.1628: mark_inode_dirty error [ 198.153997][ T9158] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #12: comm syz.5.1628: corrupted inode contents [ 198.173792][ T9158] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.1628: mark_inode_dirty error [ 198.189880][ T9158] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #12: comm syz.5.1628: corrupted inode contents [ 198.203932][ T9158] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 198.216664][ T9158] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #12: comm syz.5.1628: corrupted inode contents [ 198.226777][ T9158] EXT4-fs error (device loop5): ext4_truncate:4312: inode #12: comm syz.5.1628: mark_inode_dirty error [ 198.235424][ T27] audit: type=1326 audit(198.220:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 198.236583][ T9158] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 198.250999][ T9158] EXT4-fs (loop5): 1 truncate cleaned up [ 198.251719][ T27] audit: type=1326 audit(198.230:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 198.253660][ T9158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 198.287915][ T9158] ext4: Unknown parameter '' [ 198.298540][ T9158] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 198.376647][ T6150] EXT4-fs (loop5): unmounting filesystem. [ 198.473847][ T9183] netlink: 'syz.0.1637': attribute type 7 has an invalid length. [ 199.067506][ T9194] lo speed is unknown, defaulting to 1000 [ 199.782495][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1643'. [ 199.785996][ T9205] tipc: Enabling of bearer rejected, failed to enable media [ 200.203363][ T9239] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1653'. [ 200.211435][ T9232] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1653'. [ 200.428508][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1659'. [ 200.634260][ T9266] device syzkaller0 entered promiscuous mode [ 200.783953][ T9278] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1669'. [ 200.790894][ T9272] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1669'. [ 200.983516][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1674'. [ 201.312577][ T9309] tipc: Enabled bearer , priority 0 [ 201.339988][ T9309] tipc: Disabling bearer [ 201.357703][ T9313] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1685'. [ 201.368938][ T9314] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1684'. [ 201.371707][ T9311] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1684'. [ 201.481667][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 201.923964][ T9325] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 201.941259][ T9325] team0: Port device dummy0 added [ 201.948993][ T9329] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 201.965434][ T9329] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 202.001074][ T9329] team0: Failed to send options change via netlink (err -105) [ 202.003436][ T9329] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 202.007183][ T9329] team0: Port device dummy0 removed [ 202.026629][ T9329] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 202.031468][ T9331] device syzkaller0 entered promiscuous mode [ 203.181334][ T9388] device syzkaller0 entered promiscuous mode [ 203.601233][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 203.601246][ T27] audit: type=1326 audit(203.580:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 203.633803][ T27] audit: type=1326 audit(203.580:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 203.639756][ T27] audit: type=1326 audit(203.590:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 203.676796][ T27] audit: type=1326 audit(203.590:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 203.706142][ T27] audit: type=1326 audit(203.590:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 204.022243][ T9430] capability: warning: `syz.5.1726' uses deprecated v2 capabilities in a way that may be insecure [ 204.119254][ T9433] device syzkaller0 entered promiscuous mode [ 204.191677][ T27] audit: type=1326 audit(204.170:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 204.213154][ T27] audit: type=1326 audit(204.190:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 204.268704][ T27] audit: type=1326 audit(204.190:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 204.281547][ T27] audit: type=1326 audit(204.190:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 204.293190][ T27] audit: type=1326 audit(204.190:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 205.598991][ T9473] __nla_validate_parse: 2 callbacks suppressed [ 205.599006][ T9473] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1740'. [ 205.651179][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 205.774975][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 205.992032][ T9500] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 206.244030][ T9508] netlink: 'syz.4.1750': attribute type 10 has an invalid length. [ 206.322447][ T9507] device vlan2 entered promiscuous mode [ 206.325891][ T9507] device bridge0 entered promiscuous mode [ 206.377223][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 206.383002][ T9515] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1754'. [ 206.385843][ T9515] 0·: renamed from hsr0 [ 206.425059][ T9515] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.427938][ T9515] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.432226][ T9515] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 206.440609][ T9517] device syzkaller0 entered promiscuous mode [ 206.623139][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 206.803127][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.825181][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.827310][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.785656][ T9548] loop5: detected capacity change from 0 to 512 [ 207.818255][ T9558] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1771'. [ 207.841991][ T9548] EXT4-fs (loop5): too many log groups per flexible block group [ 207.851852][ T9548] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 207.854045][ T9548] EXT4-fs (loop5): mount failed [ 208.046432][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 208.049512][ T9573] netlink: 'syz.2.1774': attribute type 4 has an invalid length. [ 208.055357][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 208.067768][ T9567] netlink: 'syz.2.1774': attribute type 4 has an invalid length. [ 208.134646][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 208.358925][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.362386][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.365118][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.580669][ T9602] loop5: detected capacity change from 0 to 128 [ 208.639816][ T9602] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 208.661741][ T27] kauditd_printk_skb: 183 callbacks suppressed [ 208.661754][ T27] audit: type=1326 audit(208.640:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.685488][ T27] audit: type=1326 audit(208.660:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.712584][ T27] audit: type=1326 audit(208.690:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.740784][ T27] audit: type=1326 audit(208.710:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=79 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.764160][ T27] audit: type=1326 audit(208.710:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.769895][ T27] audit: type=1326 audit(208.710:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.787248][ T27] audit: type=1326 audit(208.710:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.793396][ T27] audit: type=1326 audit(208.710:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.799992][ T27] audit: type=1326 audit(208.710:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.808882][ T27] audit: type=1326 audit(208.720:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=424 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 208.977869][ T9626] tipc: Enabling of bearer rejected, already enabled [ 208.990097][ T9611] EXT4-fs (loop5): unmounting filesystem. [ 211.084642][ T9658] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 211.087017][ T9658] tipc: Enabled bearer , priority 10 [ 211.655715][ T9683] __nla_validate_parse: 5 callbacks suppressed [ 211.655740][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1804'. [ 