last executing test programs: 8.185109994s ago: executing program 4 (id=581): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1205531, &(0x7f0000002680)=""/4104) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) 6.055917935s ago: executing program 4 (id=589): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0xd0, 0x401, 0x1200, 0xe, 0x2}) close(r0) 5.154846481s ago: executing program 1 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.880452308s ago: executing program 1 (id=594): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.864760636s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10}}, 0xb4}}, 0x20000080) 3.86444542s ago: executing program 2 (id=599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1205531, &(0x7f0000002680)=""/4104) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) 3.86409554s ago: executing program 4 (id=601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@mpls_newroute={0x30, 0x18, 0x601, 0xffffffff, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1f, "b0b8b777cab1404e5d94e95497b8"}}]}, 0x30}}, 0x0) 3.78368518s ago: executing program 0 (id=602): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.675076953s ago: executing program 3 (id=603): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @address_request}}}}, 0x0) 3.614720887s ago: executing program 4 (id=604): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 3.562472606s ago: executing program 1 (id=605): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 3.513220439s ago: executing program 4 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.85933423s ago: executing program 0 (id=607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe2}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x20002, 0xfffffffa, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x1019, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x1, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0xa, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0xe, 0x81, 0xff, 0x2, 0xe6b, 0x80000000, 0xa, 0x8d4c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0xa, 0x44, 0x1, 0x0, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x101, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x6, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x3, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x3, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x202, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x8, 0xfff8, 0xfff}, 0x6, 0x9}}]}]}}]}, 0x478}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x78) 2.812436938s ago: executing program 3 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0xa, "33d32db69bea49d6c96c91571ef7f7"}, 0x11, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.797397485s ago: executing program 2 (id=609): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) sendmmsg(r0, 0x0, 0x0, 0x0) 2.795538701s ago: executing program 1 (id=610): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.774773624s ago: executing program 3 (id=611): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000003c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfffffeb6, 0x24000011, 0x0, 0x0) shutdown(r0, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x2002) 1.661417218s ago: executing program 0 (id=612): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.65975589s ago: executing program 2 (id=613): socket(0x2a, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r0, 0x64fce33ba3dcdc5d, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x18, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @measure_req={0x26, 0x3, {0x2, 0x9, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x14) 1.414020389s ago: executing program 3 (id=614): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xce22, 0x0, @empty, 0x1ff}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r1, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/133, 0x85}], 0x1, 0x1f0, 0x0) 1.31869919s ago: executing program 2 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10}}, 0xb4}}, 0x20000080) 1.318089882s ago: executing program 0 (id=616): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.10109943s ago: executing program 2 (id=617): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe}}]}, 0x38}}, 0x4000) 992.296224ms ago: executing program 0 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="040000000000000000002e"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 979.78241ms ago: executing program 1 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 946.35587ms ago: executing program 3 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400020020010000"], 0x48}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) 117.523932ms ago: executing program 2 (id=621): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000000000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b000000000057d6193a4928153721b6a9182675dc8bbb5aac1ba29f859df962fc7da209cb4183fc8ea345a7637767fb5086404a96687d20a5181a4546f9bee3ad721e4a03f4a18c5889f8056bf9c9ff60c250d50f3e2dd84d566d5022ffcb9c0963093bbb79e79c0c0574b0b257174ce7ce516c9104b3c44410fae547"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 56.391678ms ago: executing program 4 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r5, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x4000, 0x1005}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}]}, 0x3c}}, 0x0) 34.517403ms ago: executing program 0 (id=623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe2}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x20002, 0xfffffffa, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x1019, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x1, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0xa, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0xe, 0x81, 0xff, 0x2, 0xe6b, 0x80000000, 0xa, 0x8d4c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0xa, 0x44, 0x1, 0x0, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x101, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x6, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x3, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x3, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x202, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x8, 0xfff8, 0xfff}, 0x6, 0x9}}]}]}}]}, 0x478}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x78) 0s ago: executing program 3 (id=624): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0x10002, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfffffdaa, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 64.585549][ T5806] cgroup: Unknown subsys name 'net' [ 64.690974][ T5806] cgroup: Unknown subsys name 'cpuset' [ 64.699426][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.923015][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.259037][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.274215][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.282673][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.291097][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.299405][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.307484][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.315581][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.323374][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.328887][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.345416][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.353732][ T5823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.361150][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.369570][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.371297][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.387004][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.387648][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.408712][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.414745][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.425020][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.434283][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.441763][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.447026][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.450304][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.468533][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.476735][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.477712][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.484493][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.492777][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.508856][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.517000][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.909681][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 68.936765][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 69.049630][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 69.066177][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.150923][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.158233][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.165643][ T5816] bridge_slave_0: entered allmulticast mode [ 69.172961][ T5816] bridge_slave_0: entered promiscuous mode [ 69.189059][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.196175][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.203639][ T5832] bridge_slave_0: entered allmulticast mode [ 69.210645][ T5832] bridge_slave_0: entered promiscuous mode [ 69.226518][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.235992][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.243543][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.251009][ T5816] bridge_slave_1: entered allmulticast mode [ 69.257576][ T5816] bridge_slave_1: entered promiscuous mode [ 69.273292][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.280507][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.287642][ T5832] bridge_slave_1: entered allmulticast mode [ 69.295142][ T5832] bridge_slave_1: entered promiscuous mode [ 