211.724905][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'. [ 212.105550][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 212.206803][ T4431] tipc: Node number set to 1016755824 [ 212.310333][ T9717] tipc: Enabling of bearer rejected, failed to enable media [ 212.561636][ T9730] netlink: 'syz.5.1819': attribute type 29 has an invalid length. [ 212.571794][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.575960][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.578280][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.593844][ T9730] netlink: 'syz.5.1819': attribute type 29 has an invalid length. [ 212.599019][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1819'. [ 212.618792][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1819'. [ 212.676864][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 212.848328][ T9748] tipc: Enabled bearer , priority 0 [ 212.881372][ T9748] tipc: Resetting bearer [ 212.984915][ T9747] tipc: Disabling bearer [ 213.116366][ T9771] netlink: 'syz.0.1836': attribute type 29 has an invalid length. [ 213.118755][ T9771] netlink: 'syz.0.1836': attribute type 29 has an invalid length. [ 213.140596][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 213.151540][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'. [ 213.686505][ T9795] tipc: Enabled bearer , priority 0 [ 213.690490][ T27] kauditd_printk_skb: 105 callbacks suppressed [ 213.690501][ T27] audit: type=1326 audit(213.670:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.708331][ T27] audit: type=1326 audit(213.680:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.717890][ T27] audit: type=1326 audit(213.680:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.718092][ T9795] tipc: Resetting bearer [ 213.728616][ T27] audit: type=1326 audit(213.680:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.736655][ T27] audit: type=1326 audit(213.680:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.742702][ T27] audit: type=1326 audit(213.680:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.756141][ T27] audit: type=1326 audit(213.680:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.762008][ T27] audit: type=1326 audit(213.690:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=137 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 213.975161][ T9794] tipc: Disabling bearer [ 214.042641][ T9804] netlink: 'syz.2.1849': attribute type 29 has an invalid length. [ 214.046064][ T9804] netlink: 'syz.2.1849': attribute type 29 has an invalid length. [ 214.052398][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 214.067891][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1849'. [ 214.102380][ T27] audit: type=1326 audit(214.080:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 214.112112][ T27] audit: type=1326 audit(214.090:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 214.136561][ T9805] lo speed is unknown, defaulting to 1000 [ 214.303582][ T9815] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 215.054324][ T4317] Bluetooth: hci1: command 0x0406 tx timeout [ 215.099800][ T9844] netlink: 'syz.3.1865': attribute type 29 has an invalid length. [ 215.104495][ T9842] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 215.106407][ T9842] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.116873][ T9844] netlink: 'syz.3.1865': attribute type 29 has an invalid length. [ 215.126814][ T9842] vhci_hcd vhci_hcd.0: Device attached [ 215.135016][ T9845] vhci_hcd: cannot find the pending unlink 6 [ 215.136787][ T9845] vhci_hcd: connection closed [ 215.137031][ T4447] vhci_hcd: stop threads [ 215.139554][ T4447] vhci_hcd: release socket [ 215.140827][ T4447] vhci_hcd: disconnect device [ 215.331556][ T9855] tipc: Enabled bearer , priority 0 [ 215.345423][ T9855] tipc: Resetting bearer [ 215.454889][ T9854] tipc: Disabling bearer [ 216.114218][ T9879] lo speed is unknown, defaulting to 1000 [ 216.143008][ T9881] netlink: 'syz.3.1881': attribute type 29 has an invalid length. [ 216.207766][ T9885] tipc: Enabling of bearer rejected, failed to enable media [ 218.004718][ T9962] lo speed is unknown, defaulting to 1000 [ 218.470537][ T9991] tipc: Enabling of bearer rejected, failed to enable media [ 218.922663][T10011] __nla_validate_parse: 4 callbacks suppressed [ 218.922678][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 218.994343][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 218.994356][ T27] audit: type=1326 audit(218.980:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.014035][ T27] audit: type=1326 audit(218.980:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.034183][ T27] audit: type=1326 audit(218.980:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.040171][ T27] audit: type=1326 audit(218.980:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.073902][ T27] audit: type=1326 audit(218.990:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.090479][ T27] audit: type=1326 audit(218.990:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.104444][ T27] audit: type=1326 audit(218.990:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.120871][ T27] audit: type=1326 audit(218.990:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.422933][ T27] audit: type=1326 audit(219.400:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.433641][ T27] audit: type=1326 audit(219.410:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 219.667784][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 219.915812][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 219.939612][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1944'. [ 220.439649][T10095] lo speed is unknown, defaulting to 1000 [ 220.862172][T10109] tipc: Enabling of bearer rejected, failed to enable media [ 222.110380][T10134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.121177][T10134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.123300][T10134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.142622][T10134] bond1: (slave batadv1): Releasing active interface [ 226.280505][T10163] lo speed is unknown, defaulting to 1000 [ 226.282660][T10169] lo speed is unknown, defaulting to 1000 [ 227.937583][T10221] lo speed is unknown, defaulting to 1000 [ 229.475410][T10243] lo speed is unknown, defaulting to 1000 [ 229.584649][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 229.655975][T10254] validate_nla: 1 callbacks suppressed [ 229.655989][T10254] netlink: '+}[@': attribute type 3 has an invalid length. [ 229.910129][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 230.285931][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 230.285953][ T27] audit: type=1326 audit(7964.260:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 230.303607][ T27] audit: type=1326 audit(7964.270:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=196 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 230.309619][ T27] audit: type=1326 audit(7964.270:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 230.423186][T10307] lo speed is unknown, defaulting to 1000 [ 231.082979][T10321] lo speed is unknown, defaulting to 1000 [ 231.640047][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 231.844247][T10341] netlink: 'syz.0.2029': attribute type 29 has an invalid length. [ 232.164572][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 232.168083][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2029'. [ 232.244299][T10341] netlink: 'syz.0.2029': attribute type 29 has an invalid length. [ 232.246864][T10343] netlink: 'syz.0.2029': attribute type 29 has an invalid length. [ 232.260499][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2032'. [ 232.393449][T10357] netlink: 'syz.3.2035': attribute type 4 has an invalid length. [ 232.412056][T10357] netlink: 'syz.3.2035': attribute type 4 has an invalid length. [ 232.512888][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 232.657655][T10373] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2042'. [ 232.919969][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 233.303909][T10396] lo speed is unknown, defaulting to 1000 [ 233.359602][T10402] netlink: 'syz.0.2052': attribute type 4 has an invalid length. [ 233.410113][T10402] netlink: 'syz.0.2052': attribute type 4 has an invalid length. [ 233.531042][T10408] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2056'. [ 233.576250][T10410] bridge0: port 1(batadv2) entered blocking state [ 233.578015][T10410] bridge0: port 1(batadv2) entered disabled state [ 233.580595][T10410] device batadv2 entered promiscuous mode [ 233.879173][T10422] rdma_rxe: rxe_register_device failed with error -23 [ 233.881216][T10422] rdma_rxe: failed to add team_slave_0 [ 234.090936][ T39] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 234.093627][ T39] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 234.568610][T10437] netlink: 'syz.4.2069': attribute type 4 has an invalid length. [ 234.596710][ T24] lo speed is unknown, defaulting to 1000 [ 234.613789][T10437] netlink: 'syz.4.2069': attribute type 4 has an invalid length. [ 234.618721][ T24] lo speed is unknown, defaulting to 1000 [ 234.945473][T10441] lo speed is unknown, defaulting to 1000 [ 235.337345][T10442] siw: device registration error -23 [ 235.614341][T10448] __nla_validate_parse: 2 callbacks suppressed [ 235.614356][T10448] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2072'. [ 235.926219][T10465] rdma_rxe: rxe_register_device failed with error -23 [ 235.928149][T10465] rdma_rxe: failed to add team_slave_0 [ 236.138170][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2084'. [ 236.360243][T10477] lo speed is unknown, defaulting to 1000 [ 237.375116][T10489] netlink: 'syz.3.2088': attribute type 32 has an invalid length. [ 237.395606][T10458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.402034][T10458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 237.407758][T10458] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 237.414412][T10458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.419826][T10458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 237.425471][T10458] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 237.430142][T10458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.433037][T10458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 237.435907][T10458] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 237.448740][T10458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.458459][T10458] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 237.460333][T10458] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 237.469153][T10458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.479855][T10458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 237.484502][T10458] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 237.551615][T10488] siw: device registration error -23 [ 237.551900][T10487] lo speed is unknown, defaulting to 1000 [ 238.122136][ T4317] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.692987][T10510] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.704828][T10510] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.793902][T10510] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.796770][T10510] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.866288][T10510] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.869099][T10510] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.898569][T10523] netlink: 'syz.5.2102': attribute type 32 has an invalid length. [ 238.943823][T10510] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.946555][T10510] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.994521][T10529] rdma_rxe: rxe_register_device failed with error -23 [ 238.998968][T10529] rdma_rxe: failed to add team_slave_0 [ 239.194923][T10510] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.197444][T10510] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.204198][T10510] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.206650][T10510] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.215226][T10510] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.257227][T10510] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.532461][ T4317] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.535526][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.538467][ T4317] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.538963][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.555513][T10537] netlink: 'syz.5.2106': attribute type 4 has an invalid length. [ 239.558067][T10537] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2106'. [ 239.906399][T10538] 9pnet_fd: Insufficient options for proto=fd [ 239.912378][T10510] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.918482][T10510] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.956631][T10524] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.966305][T10524] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.982489][T10524] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 239.990103][T10524] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.995253][T10524] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.000350][T10524] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 240.009520][T10524] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.028003][T10524] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 240.061980][T10524] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 240.072204][T10524] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.078680][T10524] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.080320][T10524] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 240.092191][T10524] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.095149][T10524] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 240.096847][T10524] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 240.136532][T10550] netlink: 'syz.2.2111': attribute type 10 has an invalid length. [ 240.156899][T10550] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.159500][T10550] bond0: (slave team0): Enslaving as an active interface with an up link [ 240.205950][T10558] netlink: 'syz.4.2115': attribute type 32 has an invalid length. [ 240.526148][T10570] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.956066][T10575] lo speed is unknown, defaulting to 1000 [ 241.201615][T10579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2123'. [ 241.204413][ T4311] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.363135][T10570] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.509846][T10570] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.622033][T10591] lo speed is unknown, defaulting to 1000 [ 241.717373][T10570] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.755522][T10594] netlink: 'syz.5.2128': attribute type 10 has an invalid length. [ 241.809905][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.822648][ T4489] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 241.845495][T10594] bond0: (slave team0): Enslaving as an active interface with an up link [ 241.978794][T10570] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.003030][ T4317] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.054769][T10570] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.081876][ T4311] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.081920][ T4317] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.101264][T10570] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.115138][T10570] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.117658][T10602] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2131'. [ 242.162388][ T4317] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.418795][ T27] audit: type=1326 audit(7976.392:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 242.431069][ T27] audit: type=1326 audit(7976.392:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 242.655395][T10624] lo speed is unknown, defaulting to 1000 [ 243.138325][ T27] audit: type=1326 audit(7976.392:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.157414][ T27] audit: type=1326 audit(7976.402:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.188062][ T27] audit: type=1326 audit(7976.402:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.239645][ T27] audit: type=1326 audit(7976.402:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.251248][ T27] audit: type=1326 audit(7976.402:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.273877][ T27] audit: type=1326 audit(7976.402:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.276665][T10633] netlink: 'syz.4.2141': attribute type 10 has an invalid length. [ 243.311914][ T4311] Bluetooth: hci0: command 0x0406 tx timeout [ 243.365364][ T27] audit: type=1326 audit(7976.402:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.372283][ T27] audit: type=1326 