69.353825][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.405342][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.432644][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.440142][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.447282][ T5820] bridge_slave_0: entered allmulticast mode [ 69.454321][ T5820] bridge_slave_0: entered promiscuous mode [ 69.469568][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.481667][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.502297][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.509581][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.516715][ T5820] bridge_slave_1: entered allmulticast mode [ 69.524113][ T5820] bridge_slave_1: entered promiscuous mode [ 69.545109][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.552437][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.560113][ T5824] bridge_slave_0: entered allmulticast mode [ 69.566672][ T5824] bridge_slave_0: entered promiscuous mode [ 69.596659][ T5816] team0: Port device team_slave_0 added [ 69.613593][ T5832] team0: Port device team_slave_0 added [ 69.621346][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.629061][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.636250][ T5824] bridge_slave_1: entered allmulticast mode [ 69.643052][ T5824] bridge_slave_1: entered promiscuous mode [ 69.674390][ T5816] team0: Port device team_slave_1 added [ 69.691216][ T5832] team0: Port device team_slave_1 added [ 69.705534][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.712936][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.720505][ T5826] bridge_slave_0: entered allmulticast mode [ 69.727121][ T5826] bridge_slave_0: entered promiscuous mode [ 69.736432][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.748263][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.766526][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.773645][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.799687][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.820904][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.832507][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.843182][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.850381][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.857504][ T5826] bridge_slave_1: entered allmulticast mode [ 69.864294][ T5826] bridge_slave_1: entered promiscuous mode [ 69.877274][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.884457][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.910665][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.965319][ T5820] team0: Port device team_slave_0 added [ 69.974119][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.981494][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.008378][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.020524][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.027583][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.053951][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.087828][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.099203][ T5820] team0: Port device team_slave_1 added [ 70.122679][ T5824] team0: Port device team_slave_0 added [ 70.130340][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.164545][ T5816] hsr_slave_0: entered promiscuous mode [ 70.173121][ T5816] hsr_slave_1: entered promiscuous mode [ 70.181643][ T5824] team0: Port device team_slave_1 added [ 70.196711][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.203871][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.230290][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.243320][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.253148][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.279620][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.344787][ T5826] team0: Port device team_slave_0 added [ 70.352791][ T5826] team0: Port device team_slave_1 added [ 70.363494][ T5832] hsr_slave_0: entered promiscuous mode [ 70.370467][ T5832] hsr_slave_1: entered promiscuous mode [ 70.376508][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.384506][ T5832] Cannot create hsr debugfs directory [ 70.390685][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.397642][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.424288][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.434847][ T5833] Bluetooth: hci1: command tx timeout [ 70.442261][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.449371][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.475460][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.486695][ T5833] Bluetooth: hci0: command tx timeout [ 70.493582][ T5833] Bluetooth: hci3: command tx timeout [ 70.545043][ T5820] hsr_slave_0: entered promiscuous mode [ 70.552121][ T5820] hsr_slave_1: entered promiscuous mode [ 70.558402][ T5833] Bluetooth: hci2: command tx timeout [ 70.558411][ T5823] Bluetooth: hci4: command tx timeout [ 70.569783][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.577359][ T5820] Cannot create hsr debugfs directory [ 70.592065][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.599166][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.625256][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.671338][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.678512][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.704991][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.724183][ T5824] hsr_slave_0: entered promiscuous mode [ 70.730535][ T5824] hsr_slave_1: entered promiscuous mode [ 70.736583][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.747900][ T5824] Cannot create hsr debugfs directory [ 70.893159][ T5826] hsr_slave_0: entered promiscuous mode [ 70.899771][ T5826] hsr_slave_1: entered promiscuous mode [ 70.905783][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.913482][ T5826] Cannot create hsr debugfs directory [ 71.090686][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.126870][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.149232][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.165006][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.193642][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.212275][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.227246][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.244994][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.265557][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.299526][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.310312][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.340257][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.366378][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.377413][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.387260][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.406825][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.471168][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.496977][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.525360][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.546354][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.572737][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.611189][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.656302][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.663893][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.673810][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.680975][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.703140][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.729760][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.762596][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.769539][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.810211][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.827569][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.836591][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.867978][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.876428][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.883603][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.895076][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.902307][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.920888][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.936763][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.944036][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.955779][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.962897][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.992260][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.999457][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.031152][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.038314][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.059491][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.103364][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.110544][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.145809][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.152984][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.192910][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.221378][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.277101][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.406235][ T5832] veth0_vlan: entered promiscuous mode [ 72.462513][ T5832] veth1_vlan: entered promiscuous mode [ 72.478612][ T5833] Bluetooth: hci1: command tx timeout [ 72.558619][ T5833] Bluetooth: hci3: command tx timeout [ 72.559145][ T5823] Bluetooth: hci0: command tx timeout [ 72.580203][ T5832] veth0_macvtap: entered promiscuous mode [ 72.607736][ T5832] veth1_macvtap: entered promiscuous mode [ 72.637246][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.644977][ T5823] Bluetooth: hci4: command tx timeout [ 72.648912][ T5833] Bluetooth: hci2: command tx timeout [ 