audit(7976.402:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaef5ce28 code=0x7ffc0000 [ 243.527158][T10639] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2143'. [ 243.982411][T10646] lo speed is unknown, defaulting to 1000 [ 244.291902][ T4317] Bluetooth: hci2: command 0x0406 tx timeout [ 244.291939][ T4311] Bluetooth: hci3: command 0x0406 tx timeout [ 244.293516][ T4317] Bluetooth: hci1: command 0x0406 tx timeout [ 244.298247][ T4317] Bluetooth: hci4: command 0x0406 tx timeout [ 244.417865][T10650] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.479404][T10655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 244.526964][T10650] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.696963][T10650] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.970017][T10673] lo speed is unknown, defaulting to 1000 [ 245.438977][T10650] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.553141][T10680] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2158'. [ 245.639285][T10687] tipc: Enabling of bearer rejected, failed to enable media [ 246.553303][T10699] lo speed is unknown, defaulting to 1000 [ 248.807648][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.809508][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.762545][T10713] bridge0: port 4(batadv0) entered blocking state [ 257.764430][T10713] bridge0: port 4(batadv0) entered disabled state [ 257.766789][T10713] device batadv0 entered promiscuous mode [ 257.785201][T10650] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.813469][T10650] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.830043][T10650] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.841622][T10650] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.131679][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2179'. [ 258.436335][T10752] netlink: 'syz.4.2178': attribute type 4 has an invalid length. [ 258.438806][T10752] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2178'. [ 260.632970][T10754] lo speed is unknown, defaulting to 1000 [ 260.681920][ T6551] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 260.684525][ T6551] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 260.697620][T10759] tipc: Enabled bearer , priority 0 [ 260.733018][T10759] tipc: Resetting bearer [ 260.865091][T10758] tipc: Disabling bearer [ 260.875687][T10761] lo speed is unknown, defaulting to 1000 [ 260.895702][T10766] tipc: Enabling of bearer rejected, failed to enable media [ 261.860759][T10793] lo speed is unknown, defaulting to 1000 [ 262.396833][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 263.393454][T10813] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2198'. [ 263.478539][T10814] netlink: 'syz.2.2193': attribute type 4 has an invalid length. [ 263.480785][T10814] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2193'. [ 263.490399][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 263.851434][T10815] tipc: Enabled bearer , priority 0 [ 263.866978][T10820] bridge0: port 5(batadv2) entered blocking state [ 263.869104][T10820] bridge0: port 5(batadv2) entered disabled state [ 263.871606][T10820] device batadv2 entered promiscuous mode [ 263.876372][T10826] tipc: Resetting bearer [ 263.882622][T10825] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 263.892333][T10829] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 263.918943][T10829] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 263.992677][T10810] tipc: Disabling bearer [ 264.543123][T10850] lo speed is unknown, defaulting to 1000 [ 264.962128][ T7172] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 264.964624][ T7172] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 265.017198][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 265.209832][T10867] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2218'. [ 265.252618][T10869] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 265.296385][T10869] team0: Port device dummy0 added [ 265.320573][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 265.663997][T10869] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 265.667217][T10869] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 265.685355][T10869] team0: Failed to send options change via netlink (err -105) [ 265.690192][T10869] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 265.695873][T10869] team0: Port device dummy0 removed [ 265.704118][T10869] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.720994][T10873] tipc: Enabling of bearer rejected, failed to enable media [ 265.782331][T10846] lo speed is unknown, defaulting to 1000 [ 266.446031][T10902] lo speed is unknown, defaulting to 1000 [ 266.997429][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2230'. [ 267.416387][T10913] lo speed is unknown, defaulting to 1000 [ 268.061493][T10920] device syzkaller0 entered promiscuous mode [ 268.079719][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 268.079743][ T27] audit: type=1326 audit(8002.067:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.101025][ T27] audit: type=1326 audit(8002.077:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.137718][ T27] audit: type=1326 audit(8002.077:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.149493][ T27] audit: type=1326 audit(8002.077:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.161313][ T27] audit: type=1326 audit(8002.077:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.180814][ T27] audit: type=1326 audit(8002.077:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.187575][ T27] audit: type=1326 audit(8002.077:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.213037][ T27] audit: type=1326 audit(8002.077:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.227765][T10929] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2236'. [ 268.229540][ T27] audit: type=1326 audit(8002.097:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.253009][ T27] audit: type=1326 audit(8002.097:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 268.305643][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 269.854949][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 269.916517][T10969] device syzkaller0 entered promiscuous mode [ 270.120078][T10967] lo speed is unknown, defaulting to 1000 [ 271.628895][T11022] usb usb9: usbfs: process 11022 (syz.0.2267) did not claim interface 0 before use [ 271.995845][T11016] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2267'. [ 272.001595][T11020] device syzkaller0 entered promiscuous mode [ 272.247552][T11042] device dummy0 entered promiscuous mode [ 272.250231][T11042] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 272.267187][T11042] device dummy0 left promiscuous mode [ 274.877525][T11100] lo speed is unknown, defaulting to 1000 [ 274.908121][T11101] lo speed is unknown, defaulting to 1000 [ 275.406363][ T27] kauditd_printk_skb: 102 callbacks suppressed [ 275.406376][ T27] audit: type=1326 audit(8009.398:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.433646][ T27] audit: type=1326 audit(8009.418:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.451430][ T27] audit: type=1326 audit(8009.418:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.471688][ T27] audit: type=1326 audit(8009.418:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.491926][ T27] audit: type=1326 audit(8009.418:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.511080][ T27] audit: type=1326 audit(8009.418:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.545729][ T27] audit: type=1326 audit(8009.418:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.556091][ T27] audit: type=1326 audit(8009.418:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.561916][ T27] audit: type=1326 audit(8009.418:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.598747][ T27] audit: type=1326 audit(8009.418:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.5.2310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 275.758143][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 276.003410][T11142] lo speed is unknown, defaulting to 1000 [ 278.142355][T11194] rdma_rxe: rxe_register_device failed with error -23 [ 278.144342][T11194] rdma_rxe: failed to add team_slave_0 [ 288.344902][T11185] lo speed is unknown, defaulting to 1000 [ 288.881265][T11216] lo speed is unknown, defaulting to 1000 [ 289.530218][T11226] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2346'. [ 289.636141][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 