72.661809][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.691392][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.705893][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.716659][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.726404][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.735703][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.765203][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.806806][ T5824] veth0_vlan: entered promiscuous mode [ 72.830244][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.847072][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.903225][ T5824] veth1_vlan: entered promiscuous mode [ 72.986093][ T5820] veth0_vlan: entered promiscuous mode [ 73.008787][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.017681][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.064611][ T5824] veth0_macvtap: entered promiscuous mode [ 73.093083][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.094132][ T5824] veth1_macvtap: entered promiscuous mode [ 73.107173][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.144992][ T5820] veth1_vlan: entered promiscuous mode [ 73.154407][ T5816] veth0_vlan: entered promiscuous mode [ 73.196889][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.212710][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.228743][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.241262][ T5816] veth1_vlan: entered promiscuous mode [ 73.257715][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.288458][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.308643][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.325096][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.410266][ T5820] veth0_macvtap: entered promiscuous mode [ 73.422760][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.431957][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.459956][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.470113][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.496039][ T5820] veth1_macvtap: entered promiscuous mode [ 73.526072][ T5826] veth0_vlan: entered promiscuous mode [ 73.540453][ T5816] veth0_macvtap: entered promiscuous mode [ 73.551235][ T5901] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 73.556822][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.571104][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.582110][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.593276][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.629302][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.643555][ T5826] veth1_vlan: entered promiscuous mode [ 73.658372][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.674299][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.675463][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 73.685210][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.704279][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.715286][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.733735][ T5816] veth1_macvtap: entered promiscuous mode [ 73.746379][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.757512][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.791586][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.811798][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.897473][ T5826] veth0_macvtap: entered promiscuous mode [ 73.926058][ T5826] veth1_macvtap: entered promiscuous mode [ 73.937281][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.949628][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.960868][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.972816][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.983565][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.994354][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.010792][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.062112][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.075746][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.087269][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.100624][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.110872][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.122299][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.133503][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.145193][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.150561][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.164622][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.175135][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.176770][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.193550][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.203745][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.214768][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.224654][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.235221][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.247338][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.272942][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.281989][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.291046][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.300149][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.321308][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.344165][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.355489][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.363741][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.374219][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.385714][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.395957][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.407565][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.417637][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.429203][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.440127][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.470170][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.479555][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489367][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.498389][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.510249][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.525971][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.540929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.554684][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.563071][ T5833] Bluetooth: hci1: command tx timeout [ 74.609581][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.617485][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.639022][ T5833] Bluetooth: hci3: command tx timeout [ 74.639397][ T5823] Bluetooth: hci0: command tx timeout [ 74.693696][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.701673][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.718829][ T5823] Bluetooth: hci2: command tx timeout [ 74.720850][ T5833] Bluetooth: hci4: command tx timeout [ 74.818952][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.826840][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.885117][ T5913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.969204][ T5913] Zero length message leads to an empty skb [ 75.035001][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.053407][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.567865][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.982992][ T5833] Bluetooth: hci1: command tx timeout [ 76.989197][ T5833] Bluetooth: hci3: command tx timeout [ 76.994691][ T5833] Bluetooth: hci0: command tx timeout [ 77.000199][ T5833] Bluetooth: hci2: command tx timeout [ 77.005621][ T5833] Bluetooth: hci4: command tx timeout [ 77.233482][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.523049][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.534086][ T5941] bond0: (slave rose0): Enslaving as an active interface with an up link [ 79.858693][ T5987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.658364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.688613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.911007][ T6047] snd_dummy snd_dummy.0: control 0:0:4096:syz1:1 is already present [ 82.031405][ T2047] cfg80211: failed to load regulatory.db [ 83.246605][ T5914] Set syz1 is full, maxelem 65536 reached [ 83.398588][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 83.768725][ T6092] snd_dummy snd_dummy.0: control 0:0:4096:syz1:1 is already present [ 85.508554][ T5835] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 86.267297][ T5835] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 86.326499][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.372216][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 86.441131][ T5835] usb 4-1: config 0 has no interface number 0 [ 86.448619][ T5835] usb 4-1: config 0 interface 95 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.459500][ T5835] usb 4-1: config 0 interface 95 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 11 [ 86.472636][ T5835] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0081, bcdDevice=32.ef [ 86.484502][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.499513][ T5835] usb 4-1: config 0 descriptor?? [ 86.740941][ T5835] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 86.755314][ T5835] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 86.770648][ T5835] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 86.780543][ T5835] usb 4-1: media controller created [ 86.788673][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.978147][ T5835] DVB: Unable to find symbol dib7000p_attach() [ 86.984487][ T5835] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 87.019786][ T5835] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 87.058257][ T5835] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 87.088602][ T6175] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.103709][ T6175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.105102][ T5835] usb 4-1: media controller created [ 87.237623][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.72'. [ 87.255766][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.474047][ T5835] DVB: Unable to find symbol dib7000p_attach() [ 87.487273][ T5835] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 