289.636155][ T27] audit: type=1326 audit(8023.620:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.651216][ T27] audit: type=1326 audit(8023.620:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.674839][ T27] audit: type=1326 audit(8023.630:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.680747][ T27] audit: type=1326 audit(8023.630:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.745755][ T27] audit: type=1326 audit(8023.630:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.751810][ T27] audit: type=1326 audit(8023.650:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.823284][ T27] audit: type=1326 audit(8023.650:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.829654][ T27] audit: type=1326 audit(8023.650:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.888600][ T27] audit: type=1326 audit(8023.650:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 289.937711][ T27] audit: type=1326 audit(8023.650:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 290.379606][T11249] lo speed is unknown, defaulting to 1000 [ 291.060495][T11274] smc: net device bond0 applied user defined pnetid SYZ0 [ 291.088439][T11274] smc: net device bond0 erased user defined pnetid SYZ0 [ 291.131348][T11279] lo speed is unknown, defaulting to 1000 [ 291.160648][T11277] tipc: Enabling of bearer rejected, failed to enable media [ 291.839693][T11296] lo speed is unknown, defaulting to 1000 [ 292.682256][T11318] syz.2.2381 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 292.725891][T11322] tipc: Enabled bearer , priority 0 [ 292.800504][T11314] tipc: Resetting bearer [ 304.379052][T11314] tipc: Disabling bearer [ 304.403573][T11346] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.408983][T11372] lo speed is unknown, defaulting to 1000 [ 304.582440][ T27] kauditd_printk_skb: 163 callbacks suppressed [ 304.582453][ T27] audit: type=1326 audit(8038.573:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.599714][ T27] audit: type=1326 audit(8038.573:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.632317][ T27] audit: type=1326 audit(8038.583:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.638292][ T27] audit: type=1326 audit(8038.583:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.672389][ T27] audit: type=1326 audit(8038.583:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.684469][ T27] audit: type=1326 audit(8038.583:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.691180][ T27] audit: type=1326 audit(8038.583:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.697350][ T27] audit: type=1326 audit(8038.583:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.704197][ T27] audit: type=1326 audit(8038.583:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.710820][ T27] audit: type=1326 audit(8038.583:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 304.915092][T11404] rdma_rxe: rxe_register_device failed with error -23 [ 304.927249][T11404] rdma_rxe: failed to add team_slave_0 [ 304.930914][T11405] tipc: Enabling of bearer rejected, failed to enable media [ 305.078104][T11395] lo speed is unknown, defaulting to 1000 [ 305.406768][T11413] lo speed is unknown, defaulting to 1000 [ 305.867562][T11401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.875753][T11401] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 305.881560][T11401] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 305.893154][T11401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.902331][T11401] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.910328][T11401] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 305.927323][T11401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.929023][T11401] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 305.931100][T11401] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 305.933074][T11401] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.945049][T11401] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 305.946718][T11401] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 305.948749][T11401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.950360][T11401] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 305.976993][T11401] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 306.099020][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 306.182439][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'. [ 306.230039][T11431] tipc: Enabling of bearer rejected, failed to enable media [ 306.545155][T11450] sch_fq: defrate 4294967295 ignored. [ 306.584607][T11452] rdma_rxe: rxe_register_device failed with error -23 [ 306.586834][T11452] rdma_rxe: failed to add team_slave_0 [ 306.780726][T11455] lo speed is unknown, defaulting to 1000 [ 307.282246][T11437] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2428'. [ 307.393744][T11447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.395455][T11447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 307.397108][T11447] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 307.399118][T11447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.432383][T11447] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 307.434672][T11447] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 307.436616][T11447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.438248][T11447] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 307.460949][T11462] tipc: Enabling of bearer rejected, failed to enable media [ 307.480448][T11447] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 307.490552][T11447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.492193][T11447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 307.493811][T11447] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 307.495751][T11447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.497437][T11447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 307.499070][T11447] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 308.282225][T11503] lo speed is unknown, defaulting to 1000 [ 308.528979][T11510] rdma_rxe: rxe_register_device failed with error -23 [ 308.532003][T11510] rdma_rxe: failed to add team_slave_0 [ 309.023633][T11507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.026163][T11507] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 309.030415][T11507] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 309.037013][T11507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.043874][T11507] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 309.049051][T11507] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 309.055864][T11507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.063175][T11507] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 309.069248][T11507] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 309.075929][T11507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 309.084552][T11507] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 309.088502][T11507] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 309.096587][T11507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.101986][T11507] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 309.107093][T11507] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 309.721204][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 309.724938][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 309.769474][T11546] lo speed is unknown, defaulting to 1000 [ 309.889936][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2477'. [ 309.892486][T11562] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2477'. [ 310.043458][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.050000][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.084560][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2481'. [ 310.199331][T11569] device syzkaller0 entered promiscuous mode [ 310.231290][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.233274][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.386887][ T27] kauditd_printk_skb: 211 callbacks suppressed [ 310.386901][ T27] audit: type=1326 audit(8044.374:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.389962][ T4317] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.404120][ T27] audit: type=1326 audit(8044.394:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.429720][ T27] audit: type=1326 audit(8044.394:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.461931][ T27] audit: type=1326 audit(8044.394:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.479122][ T27] audit: type=1326 audit(8044.414:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.495047][ T27] audit: type=1326 audit(8044.414:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.513705][ T27] audit: type=1326 audit(8044.414:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.531138][ T27] audit: type=1326 audit(8044.414:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.547497][ T27] audit: type=1326 audit(8044.414:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.570326][ T27] audit: type=1326 audit(8044.414:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.5.2482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35ce28 code=0x7ffc0000 [ 310.994034][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 311.006310][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2490'. [ 311.110247][ T4317] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.111939][ T4317] Bluetooth: hci4: command 0x0c1a tx timeout [ 311.113600][ T4317] Bluetooth: hci3: command 0x0c1a tx timeout [ 311.115317][ T4317] Bluetooth: hci2: command 0x0c1a tx timeout [ 311.346420][T11603] lo speed is unknown, defaulting to 1000 [ 311.380043][T11605] lo speed is unknown, defaulting to 1000 [ 311.391653][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 311.415882][T11611] device syzkaller0 entered promiscuous mode [ 311.894196][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2501'. [ 312.057575][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2504'. [ 312.073147][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2504'. [ 312.172042][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2504'. [ 312.469524][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 312.685118][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 312.780946][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'. [ 313.189284][ T4317] Bluetooth: hci2: command 0x0406 tx timeout [ 313.191109][ T4317] Bluetooth: hci3: command 0x0406 tx timeout [ 313.192710][ T4317] Bluetooth: hci4: command 0x0406 tx timeout [ 313.194353][ T4317] Bluetooth: hci1: command 0x0406 tx timeout [ 314.549386][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.269003][ T4317] Bluetooth: hci1: command 0x0c1a tx timeout [ 315.269022][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.270661][ T4317] Bluetooth: hci3: command 0x0c1a tx timeout [ 315.272259][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 316.628758][ T4311] Bluetooth: hci0: command 0x0406 tx timeout [ 317.348527][ T4322] Bluetooth: hci3: command 0x0406 tx timeout [ 317.350308][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 317.351908][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 317.353490][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 323.224939][T11672] lo speed is unknown, defaulting to 1000 [ 323.376002][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 323.385536][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2519'. [ 323.482902][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 323.491581][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2523'. [ 323.693712][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2525'. [ 323.815274][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 323.815288][ T27] audit: type=1326 audit(8057.806:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.828046][ T27] audit: type=1326 audit(8057.806:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.841674][ T27] audit: type=1326 audit(8057.806:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.854796][T11710] lo speed is unknown, defaulting to 1000 [ 323.887402][ T27] audit: type=1326 audit(8057.806:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.909177][ T27] audit: type=1326 audit(8057.806:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.915328][ T27] audit: type=1326 audit(8057.816:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.931391][ T27] audit: type=1326 audit(8057.816:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.958191][ T27] audit: type=1326 audit(8057.816:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.987898][ T27] audit: type=1326 audit(8057.816:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 323.999094][ T27] audit: type=1326 audit(8057.816:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8475ce28 code=0x7ffc0000 [ 324.114020][T11717] rdma_rxe: rxe_register_device failed with error -23 [ 324.116207][T11717] rdma_rxe: failed to add team_slave_0 [ 324.372521][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2532'. [ 324.418437][T11729] lo speed is unknown, defaulting to 1000 [ 324.710493][T11712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.713406][T11712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 324.718368][T11712] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 324.723591][T11712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.729597][T11712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 324.734569][T11712] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 324.742119][T11712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.748448][T11712] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 324.753402][T11712] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 324.762872][T11712] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.768775][T11712] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 324.773673][T11712] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 324.788331][T11712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.796282][T11712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.803678][T11712] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 324.833818][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2539'. [ 324.891402][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'. [ 324.906254][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 325.029382][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'. [ 325.233916][T11761] tipc: Enabling of bearer rejected, failed to enable media [ 325.347456][T11759] device syzkaller0 entered promiscuous mode [ 325.349399][T11759] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 325.617861][T11783] rdma_rxe: rxe_register_device failed with error -23 [ 325.620024][T11783] rdma_rxe: failed to add team_slave_0 [ 325.871706][T11792] lo speed is unknown, defaulting to 1000 [ 325.970657][T11798] tipc: Enabling of bearer rejected, failed to enable media [ 326.002343][T11803] lo speed is unknown, defaulting to 1000 [ 326.067146][ T4311] Bluetooth: hci0: command 0x0c1a tx timeout [ 326.269655][T11815] device syzkaller0 entered promiscuous mode [ 326.459491][T11823] rdma_rxe: rxe_register_device failed with error -23 [ 326.465921][T11823] rdma_rxe: failed to add team_slave_0 [ 326.712931][T11827] lo speed is unknown, defaulting to 1000 [ 326.786915][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.788641][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.811550][T11832] tipc: Enabled bearer , priority 0 [ 326.812173][ T4311] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.849838][T11830] tipc: Disabling bearer [ 326.867246][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.178141][T11857] rdma_rxe: rxe_register_device failed with error -23 [ 327.180119][T11857] rdma_rxe: failed to add team_slave_0 [ 327.450913][T11859] lo speed is unknown, defaulting to 1000 [ 327.505535][T11864] lo speed is unknown, defaulting to 1000 [ 327.678282][T11873] tipc: Enabled bearer , priority 0 [ 327.729083][T11870] tipc: Disabling bearer [ 327.773428][T11877] lo speed is unknown, defaulting to 1000 [ 327.797303][T11880] netlink: 'syz.4.2586': attribute type 4 has an invalid length. [ 327.810004][T11884] rdma_rxe: already configured on team_slave_0 [ 328.146651][ T4317] Bluetooth: hci0: command 0x0406 tx timeout [ 328.459136][T11901] lo speed is unknown, defaulting to 1000 [ 328.512288][T11908] lo speed is unknown, defaulting to 1000 [ 328.730694][T11915] __nla_validate_parse: 15 callbacks suppressed [ 328.730709][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 328.736282][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2598'. [ 328.778100][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 328.866614][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 328.868467][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 328.876504][ T4317] Bluetooth: hci3: command 0x0406 tx timeout [ 328.933733][ T27] kauditd_printk_skb: 178 callbacks suppressed [ 328.985318][ T27] audit: type=1326 audit(8062.927:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 328.996535][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 329.014989][T11923] rdma_rxe: already configured on team_slave_0 [ 329.032932][ T27] audit: type=1326 audit(8062.977:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.046869][ T27] audit: type=1326 audit(8063.007:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.052590][ T27] audit: type=1326 audit(8063.007:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.059571][T11921] tipc: Enabled bearer , priority 0 [ 329.083411][T11920] tipc: Disabling bearer [ 329.118795][ T27] audit: type=1326 audit(8063.007:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.147423][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2604'. [ 329.210748][ T27] audit: type=1326 audit(8063.007:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.230953][ T27] audit: type=1326 audit(8063.007:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.238335][T11929] device syzkaller0 entered promiscuous mode [ 329.263638][ T27] audit: type=1326 audit(8063.017:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.299312][ T27] audit: type=1326 audit(8063.027:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.305079][ T27] audit: type=1326 audit(8063.027:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b5ce28 code=0x7ffc0000 [ 329.457775][T11943] device pim6reg1 entered promiscuous mode [ 329.813845][T11942] lo speed is unknown, defaulting to 1000 [ 329.869775][T11950] lo speed is unknown, defaulting to 1000 [ 330.034824][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2613'. [ 330.205881][T11966] rdma_rxe: rxe_register_device failed with error -23 [ 330.208310][T11966] rdma_rxe: failed to add team_slave_0 [ 330.290767][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 330.297003][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 330.357302][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2618'. [ 330.478445][T11983] tipc: Enabling of bearer rejected, failed to enable media [ 330.502623][T11980] lo speed is unknown, defaulting to 1000 [ 330.656902][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 330.906899][T11957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 330.909442][T11957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 330.911301][T11957] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 330.913510][T11957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.915409][T11957] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 330.917374][T11957] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 330.919632][T11957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.921491][T11957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 330.923216][T11957] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 330.925255][T11957] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.929751][T11957] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.935958][T11957] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 330.947544][T11957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.999979][T12009] lo speed is unknown, defaulting to 1000 [ 331.106497][T11957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 331.110274][T11957] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 331.416390][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2632'. [ 331.756284][T12029] lo speed is unknown, defaulting to 1000 [ 332.007733][T12044] rdma_rxe: rxe_register_device failed with error -23 [ 332.009755][T12044] rdma_rxe: failed to add team_slave_0 [ 332.015118][T12045] tipc: Enabled bearer , priority 0 [ 332.395650][T12060] lo speed is unknown, defaulting to 1000 [ 332.730077][T12040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 332.731871][T12040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 332.734242][T12040] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 332.738975][T12039] tipc: Disabling bearer [ 332.740374][T12040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.756097][T12040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 332.757716][T12040] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 332.759972][T12040] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.761659][T12040] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 332.763290][T12040] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 332.775987][T12040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.780116][T12040] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 332.781726][T12040] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 332.796298][T12040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.800586][T12040] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 332.802270][T12040] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 333.014171][T12080] lo speed is unknown, defaulting to 1000 [ 333.374819][T12107] tipc: Enabling of bearer rejected, failed to enable media [ 333.388785][T12112] rdma_rxe: rxe_register_device failed with error -23 [ 333.390834][T12112] rdma_rxe: failed to add team_slave_0 [ 333.469151][T12117] tipc: Enabling of bearer rejected, failed to enable media [ 333.675381][T12122] lo speed is unknown, defaulting to 1000 [ 333.853779][T12133] __nla_validate_parse: 10 callbacks suppressed [ 333.853796][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 333.867615][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 334.061050][T12134] lo speed is unknown, defaulting to 1000 [ 334.152709][T12105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.154594][T12105] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 334.157056][T12105] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 334.161330][T12105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.163059][T12105] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.172143][T12105] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 334.177158][T12105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.179624][T12105] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 334.181318][T12105] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 334.183490][T12105] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.185324][T12105] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 334.193255][T12105] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 334.195988][T12105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.197837][T12105] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.199700][T12105] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 334.262260][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2676'. [ 334.347129][ T27] kauditd_printk_skb: 100 callbacks suppressed [ 334.347141][ T27] audit: type=1326 audit(8068.348:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.359100][ T27] audit: type=1326 audit(8068.348:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.371498][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2679'. [ 334.402918][ T27] audit: type=1326 audit(8068.358:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.414061][T12150] tipc: Enabled bearer , priority 0 [ 334.426915][ T27] audit: type=1326 audit(8068.358:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.432789][ T27] audit: type=1326 audit(8068.358:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.444413][T12149] tipc: Disabling bearer [ 334.463321][ T27] audit: type=1326 audit(8068.368:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.479538][ T27] audit: type=1326 audit(8068.368:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.497895][ T27] audit: type=1326 audit(8068.368:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.503781][ T27] audit: type=1326 audit(8068.368:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 334.525541][ T27] audit: type=1326 audit(8068.378:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ce28 code=0x7ffc0000 [ 335.135793][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2691'. [ 335.425379][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.141717][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz.0.2680:12184] [ 356.144120][ C1] Modules linked in: [ 356.145206][ C1] irq event stamp: 4512 [ 356.146289][ C1] hardirqs last enabled at (4511): [] exit_to_kernel_mode+0xcc/0xfc [ 