88.417824][ T5835] rc_core: IR keymap rc-dib0700-rc5 not found [ 88.424016][ T5835] Registered IR keymap rc-empty [ 88.429413][ T5835] dvb-usb: could not initialize remote control. [ 88.435844][ T5835] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 88.588687][ T5835] usb 4-1: USB disconnect, device number 2 [ 88.686655][ T6212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.83'. [ 88.759969][ T6215] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.824094][ T6215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.022289][ T5835] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 89.166682][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 89.579038][ T5835] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.969990][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 89.981820][ T5835] usb 4-1: config 0 has no interfaces? [ 89.989577][ T5835] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.018777][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.049061][ T5835] usb 4-1: config 0 descriptor?? [ 90.212418][ T6277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.247734][ T6279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.96'. [ 90.270153][ T29] audit: type=1326 audit(1735180240.244:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6223 comm="syz.3.85" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e17d85d29 code=0x0 [ 90.315677][ T5835] usb 4-1: USB disconnect, device number 3 [ 91.206147][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 91.647866][ T6331] netlink: 44 bytes leftover after parsing attributes in process `syz.1.113'. [ 93.591843][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 95.448174][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.468895][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.658251][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 95.665666][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.703073][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.767098][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.105462][ T5835] usb 2-1: config 1 interface 0 altsetting 45 bulk endpoint 0x82 has invalid maxpacket 1023 [ 96.166936][ T5835] usb 2-1: config 1 interface 0 altsetting 45 bulk endpoint 0x3 has invalid maxpacket 1023 [ 96.417051][ T5835] usb 2-1: config 1 interface 0 has no altsetting 0 [ 96.482790][ T5891] usb 3-1: Product: syz [ 96.487010][ T5891] usb 3-1: Manufacturer: syz [ 96.491761][ T5891] usb 3-1: SerialNumber: syz [ 96.507310][ T5891] usb 3-1: config 0 descriptor?? [ 96.516393][ T5891] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.526187][ T5891] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 97.779305][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 97.862994][ T5835] usb 2-1: string descriptor 0 read error: -71 [ 97.900461][ T5835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.983969][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.063417][ T5835] usb 2-1: can't set config #1, error -71 [ 98.098343][ T5835] usb 2-1: USB disconnect, device number 2 [ 98.154382][ T5891] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.948085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.018875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.118074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.168053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.178115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.358076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.408038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.627525][ T5891] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 100.637572][ T5891] em28xx 3-1:0.0: board has no eeprom [ 100.812053][ T5891] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 100.826291][ T5891] em28xx 3-1:0.0: dvb set to bulk mode. [ 100.854141][ T95] em28xx 3-1:0.0: Binding DVB extension [ 100.876932][ T5891] usb 3-1: USB disconnect, device number 2 [ 100.899281][ T5891] em28xx 3-1:0.0: Disconnecting em28xx [ 100.944670][ T95] em28xx 3-1:0.0: Registering input extension [ 100.952928][ T5891] em28xx 3-1:0.0: Closing input extension [ 100.976568][ T5891] em28xx 3-1:0.0: Freeing device [ 102.599546][ T6514] netlink: 341 bytes leftover after parsing attributes in process `syz.1.164'. [ 102.727109][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'. [ 102.977037][ T6521] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 104.886623][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.048142][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 105.065627][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 105.081496][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.107543][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.116229][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.139247][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.148798][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.157109][ T5869] usb 1-1: Product: syz [ 105.161586][ T5869] usb 1-1: Manufacturer: syz [ 105.166208][ T5869] usb 1-1: SerialNumber: syz [ 105.175974][ T5869] usb 1-1: config 0 descriptor?? [ 105.191722][ T5869] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.201329][ T5869] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 105.591770][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.652023][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 105.687583][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.695142][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 105.840297][ T5869] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 105.864069][ T5869] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 105.993075][ T6547] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.005286][ T6547] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.020909][ T6547] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.035887][ T6547] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.476124][ T5869] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 106.485752][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 106.503895][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 106.528376][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 106.544273][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 106.568671][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 106.570769][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 107.261404][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 20 [ 107.268832][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 16 [ 107.276319][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 12 [ 107.317850][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 14 [ 107.384468][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 18 [ 107.428779][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 22 [ 107.435582][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 24 [ 107.454545][ T5869] em28xx 1-1:0.0: Binding audio extension [ 107.464882][ T5869] em28xx 1-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 107.504840][ T5869] em28xx 1-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 107.557017][ T5869] em28xx 1-1:0.0: alt 0 doesn't exist on interface 7 [ 107.618954][ T5869] usb 1-1: USB disconnect, device number 2 [ 107.708193][ T5869] em28xx 1-1:0.0: Disconnecting em28xx [ 107.726888][ T5869] em28xx 1-1:0.0: Closing audio extension [ 107.747314][ T5869] em28xx 1-1:0.0: Freeing device [ 108.015264][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.022956][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.143827][ T6604] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.017333][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.075557][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.094441][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 109.372429][ T6529] Set syz1 is full, maxelem 65536 reached [ 109.379240][ T6599] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.388752][ T6599] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.397744][ T6599] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.439569][ T6599] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.523016][ T6634] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 109.771744][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 110.604956][ T6661] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 110.819412][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 111.268371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.731504][ T6702] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 114.133892][ T6712] block nbd1: shutting down sockets [ 115.434023][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 115.521439][ T6745] openvswitch: netlink: Message has 8 unknown bytes. [ 115.786924][ T6739] Set syz1 is full, maxelem 65536 reached [ 116.821390][ T6773] openvswitch: netlink: Message has 8 unknown bytes. [ 117.692500][ T6783] Set syz1 is full, maxelem 65536 reached [ 118.965958][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 119.572170][ T6823] openvswitch: netlink: Message has 8 unknown bytes. [ 120.828869][ T6825] block device autoloading is deprecated and will be removed. [ 120.904129][ T6817] syz.3.271: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.977382][ T6832] syz.0.275: attempt to access beyond end of device [ 120.977382][ T6832] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 121.008751][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.3.271 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 121.019398][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.029463][ T6817] Call Trace: [ 121.032755][ T6817] [ 121.035686][ T6817] dump_stack_lvl+0x241/0x360 [ 121.040389][ T6817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.045585][ T6817] ? __pfx__printk+0x10/0x10 [ 121.050185][ T6817] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 121.056608][ T6817] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 121.063114][ T6817] warn_alloc+0x278/0x410 [ 121.067447][ T6817] ? __pfx_warn_alloc+0x10/0x10 [ 121.072305][ T6817] ? hash_netiface_create+0x356/0x1040 [ 121.077762][ T6817] ? __get_vm_area_node+0x1c8/0x2d0 [ 121.082966][ T6817] ? __get_vm_area_node+0x25c/0x2d0 [ 121.088175][ T6817] __vmalloc_node_range_noprof+0x62f/0x1380 [ 121.094126][ T6817] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.100482][ T6817] ? hash_netiface_create+0x356/0x1040 [ 121.105954][ T6817] ? __get_vm_area_node+0x1c8/0x2d0 [ 121.111157][ T6817] ? __get_vm_area_node+0x25c/0x2d0 [ 121.116372][ T6817] __vmalloc_node_range_noprof+0x53a/0x1380 [ 121.122292][ T6817] ? hash_netiface_create+0x356/0x1040 [ 121.127757][ T6817] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 121.133497][ T6817] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.139827][ T6817] ? rcu_is_watching+0x15/0xb0 [ 121.144607][ T6817] ? trace_kmalloc+0x1f/0xd0 [ 121.149193][ T6817] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 121.154676][ T6817] ? __kvmalloc_node_noprof+0x72/0x190 [ 121.160172][ T6817] __kvmalloc_node_noprof+0x142/0x190 [ 121.165562][ T6817] ? hash_netiface_create+0x356/0x1040 [ 121.171028][ T6817] hash_netiface_create+0x356/0x1040 [ 121.176354][ T6817] ? __pfx_hash_netiface_create+0x10/0x10 [ 121.182076][ T6817] ip_set_create+0xa31/0x18b0 [ 121.186753][ T6817] ? ip_set_create+0x424/0x18b0 [ 121.191634][ T6817] ? __pfx_ip_set_create+0x10/0x10 [ 121.196785][ T6817] ? nfnetlink_rcv_msg+0x225/0x1180 [ 121.202002][ T6817] nfnetlink_rcv_msg+0xbec/0x1180 [ 121.207037][ T6817] ? nfnetlink_rcv_msg+0x225/0x1180 [ 121.212277][ T6817] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 121.217776][ T6817] netlink_rcv_skb+0x1e3/0x430 [ 121.222553][ T6817] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 121.228022][ T6817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.233369][ T6817] ? cap_capable+0x1b4/0x250 [ 121.237960][ T6817] ? safesetid_security_capable+0xb2/0x1d0 [ 121.243768][ T6817] ? bpf_lsm_capable+0x9/0x10 [ 121.248446][ T6817] ? security_capable+0x7e/0x2d0 [ 121.253397][ T6817] nfnetlink_rcv+0x297/0x2ab0 [ 121.258107][ T6817] ? __pfx_validate_chain+0x10/0x10 [ 121.263316][ T6817] ? mark_lock+0x9a/0x360 [ 121.267643][ T6817] ? __pfx_validate_chain+0x10/0x10 [ 121.272845][ T6817] ? __lock_acquire+0x1397/0x2100 [ 121.277873][ T6817] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 121.282991][ T6817] ? mark_lock+0x9a/0x360 [ 121.287324][ T6817] ? __lock_acquire+0x1397/0x2100 [ 121.292368][ T6817] ? __pfx_lock_release+0x10/0x10 [ 121.297422][ T6817] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.302642][ T6817] ? __pfx_lock_release+0x10/0x10 [ 121.307684][ T6817] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.312886][ T6817] netlink_unicast+0x7f6/0x990 [ 121.317692][ T6817] ? __pfx_netlink_unicast+0x10/0x10 [ 121.322986][ T6817] ? __virt_addr_valid+0x45f/0x530 [ 121.328103][ T6817] ? __phys_addr_symbol+0x2f/0x70 [ 121.333129][ T6817] ? __check_object_size+0x47a/0x730 [ 121.338418][ T6817] netlink_sendmsg+0x8e4/0xcb0 [ 121.343196][ T6817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.348489][ T6817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.353772][ T6817] __sock_sendmsg+0x221/0x270 [ 121.358460][ T6817] ____sys_sendmsg+0x52a/0x7e0 [ 121.363230][ T6817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.368599][ T6817] ? __fget_files+0x2a/0x410 [ 121.373192][ T6817] ? __fget_files+0x2a/0x410 [ 121.377792][ T6817] __sys_sendmsg+0x269/0x350 [ 121.382390][ T6817] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.387544][ T6817] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.393870][ T6817] ? do_syscall_64+0x100/0x230 [ 121.398645][ T6817] ? do_syscall_64+0xb6/0x230 [ 121.403328][ T6817] do_syscall_64+0xf3/0x230 [ 121.407832][ T6817] ? clear_bhb_loop+0x35/0x90 [ 121.412507][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.418414][ T6817] RIP: 0033:0x7f6e17d85d29 [ 121.422839][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.442540][ T6817] RSP: 002b:00007f6e18c65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.450957][ T6817] RAX: ffffffffffffffda RBX: 00007f6e17f75fa0 RCX: 00007f6e17d85d29 [ 121.458927][ T6817] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 121.466897][ T6817] RBP: 00007f6e17e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 121.474867][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.482834][ T6817] R13: 0000000000000000 R14: 00007f6e17f75fa0 R15: 00007ffce819b688 [ 121.490816][ T6817] [ 121.587796][ T6817] Mem-Info: [ 121.605332][ T6817] active_anon:348 inactive_anon:4759 isolated_anon:0 [ 121.605332][ T6817] active_file:4326 inactive_file:35305 isolated_file:0 [ 121.605332][ T6817] unevictable:768 dirty:190 writeback:0 [ 121.605332][ T6817] slab_reclaimable:9773 slab_unreclaimable:101758 [ 121.605332][ T6817] mapped:29067 shmem:1434 pagetables:874 [ 121.605332][ T6817] sec_pagetables:0 bounce:0 [ 121.605332][ T6817] kernel_misc_reclaimable:0 [ 121.605332][ T6817] free:1309713 free_pcp:1360 free_cma:0 [ 121.783556][ T6817] Node 0 active_anon:1392kB inactive_anon:23636kB active_file:17228kB inactive_file:141220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120968kB dirty:760kB writeback:0kB shmem:8800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:3396kB sec_pagetables:0kB all_unreclaimable? no [ 121.880597][ T6817] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 121.961782][ T6817] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.091031][ T6817] lowmem_reserve[]: 0 2465 2466 0 0 [ 122.257732][ T6817] Node 0 DMA32 free:1305844kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1388kB inactive_anon:30504kB active_file:16436kB inactive_file:141168kB unevictable:1536kB writepending:760kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:1788kB local_pcp:768kB free_cma:0kB [ 122.583269][ T6817] lowmem_reserve[]: 0 0 0 0 0 [ 122.594545][ T6817] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.703004][ T6817] lowmem_reserve[]: 0 0 0 0 0 [ 122.728399][ T6817] Node 1 Normal free:3909112kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.761840][ T6817] lowmem_reserve[]: 0 0 0 0 0 [ 122.766869][ T6817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.798469][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 122.812602][ T6817] Node 0 DMA32: 0*4kB 2*8kB (ME) 5*16kB (UME) 18*32kB (UE) 8*64kB (UE) 8*128kB (M) 23*256kB (UME) 24*512kB (UME) 4*1024kB (M) 9*2048kB (UM) 308*4096kB (UM) = 1304480kB [ 122.832107][ T6817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.847290][ T6817] Node 1 Normal: 206*4kB (UME) 56*8kB (UME) 46*16kB (UME) 191*32kB (UME) 93*64kB (UME) 36*128kB (UME) 17*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3909112kB [ 122.875129][ T6817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.885919][ T6817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.896015][ T6817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.913566][ T6817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.923973][ T6817] 41091 total pagecache pages [ 122.929560][ T6817] 1 pages in swap cache [ 122.936629][ T6817] Free swap = 124460kB [ 122.945415][ T6817] Total swap = 124996kB [ 122.952108][ T6817] 2097051 pages RAM [ 122.957138][ T6817] 0 pages HighMem/MovableOnly [ 122.962869][ T6817] 427006 pages reserved [ 122.967173][ T6817] 0 pages cma reserved [ 125.258234][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 125.947911][ T6834] Set syz1 is full, maxelem 65536 reached [ 128.795429][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 129.836628][ T6962] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 129.845204][ T6962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.680436][ T7006] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 131.700565][ T7005] geneve2: entered promiscuous mode [ 132.512000][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 133.415787][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.428096][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.808429][ T95] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 133.970113][ T95] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 133.986551][ T95] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.097001][ T95] usb 4-1: config 0 descriptor?? [ 134.346389][ T7069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.878573][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 136.105365][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 136.447387][ T95] pegasus 4-1:0.0: can't reset MAC [ 136.568269][ T95] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 136.607515][ T95] usb 4-1: USB disconnect, device number 4 [ 137.643773][ T7132] process 'syz.4.371' launched './file0' with NULL argv: empty string added [ 137.903555][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 137.974308][ T7143] xt_connbytes: Forcing CT accounting to be enabled [ 137.981516][ T7143] Cannot find add_set index 0 as target [ 138.844148][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 138.899981][ T7153] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 139.001249][ T95] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.177866][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 139.187935][ T95] usb 5-1: Using ep0 maxpacket: 16 [ 139.384398][ T95] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.400444][ T95] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 139.413669][ T95] usb 5-1: can't read configurations, error -71 [ 141.118826][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 143.651783][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 144.333289][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 144.588178][ T95] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.678906][ T2047] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.798159][ T95] usb 5-1: Using ep0 maxpacket: 8 [ 144.806111][ T95] usb 5-1: config 0 has an invalid interface number: 208 but max is 0 [ 144.820881][ T95] usb 5-1: config 0 has no interface number 0 [ 144.842015][ T95] usb 5-1: config 0 interface 208 altsetting 13 endpoint 0x3 has invalid