356.148871][ C1] hardirqs last disabled at (4512): [] el1_interrupt+0x24/0x54 [ 356.151282][ C1] softirqs last enabled at (368): [] handle_softirqs+0xaf8/0xc6c [ 356.153818][ C1] softirqs last disabled at (347): [] __do_softirq+0x14/0x20 [ 356.156233][ C1] CPU: 1 PID: 12184 Comm: syz.0.2680 Not tainted 6.1.147-syzkaller #0 [ 356.158422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.161095][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 356.163167][ C1] pc : smp_call_function_many_cond+0x1384/0x1460 [ 356.164866][ C1] lr : smp_call_function_many_cond+0x139c/0x1460 [ 356.166472][ C1] sp : ffff800021d37740 [ 356.167542][ C1] x29: ffff800021d377a0 x28: 0000000000000000 x27: ffff8000150ad000 [ 356.169650][ C1] x26: 0000000000000011 x25: ffff8000150b1140 x24: ffff00019f7041c0 [ 356.171902][ C1] x23: 1fffe00033ee0838 x22: dfff800000000000 x21: ffff00019f6e9348 [ 356.174068][ C1] x20: 0000000000000000 x19: ffff8000152a9f60 x18: ffff80002056e059 [ 356.176202][ C1] x17: ffff80002056e054 x16: ffff8000082d2374 x15: 0000000000000002 [ 356.178312][ C1] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 356.180415][ C1] x11: 000000000007ffff x10: ffff80002334a000 x9 : 0000000000000000 [ 356.182518][ C1] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 356.184733][ C1] x5 : 0000000000000006 x4 : 0000000000000000 x3 : ffff8000083ffe7c [ 356.186859][ C1] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 356.189022][ C1] Call trace: [ 356.189874][ C1] smp_call_function_many_cond+0x1384/0x1460 [ 356.191433][ C1] kick_all_cpus_sync+0x40/0xa0 [ 356.192692][ C1] bpf_int_jit_compile+0x940/0x104c [ 356.194110][ C1] bpf_prog_select_runtime+0x3cc/0x69c [ 356.195583][ C1] bpf_prepare_filter+0xd58/0xeb4 [ 356.196923][ C1] bpf_prog_create_from_user+0x2d0/0x46c [ 356.198402][ C1] do_seccomp+0x910/0xe80 [ 356.199529][ C1] prctl_set_seccomp+0x60/0x7c [ 356.200804][ C1] __arm64_sys_prctl+0x4dc/0xfd8 [ 356.202156][ C1] invoke_syscall+0x98/0x2bc [ 356.203382][ C1] el0_svc_common+0x138/0x258 [ 356.204624][ C1] do_el0_svc+0x58/0x13c [ 356.205722][ C1] el0_svc+0x58/0x138 [ 356.206788][ C1] el0t_64_sync_handler+0x84/0xf0 [ 356.208082][ C1] el0t_64_sync+0x18c/0x190 [ 356.209260][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 356.211046][ C1] CPU: 1 PID: 12184 Comm: syz.0.2680 Tainted: G L 6.1.147-syzkaller #0 [ 356.213577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.216167][ C1] Call trace: [ 356.217035][ C1] dump_backtrace+0x1c8/0x1f4 [ 356.218261][ C1] show_stack+0x2c/0x3c [ 356.219417][ C1] __dump_stack+0x30/0x40 [ 356.220551][ C1] dump_stack_lvl+0xf8/0x160 [ 356.221759][ C1] dump_stack+0x1c/0x5c [ 356.222872][ C1] panic+0x2e0/0x79c [ 356.223892][ C1] softlockup_fn+0x0/0x120 [ 356.225041][ C1] __hrtimer_run_queues+0x420/0xc64 [ 356.226384][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 356.227683][ C1] arch_timer_handler_virt+0x74/0x88 [ 356.229088][ C1] handle_percpu_devid_irq+0x174/0x34c [ 356.230545][ C1] generic_handle_domain_irq+0xe0/0x140 [ 356.232029][ C1] gic_handle_irq+0x70/0x1e4 [ 356.233229][ C1] call_on_irq_stack+0x24/0x30 [ 356.234538][ C1] do_interrupt_handler+0xd4/0x138 [ 356.235916][ C1] el1_interrupt+0x34/0x54 [ 356.237112][ C1] el1h_64_irq_handler+0x18/0x24 [ 356.238414][ C1] el1h_64_irq+0x64/0x68 [ 356.239500][ C1] smp_call_function_many_cond+0x1384/0x1460 [ 356.241072][ C1] kick_all_cpus_sync+0x40/0xa0 [ 356.242358][ C1] bpf_int_jit_compile+0x940/0x104c [ 356.243747][ C1] bpf_prog_select_runtime+0x3cc/0x69c [ 356.245190][ C1] bpf_prepare_filter+0xd58/0xeb4 [ 356.246515][ C1] bpf_prog_create_from_user+0x2d0/0x46c [ 356.248002][ C1] do_seccomp+0x910/0xe80 [ 356.249170][ C1] prctl_set_seccomp+0x60/0x7c [ 356.250455][ C1] __arm64_sys_prctl+0x4dc/0xfd8 [ 356.251756][ C1] invoke_syscall+0x98/0x2bc [ 356.252983][ C1] el0_svc_common+0x138/0x258 [ 356.254264][ C1] do_el0_svc+0x58/0x13c [ 356.255367][ C1] el0_svc+0x58/0x138 [ 356.256403][ C1] el0t_64_sync_handler+0x84/0xf0 [ 356.257711][ C1] el0t_64_sync+0x18c/0x190 [ 356.258955][ C1] SMP: stopping secondary CPUs [ 357.345939][ C1] SMP: failed to stop secondary CPUs 0-1 [ 357.347561][ C1] Kernel Offset: disabled [ 357.348747][ C1] CPU features: 0x080000,02070084,26017203 [ 357.350251][ C1] Memory Limit: none [ 357.366496][ C1] [ 357.367164][ C1] ================================ [ 357.368516][ C1] WARNING: inconsistent lock state [ 357.369900][ C1] 6.1.147-syzkaller #0 Tainted: G L [ 357.371647][ C1] -------------------------------- [ 357.373004][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 357.374875][ C1] syz.0.2680/12184 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 357.376574][ C1] ffff8000150f13d8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 357.379307][ C1] {HARDIRQ-ON-W} state was registered at: [ 357.380946][ C1] lock_acquire+0x20c/0x644 [ 357.382146][ C1] _raw_spin_lock+0x54/0x6c [ 357.383451][ C1] efi_call_rts+0x260/0x9f4 [ 357.384720][ C1] process_one_work+0x7f4/0x13a8 [ 357.386077][ C1] worker_thread+0x8c8/0xfbc [ 357.387317][ C1] kthread+0x250/0x2d8 [ 357.388437][ C1] ret_from_fork+0x10/0x20 [ 357.389616][ C1] irq event stamp: 4512 [ 357.390722][ C1] hardirqs last enabled at (4511): [] exit_to_kernel_mode+0xcc/0xfc [ 357.393299][ C1] hardirqs last disabled at (4512): [] el1_interrupt+0x24/0x54 [ 357.395799][ C1] softirqs last enabled at (368): [] handle_softirqs+0xaf8/0xc6c [ 357.398296][ C1] softirqs last disabled at (347): [] __do_softirq+0x14/0x20 [ 357.400759][ C1] [ 357.400759][ C1] other info that might help us debug this: [ 357.402969][ C1] Possible unsafe locking scenario: [ 357.402969][ C1] [ 357.404967][ C1] CPU0 [ 357.405834][ C1] ---- [ 357.406695][ C1] lock(efi_rt_lock); [ 357.407831][ C1] [ 357.408723][ C1] lock(efi_rt_lock); [ 357.409883][ C1] [ 357.409883][ C1] *** DEADLOCK *** [ 357.409883][ C1] [ 357.412056][ C1] 2 locks held by syz.0.2680/12184: [ 357.413377][ C1] #0: ffff800015286e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 357.415891][ C1] #1: ffff8000171528a8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x728 [ 357.418502][ C1] [ 357.418502][ C1] stack backtrace: [ 357.420054][ C1] CPU: 1 PID: 12184 Comm: syz.0.2680 Tainted: G L 6.1.147-syzkaller #0 [ 357.422762][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.425417][ C1] Call trace: [ 357.426273][ C1] dump_backtrace+0x1c8/0x1f4 [ 357.427515][ C1] show_stack+0x2c/0x3c [ 357.428673][ C1] __dump_stack+0x30/0x40 [ 357.429867][ C1] dump_stack_lvl+0xf8/0x160 [ 357.431065][ C1] dump_stack+0x1c/0x5c [ 357.432147][ C1] print_usage_bug+0x4c0/0x6d8 [ 357.433443][ C1] mark_lock_irq+0x788/0x9e4 [ 357.434651][ C1] mark_lock+0x224/0x320 [ 357.435882][ C1] __lock_acquire+0xd2c/0x6544 [ 357.437157][ C1] lock_acquire+0x20c/0x644 [ 357.438370][ C1] _raw_spin_lock+0x54/0x6c [ 357.439595][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 357.441281][ C1] efivar_set_variable_locked+0x1d0/0x204 [ 357.442796][ C1] efi_pstore_write+0x26c/0x358 [ 357.444184][ C1] pstore_dump+0x504/0x728 [ 357.445369][ C1] kmsg_dump+0x170/0x260 [ 357.446597][ C1] panic+0x36c/0x79c [ 357.447638][ C1] softlockup_fn+0x0/0x120 [ 357.448842][ C1] __hrtimer_run_queues+0x420/0xc64 [ 357.450314][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 357.451653][ C1] arch_timer_handler_virt+0x74/0x88 [ 357.453109][ C1] handle_percpu_devid_irq+0x174/0x34c [ 357.454574][ C1] generic_handle_domain_irq+0xe0/0x140 [ 357.456016][ C1] gic_handle_irq+0x70/0x1e4 [ 357.457261][ C1] call_on_irq_stack+0x24/0x30 [ 357.458600][ C1] do_interrupt_handler+0xd4/0x138 [ 357.459949][ C1] el1_interrupt+0x34/0x54 [ 357.461108][ C1] el1h_64_irq_handler+0x18/0x24 [ 357.462506][ C1] el1h_64_irq+0x64/0x68 [ 357.463592][ C1] smp_call_function_many_cond+0x1384/0x1460 [ 357.465210][ C1] kick_all_cpus_sync+0x40/0xa0 [ 357.466496][ C1] bpf_int_jit_compile+0x940/0x104c [ 357.467892][ C1] bpf_prog_select_runtime+0x3cc/0x69c [ 357.469366][ C1] bpf_prepare_filter+0xd58/0xeb4 [ 357.470833][ C1] bpf_prog_create_from_user+0x2d0/0x46c [ 357.472321][ C1] do_seccomp+0x910/0xe80 [ 357.473522][ C1] prctl_set_seccomp+0x60/0x7c [ 357.474820][ C1] __arm64_sys_prctl+0x4dc/0xfd8 [ 357.476119][ C1] invoke_syscall+0x98/0x2bc [ 357.477379][ C1] el0_svc_common+0x138/0x258 [ 357.478625][ C1] do_el0_svc+0x58/0x13c [ 357.479729][ C1] el0_svc+0x58/0x138 [ 357.480869][ C1] el0t_64_sync_handler+0x84/0xf0 [ 357.482195][ C1] el0t_64_sync+0x18c/0x190 [ 357.844006][ C1] Rebooting in 86400 seconds..