maxpacket 55697, setting to 64 [ 144.859831][ T2047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.868234][ T95] usb 5-1: config 0 interface 208 has no altsetting 0 [ 144.883481][ T2047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.897542][ T95] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 144.905398][ T2047] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.920994][ T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.931207][ T2047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.938505][ T95] usb 5-1: Product: syz [ 144.943392][ T95] usb 5-1: Manufacturer: syz [ 144.972669][ T95] usb 5-1: SerialNumber: syz [ 145.043036][ T95] usb 5-1: config 0 descriptor?? [ 145.714032][ T2047] usb 3-1: config 0 descriptor?? [ 145.786367][ T7239] warn_alloc: 3 callbacks suppressed [ 145.786385][ T7239] syz.0.401: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.901408][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.0.401 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 145.912159][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.922242][ T7239] Call Trace: [ 145.925557][ T7239] [ 145.928513][ T7239] dump_stack_lvl+0x241/0x360 [ 145.933221][ T7239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.938448][ T7239] ? __pfx__printk+0x10/0x10 [ 145.943061][ T7239] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 145.949508][ T7239] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 145.956052][ T7239] warn_alloc+0x278/0x410 [ 145.960436][ T7239] ? __pfx_warn_alloc+0x10/0x10 [ 145.965329][ T7239] ? hash_netiface_create+0x356/0x1040 [ 145.970824][ T7239] ? __get_vm_area_node+0x1c8/0x2d0 [ 145.976053][ T7239] ? __get_vm_area_node+0x25c/0x2d0 [ 145.981287][ T7239] __vmalloc_node_range_noprof+0x62f/0x1380 [ 145.987247][ T7239] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.993608][ T7239] ? hash_netiface_create+0x356/0x1040 [ 145.999114][ T7239] ? __get_vm_area_node+0x1c8/0x2d0 [ 146.004344][ T7239] ? __get_vm_area_node+0x25c/0x2d0 [ 146.009564][ T7239] __vmalloc_node_range_noprof+0x53a/0x1380 [ 146.015470][ T7239] ? hash_netiface_create+0x356/0x1040 [ 146.020940][ T7239] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 146.026687][ T7239] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.033019][ T7239] ? rcu_is_watching+0x15/0xb0 [ 146.037793][ T7239] ? trace_kmalloc+0x1f/0xd0 [ 146.042382][ T7239] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 146.047882][ T7239] ? __kvmalloc_node_noprof+0x72/0x190 [ 146.053364][ T7239] __kvmalloc_node_noprof+0x142/0x190 [ 146.058737][ T7239] ? hash_netiface_create+0x356/0x1040 [ 146.064193][ T7239] hash_netiface_create+0x356/0x1040 [ 146.069493][ T7239] ? __pfx_hash_netiface_create+0x10/0x10 [ 146.075214][ T7239] ip_set_create+0xa31/0x18b0 [ 146.079893][ T7239] ? ip_set_create+0x424/0x18b0 [ 146.084750][ T7239] ? __pfx_ip_set_create+0x10/0x10 [ 146.089890][ T7239] ? nfnetlink_rcv_msg+0x225/0x1180 [ 146.095094][ T7239] nfnetlink_rcv_msg+0xbec/0x1180 [ 146.100123][ T7239] ? nfnetlink_rcv_msg+0x225/0x1180 [ 146.105347][ T7239] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 146.110806][ T7239] ? stack_trace_save+0x118/0x1d0 [ 146.115875][ T7239] ? dev_hard_start_xmit+0x27a/0x7d0 [ 146.121171][ T7239] ? __dev_queue_xmit+0x1b73/0x3f50 [ 146.126376][ T7239] ? __netlink_deliver_tap+0x56b/0x7f0 [ 146.131845][ T7239] ? netlink_deliver_tap+0x19d/0x1b0 [ 146.137135][ T7239] ? netlink_unicast+0x7c4/0x990 [ 146.142075][ T7239] ? netlink_sendmsg+0x8e4/0xcb0 [ 146.147014][ T7239] ? __sock_sendmsg+0x221/0x270 [ 146.151867][ T7239] ? ____sys_sendmsg+0x52a/0x7e0 [ 146.156801][ T7239] ? __sys_sendmsg+0x269/0x350 [ 146.161576][ T7239] netlink_rcv_skb+0x1e3/0x430 [ 146.166342][ T7239] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 146.171809][ T7239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.177107][ T7239] ? cap_capable+0x1b4/0x250 [ 146.181696][ T7239] ? safesetid_security_capable+0xb2/0x1d0 [ 146.187501][ T7239] ? bpf_lsm_capable+0x9/0x10 [ 146.192175][ T7239] ? security_capable+0x7e/0x2d0 [ 146.197122][ T7239] nfnetlink_rcv+0x297/0x2ab0 [ 146.201898][ T7239] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 146.207629][ T7239] ? __dev_queue_xmit+0x2f4/0x3f50 [ 146.212747][ T7239] ? __dev_queue_xmit+0x1775/0x3f50 [ 146.217954][ T7239] ? kasan_save_track+0x51/0x80 [ 146.222813][ T7239] ? ____sys_sendmsg+0x52a/0x7e0 [ 146.227755][ T7239] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 146.232866][ T7239] ? __dev_queue_xmit+0x2f4/0x3f50 [ 146.238004][ T7239] ? __pfx___dev_queue_xmit+0x10/0x10 [ 146.243398][ T7239] ? ref_tracker_free+0x643/0x7e0 [ 146.248447][ T7239] ? __asan_memcpy+0x40/0x70 [ 146.253050][ T7239] ? __pfx_ref_tracker_free+0x10/0x10 [ 146.258435][ T7239] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.263632][ T7239] ? skb_clone+0x240/0x390 [ 146.268051][ T7239] ? __pfx_lock_release+0x10/0x10 [ 146.273096][ T7239] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 146.278567][ T7239] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.283775][ T7239] netlink_unicast+0x7f6/0x990 [ 146.288551][ T7239] ? __pfx_netlink_unicast+0x10/0x10 [ 146.293845][ T7239] ? __virt_addr_valid+0x45f/0x530 [ 146.298967][ T7239] ? __phys_addr_symbol+0x2f/0x70 [ 146.304003][ T7239] ? __check_object_size+0x47a/0x730 [ 146.309306][ T7239] netlink_sendmsg+0x8e4/0xcb0 [ 146.314097][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.319400][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.324686][ T7239] __sock_sendmsg+0x221/0x270 [ 146.329379][ T7239] ____sys_sendmsg+0x52a/0x7e0 [ 146.334158][ T7239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.339443][ T7239] ? __fget_files+0x2a/0x410 [ 146.344046][ T7239] ? __fget_files+0x2a/0x410 [ 146.348644][ T7239] __sys_sendmsg+0x269/0x350 [ 146.353247][ T7239] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.358393][ T7239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.364726][ T7239] ? do_syscall_64+0x100/0x230 [ 146.369498][ T7239] ? do_syscall_64+0xb6/0x230 [ 146.374182][ T7239] do_syscall_64+0xf3/0x230 [ 146.378697][ T7239] ? clear_bhb_loop+0x35/0x90 [ 146.383375][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.389273][ T7239] RIP: 0033:0x7f65dc185d29 [ 146.393689][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.413303][ T7239] RSP: 002b:00007f65dcf91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.421735][ T7239] RAX: ffffffffffffffda RBX: 00007f65dc375fa0 RCX: 00007f65dc185d29 [ 146.429721][ T7239] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 146.437690][ T7239] RBP: 00007f65dc201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 146.445664][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.453649][ T7239] R13: 0000000000000000 R14: 00007f65dc375fa0 R15: 00007ffef74f7868 [ 146.461634][ T7239] [ 146.478495][ T7239] Mem-Info: [ 146.490643][ T7239] active_anon:354 inactive_anon:5044 isolated_anon:0 [ 146.490643][ T7239] active_file:4459 inactive_file:35218 isolated_file:0 [ 146.490643][ T7239] unevictable:768 dirty:127 writeback:0 [ 146.490643][ T7239] slab_reclaimable:10139 slab_unreclaimable:99517 [ 146.490643][ T7239] mapped:29644 shmem:1439 pagetables:740 [ 146.490643][ T7239] sec_pagetables:0 bounce:0 [ 146.490643][ T7239] kernel_misc_reclaimable:0 [ 146.490643][ T7239] free:1311085 free_pcp:1134 free_cma:0 [ 146.535931][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.564945][ T95] radioshark2 5-1:0.208: Invalid radioSHARK2 device [ 146.572268][ T95] radioshark2 5-1:0.208: probe with driver radioshark2 failed with error -22 [ 146.595948][ T95] usbhid 5-1:0.208: couldn't find an input interrupt endpoint [ 146.613539][ T7239] Node 0 active_anon:1416kB inactive_anon:14576kB active_file:17760kB inactive_file:140872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114476kB dirty:508kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10684kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 146.646141][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.662382][ T95] usb 5-1: USB disconnect, device number 4 [ 146.682372][ T7239] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 146.721892][ T7239] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.749072][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.762087][ T7239] lowmem_reserve[]: 0 2465 2466 0 0 [ 146.764415][ T2047] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 146.767490][ T7239] Node 0 DMA32 free:1320540kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1412kB inactive_anon:17344kB active_file:16968kB inactive_file:140820kB unevictable:1536kB writepending:508kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:7496kB local_pcp:404kB free_cma:0kB [ 146.795095][ T2047] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input7 [ 146.812271][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.819012][ T7239] lowmem_reserve[]: 0 0 0 0 0 [ 146.844419][ T7239] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.871384][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.886789][ T7239] lowmem_reserve[]: 0 0 0 0 0 [ 146.892090][ T7239] Node 1 Normal free:3909172kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 146.921045][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.934410][ T7239] lowmem_reserve[]: 0 0 0 0 0 [ 146.939821][ T7239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.967530][ T7239] Node 0 DMA32: 20*4kB (UM) 6*8kB (UME) 138*16kB (UME) 50*32kB (UME) 41*64kB (UME) 39*128kB (UME) 24*256kB (UME) 21*512kB (UME) 32*1024kB (UME) 9*2048kB (UME) 303*4096kB (M) = 1320736kB [ 146.995513][ T7239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 147.013447][ T7239] Node 1 Normal: 205*4kB (UME) 56*8kB (UME) 46*16kB (UME) 189*32kB (UME) 93*64kB (UME) 37*128kB (UME) 17*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3909172kB [ 147.014073][ T2047] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 147.032014][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.038437][ T7239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.068114][ T7239] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.077606][ T7239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.119271][ T7239] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.128079][ T2047] usb 3-1: USB disconnect, device number 3 [ 147.141132][ T7239] 43992 total pagecache pages [ 147.152426][ T7239] 1 pages in swap cache [ 147.160990][ T7239] Free swap = 124460kB [ 147.175107][ T7239] Total swap = 124996kB [ 147.191654][ T7239] 2097051 pages RAM [ 147.204575][ T7239] 0 pages HighMem/MovableOnly [ 147.215498][ T7239] 427006 pages reserved [ 147.226290][ T7239] 0 pages cma reserved [ 148.450502][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 150.638962][ T7331] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 150.638962][ T7331] program syz.2.427 not setting count and/or reply_len properly [ 151.288779][ T7333] syz_tun: entered allmulticast mode [ 151.295034][ T7332] syz_tun: left allmulticast mode [ 151.362727][ T7343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.432'. [ 151.869585][ T7351] Set syz1 is full, maxelem 65536 reached [ 152.681611][ T7369] syz_tun: entered allmulticast mode [ 152.695018][ T7368] syz_tun: left allmulticast mode [ 152.848178][ T7379] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 153.667368][ T7407] syz_tun: entered allmulticast mode [ 153.720327][ T7406] syz_tun: left allmulticast mode [ 153.878263][ T7412] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 154.040975][ T7387] Set syz1 is full, maxelem 65536 reached [ 154.414257][ T7432] syz_tun: entered allmulticast mode [ 154.438991][ T7430] syz_tun: left allmulticast mode [ 154.548711][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.855154][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 154.876937][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 155.177196][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.188352][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.198440][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.223072][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.248080][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.514577][ T9] usb 1-1: usb_control_msg returned -32 [ 155.533434][ T7447] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 155.545031][ T9] usbtmc 1-1:16.0: can't read capabilities [ 155.756615][ T7453] netlink: 'syz.4.474': attribute type 21 has an invalid length. [ 155.764797][ T7453] netlink: 156 bytes leftover after parsing attributes in process `syz.4.474'. [ 156.542483][ T7463] syz_tun: entered allmulticast mode [ 156.549476][ T7462] syz_tun: left allmulticast mode [ 157.623971][ T5891] usb 1-1: USB disconnect, device number 3 [ 158.017695][ T7482] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 159.169260][ T7493] syz_tun: entered allmulticast mode [ 159.188903][ T7492] syz_tun: left allmulticast mode [ 159.353710][ T7479] Set syz1 is full, maxelem 65536 reached [ 159.466042][ T7509] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 159.524687][ T7515] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 159.769564][ T7521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.505'. [ 160.050059][ T7528] syz_tun: entered allmulticast mode [ 160.369762][ T7543] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 160.415786][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 160.886427][ T2047] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.059304][ T2047] usb 1-1: Using ep0 maxpacket: 16 [ 161.082456][ T2047] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.108119][ T2047] usb 1-1: config 0 has no interfaces? [ 161.128126][ T2047] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.163553][ T2047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.199181][ T2047] usb 1-1: config 0 descriptor?? [ 161.251161][ T7540] Set syz1 is full, maxelem 65536 reached [ 161.502252][ T2047] usb 1-1: USB disconnect, device number 4 [ 161.636880][ T7564] syz_tun: entered allmulticast mode [ 162.689011][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 163.343863][ T7590] Set syz1 is full, maxelem 65536 reached [ 164.596788][ T7505] warn_alloc: 3 callbacks suppressed [ 164.596811][ T7505] syz.1.497: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.714938][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.1.497 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 164.725592][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.735679][ T7505] Call Trace: [ 164.738987][ T7505] [ 164.741946][ T7505] dump_stack_lvl+0x241/0x360 [ 164.746664][ T7505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.751919][ T7505] ? __pfx__printk+0x10/0x10 [ 164.756537][ T7505] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 164.762964][ T7505] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 164.769478][ T7505] warn_alloc+0x278/0x410 [ 164.773814][ T7505] ? __pfx_warn_alloc+0x10/0x10 [ 164.778669][ T7505] ? translate_table+0x174/0x2260 [ 164.783693][ T7505] ? __get_vm_area_node+0x1c8/0x2d0 [ 164.788892][ T7505] ? __get_vm_area_node+0x25c/0x2d0 [ 164.794094][ T7505] __vmalloc_node_range_noprof+0x62f/0x1380 [ 164.799988][ T7505] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 164.805730][ T7505] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.812061][ T7505] ? rcu_is_watching+0x15/0xb0 [ 164.816830][ T7505] ? trace_kmalloc+0x1f/0xd0 [ 164.821436][ T7505] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 164.826923][ T7505] ? __kvmalloc_node_noprof+0x72/0x190 [ 164.832417][ T7505] __kvmalloc_node_noprof+0x142/0x190 [ 164.837803][ T7505] ? translate_table+0x174/0x2260 [ 164.842846][ T7505] translate_table+0x174/0x2260 [ 164.847721][ T7505] ? __pfx_translate_table+0x10/0x10 [ 164.853010][ T7505] ? __might_fault+0xaa/0x120 [ 164.857686][ T7505] ? __pfx_lock_release+0x10/0x10 [ 164.862808][ T7505] ? __virt_addr_valid+0x183/0x530 [ 164.867918][ T7505] ? __might_fault+0xaa/0x120 [ 164.872595][ T7505] ? __might_fault+0xc6/0x120 [ 164.877269][ T7505] ? _copy_from_user+0x99/0xc0 [ 164.882034][ T7505] ? copy_from_sockptr_offset+0x6b/0xb0 [ 164.887581][ T7505] do_ipt_set_ctl+0xe3d/0x1250 [ 164.892349][ T7505] ? __pfx___mutex_trylock_common+0x10/0x10 [ 164.898244][ T7505] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 164.903439][ T7505] ? __pfx_lock_release+0x10/0x10 [ 164.908462][ T7505] ? rcu_is_watching+0x15/0xb0 [ 164.913315][ T7505] ? trace_contention_end+0x3c/0x120 [ 164.918614][ T7505] ? __mutex_unlock_slowpath+0x21e/0x790 [ 164.924259][ T7505] ? __pfx___mutex_lock+0x10/0x10 [ 164.929310][ T7505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.935315][ T7505] ? smc_setsockopt+0x1c3/0xe50 [ 164.940204][ T7505] ? __pfx___mutex_lock+0x10/0x10 [ 164.945245][ T7505] nf_setsockopt+0x295/0x2c0 [ 164.949855][ T7505] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 164.955768][ T7505] smc_setsockopt+0x275/0xe50 [ 164.960462][ T7505] ? __pfx_smc_setsockopt+0x10/0x10 [ 164.965666][ T7505] ? __fget_files+0x2a/0x410 [ 164.970257][ T7505] ? __pfx_smc_setsockopt+0x10/0x10 [ 164.975466][ T7505] do_sock_setsockopt+0x3af/0x720 [ 164.980493][ T7505] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 164.986066][ T7505] ? __fget_files+0x395/0x410 [ 164.990758][ T7505] ? __fget_files+0x2a/0x410 [ 164.995367][ T7505] __x64_sys_setsockopt+0x1ee/0x280 [ 165.000589][ T7505] do_syscall_64+0xf3/0x230 [ 165.005107][ T7505] ? clear_bhb_loop+0x35/0x90 [ 165.009786][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.015706][ T7505] RIP: 0033:0x7f912d185d29 [ 165.020147][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.039764][ T7505] RSP: 002b:00007f912e055038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.048189][ T7505] RAX: ffffffffffffffda RBX: 00007f912d375fa0 RCX: 00007f912d185d29 [ 165.056171][ T7505] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 165.064145][ T7505] RBP: 00007f912d201aa8 R08: 00000000000002a0 R09: 0000000000000000 [ 165.072116][ T7505] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000000 [ 165.080085][ T7505] R13: 0000000000000000 R14: 00007f912d375fa0 R15: 00007ffccaa250f8 [ 165.088068][ T7505] [ 165.143440][ T7505] Mem-Info: [ 165.157089][ T7505] active_anon:335 inactive_anon:5148 isolated_anon:0 [ 165.157089][ T7505] active_file:4483 inactive_file:35199 isolated_file:0 [ 165.157089][ T7505] unevictable:768 dirty:30 writeback:0 [ 165.157089][ T7505] slab_reclaimable:10307 slab_unreclaimable:100004 [ 165.157089][ T7505] mapped:28605 shmem:1415 pagetables:750 [ 165.157089][ T7505] sec_pagetables:0 bounce:0 [ 165.157089][ T7505] kernel_misc_reclaimable:0 [ 165.157089][ T7505] free:1326945 free_pcp:879 free_cma:0 [ 165.225346][ T7505] Node 0 active_anon:1340kB inactive_anon:21892kB active_file:17856kB inactive_file:140796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114520kB dirty:120kB writeback:0kB shmem:4124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:3000kB sec_pagetables:0kB all_unreclaimable? no [ 165.263932][ T7505] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 165.345365][ T7505] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.376488][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 165.421295][ T7505] lowmem_reserve[]: 0 2465 2466 0 0 [ 165.426621][ T7505] Node 0 DMA32 free:1381644kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1336kB inactive_anon:22960kB active_file:17064kB inactive_file:140744kB unevictable:1536kB writepending:120kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:2340kB local_pcp:1404kB free_cma:0kB [ 165.571936][ T7505] lowmem_reserve[]: 0 0 0 0 0 [ 165.576732][ T7505] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.613957][ T7505] lowmem_reserve[]: 0 0 0 0 0 [ 165.620203][ T7505] Node 1 Normal free:3909204kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 165.649326][ T7505] lowmem_reserve[]: 0 0 0 0 0 [ 165.654095][ T7505] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.670509][ T7505] Node 0 DMA32: 55*4kB (UE) 20*8kB (UME) 24*16kB (UE) 27*32kB (UE) 68*64kB (UME) 201*128kB (UME) 184*256kB (UM) 136*512kB (UME) 67*1024kB (UM) 31*2048kB (UME) 267*4096kB (UM) = 1374172kB [ 165.700032][ T7505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 165.742857][ T7505] Node 1 Normal: 205*4kB (UME) 56*8kB (UME) 46*16kB (UME) 188*32kB (UME) 92*64kB (UME) 36*128kB (UME) 18*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3909204kB [ 165.774697][ T7505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.784564][ T7505] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.799907][ T7505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.813053][ T7505] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.824882][ T7505] 42023 total pagecache pages [ 165.833057][ T7505] 1 pages in swap cache [ 165.837337][ T7505] Free swap = 124460kB [ 165.928568][ T7505] Total swap = 124996kB [ 165.943957][ T7505] 2097051 pages RAM [ 165.978157][ T7505] 0 pages HighMem/MovableOnly [ 165.983496][ T7505] 427006 pages reserved [ 165.993628][ T7505] 0 pages cma reserved [ 167.977335][ T7664] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 170.662037][ T7706] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 171.943257][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 172.553932][ T7740] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 172.719384][ T7741] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 172.888843][ T7747] syz_tun: entered allmulticast mode [ 175.958453][ T7779] syz_tun: entered allmulticast mode [ 176.069633][ T7789] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 176.234080][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 176.301409][ T7651] Set syz1 is full, maxelem 65536 reached [ 176.415155][ T7799] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 179.227285][ T7843] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.218818][ T7858] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 180.424574][ T7829] Set syz1 is full, maxelem 65536 reached [ 180.953997][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 181.269443][ T7886] [ 181.271827][ T7886] ====================================================== [ 181.278866][ T7886] WARNING: possible circular locking dependency detected [ 181.285894][ T7886] 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Not tainted [ 181.293008][ T7886] ------------------------------------------------------ [ 181.300013][ T7886] syz.3.624/7886 is trying to acquire lock: [ 181.305890][ T7886] ffffffff8fdf22b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 181.315204][ T7886] [ 181.315204][ T7886] but task is already holding lock: [ 181.322639][ T7886] ffff888033258470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xfcb/0x2230 [ 181.331970][ T7886] [ 181.331970][ T7886] which lock already depends on the new lock. [ 181.331970][ T7886] [ 181.342368][ T7886] [ 181.342368][ T7886] the existing dependency chain (in reverse order) is: [ 181.351371][ T7886] [ 181.351371][ T7886] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 181.359362][ T7886] lock_acquire+0x1ed/0x550 [ 181.364383][ T7886] _raw_spin_lock_bh+0x35/0x50 [ 181.369664][ T7886] nr_rt_ioctl+0x192/0xfb0 [ 181.374590][ T7886] sock_do_ioctl+0x158/0x460 [ 181.379702][ T7886] sock_ioctl+0x626/0x8e0 [ 181.384548][ T7886] __se_sys_ioctl+0xf5/0x170 [ 181.389650][ T7886] do_syscall_64+0xf3/0x230 [ 181.394672][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.401085][ T7886] [ 181.401085][ T7886] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 181.408901][ T7886] lock_acquire+0x1ed/0x550 [ 181.413915][ T7886] _raw_spin_lock_bh+0x35/0x50 [ 181.419191][ T7886] nr_rt_device_down+0xb5/0x7b0 [ 181.424552][ T7886] nr_device_event+0x134/0x150 [ 181.429838][ T7886] notifier_call_chain+0x1a5/0x3f0 [ 181.435463][ T7886] dev_close_many+0x33c/0x4c0 [ 181.440662][ T7886] dev_close+0x1c0/0x2c0 [ 181.445420][ T7886] bpq_device_event+0x372/0x8b0 [ 181.450788][ T7886] notifier_call_chain+0x1a5/0x3f0 [ 181.456410][ T7886] dev_close_many+0x33c/0x4c0 [ 181.461603][ T7886] dev_close+0x1c0/0x2c0 [ 181.466362][ T7886] bond_setup_by_slave+0x66/0x390 [ 181.471902][ T7886] bond_enslave+0x7b4/0x3ac0 [ 181.477012][ T7886] bond_do_ioctl+0x749/0xb50 [ 181.482111][ T7886] dev_ifsioc+0xb73/0xe70 [ 181.486952][ T7886] dev_ioctl+0x719/0x1340 [ 181.491792][ T7886] sock_do_ioctl+0x240/0x460 [ 181.496898][ T7886] sock_ioctl+0x626/0x8e0 [ 181.501745][ T7886] __se_sys_ioctl+0xf5/0x170 [ 181.506846][ T7886] do_syscall_64+0xf3/0x230 [ 181.511865][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.518277][ T7886] [ 181.518277][ T7886] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 181.526178][ T7886] validate_chain+0x18ef/0x5920 [ 181.531546][ T7886] __lock_acquire+0x1397/0x2100 [ 181.536911][ T7886] lock_acquire+0x1ed/0x550 [ 181.541926][ T7886] _raw_spin_lock_bh+0x35/0x50 [ 181.547203][ T7886] nr_remove_neigh+0x25/0xe0 [ 181.552304][ T7886] nr_add_node+0x150b/0x2230 [ 181.557405][ T7886] nr_rt_ioctl+0xd43/0xfb0 [ 181.562328][ T7886] sock_do_ioctl+0x158/0x460 [ 181.567436][ T7886] sock_ioctl+0x626/0x8e0 [ 181.572286][ T7886] __se_sys_ioctl+0xf5/0x170 [ 181.577391][ T7886] do_syscall_64+0xf3/0x230 [ 181.582410][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.588821][ T7886] [ 181.588821][ T7886] other info that might help us debug this: [ 181.588821][ T7886] [ 181.599032][ T7886] Chain exists of: [ 181.599032][ T7886] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 181.599032][ T7886] [ 181.612848][ T7886] Possible unsafe locking scenario: [ 181.612848][ T7886] [ 181.620284][ T7886] CPU0 CPU1 [ 181.625636][ T7886] ---- ---- [ 181.630991][ T7886] lock(&nr_node->node_lock); [ 181.635752][ T7886] lock(nr_node_list_lock); [ 181.642856][ T7886] lock(&nr_node->node_lock); [ 181.650130][ T7886] lock(nr_neigh_list_lock); [ 181.654813][ T7886] [ 181.654813][ T7886] *** DEADLOCK *** [ 181.654813][ T7886] [ 181.662940][ T7886] 1 lock held by syz.3.624/7886: [ 181.667861][ T7886] #0: ffff888033258470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xfcb/0x2230 [ 181.677603][ T7886] [ 181.677603][ T7886] stack backtrace: [ 181.683478][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.3.624 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 181.694069][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.704135][ T7886] Call Trace: [ 181.707416][ T7886] [ 181.710340][ T7886] dump_stack_lvl+0x241/0x360 [ 181.715018][ T7886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.720214][ T7886] ? __pfx__printk+0x10/0x10 [ 181.724813][ T7886] print_circular_bug+0x13a/0x1b0 [ 181.729837][ T7886] check_noncircular+0x36a/0x4a0 [ 181.734773][ T7886] ? __pfx_check_noncircular+0x10/0x10 [ 181.740228][ T7886] ? lockdep_lock+0x123/0x2b0 [ 181.744896][ T7886] ? __pfx_lock_acquire+0x10/0x10 [ 181.749909][ T7886] ? is_bpf_text_address+0x26/0x2a0 [ 181.755100][ T7886] validate_chain+0x18ef/0x5920 [ 181.759956][ T7886] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.766104][ T7886] ? __pfx_validate_chain+0x10/0x10 [ 181.771292][ T7886] ? unwind_get_return_address+0x4d/0x90 [ 181.776914][ T7886] ? __pfx_validate_chain+0x10/0x10 [ 181.782105][ T7886] ? arch_stack_walk+0xfd/0x150 [ 181.786949][ T7886] ? stack_trace_save+0x118/0x1d0 [ 181.791988][ T7886] ? __pfx_stack_trace_save+0x10/0x10 [ 181.797354][ T7886] ? stack_depot_save_flags+0x37/0x940 [ 181.802809][ T7886] ? mark_lock+0x9a/0x360 [ 181.807128][ T7886] __lock_acquire+0x1397/0x2100 [ 181.811972][ T7886] lock_acquire+0x1ed/0x550 [ 181.816463][ T7886] ? nr_remove_neigh+0x25/0xe0 [ 181.821219][ T7886] ? __pfx_lock_acquire+0x10/0x10 [ 181.826235][ T7886] ? __pfx_lock_acquire+0x10/0x10 [ 181.831250][ T7886] ? nr_remove_neigh+0x25/0xe0 [ 181.836016][ T7886] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 181.841817][ T7886] ? do_raw_spin_lock+0x14f/0x370 [ 181.846838][ T7886] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 181.852637][ T7886] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.858003][ T7886] ? nr_remove_neigh+0x25/0xe0 [ 181.862759][ T7886] _raw_spin_lock_bh+0x35/0x50 [ 181.867514][ T7886] ? nr_remove_neigh+0x25/0xe0 [ 181.872269][ T7886] nr_remove_neigh+0x25/0xe0 [ 181.876848][ T7886] nr_add_node+0x150b/0x2230 [ 181.881432][ T7886] ? __pfx_nr_add_node+0x10/0x10 [ 181.886415][ T7886] ? nr_call_to_digi+0x7a/0x1b0 [ 181.891293][ T7886] ? __asan_memcpy+0x40/0x70 [ 181.896001][ T7886] ? nr_call_to_digi+0x121/0x1b0 [ 181.901460][ T7886] nr_rt_ioctl+0xd43/0xfb0 [ 181.905887][ T7886] ? tomoyo_path_number_perm+0x206/0x860 [ 181.911510][ T7886] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 181.916444][ T7886] ? tomoyo_path_number_perm+0x679/0x860 [ 181.922156][ T7886] ? cap_capable+0x1b4/0x250 [ 181.926736][ T7886] ? security_inode_rename+0x262/0x810 [ 181.932190][ T7886] sock_do_ioctl+0x158/0x460 [ 181.936778][ T7886] ? __pfx_sock_do_ioctl+0x10/0x10 [ 181.941888][ T7886] ? __asan_memset+0x23/0x50 [ 181.946560][ T7886] ? smack_file_ioctl+0x29e/0x3a0 [ 181.951586][ T7886] sock_ioctl+0x626/0x8e0 [ 181.955922][ T7886] ? __pfx_sock_ioctl+0x10/0x10 [ 181.960779][ T7886] ? __fget_files+0x2a/0x410 [ 181.965362][ T7886] ? __fget_files+0x2a/0x410 [ 181.969940][ T7886] ? __pfx_sock_ioctl+0x10/0x10 [ 181.974784][ T7886] __se_sys_ioctl+0xf5/0x170 [ 181.979371][ T7886] do_syscall_64+0xf3/0x230 [ 181.983870][ T7886] ? clear_bhb_loop+0x35/0x90 [ 181.988537][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.994425][ T7886] RIP: 0033:0x7f6e17d85d29 [ 181.998846][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.018488][ T7886] RSP: 002b:00007f6e18c65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.026893][ T7886] RAX: ffffffffffffffda RBX: 00007f6e17f75fa0 RCX: 00007f6e17d85d29 [ 182.034859][ T7886] RDX: 0000000020000280 RSI: 000000000000890b RDI: 0000000000000004 [ 182.042824][ T7886] RBP: 00007f6e17e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 182.050789][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.058768][ T7886] R13: 0000000000000000 R14: 00007f6e17f75fa0 R15: 00007ffce819b688 [ 182.066737][ T7886] [ 182.163074][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.170527][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.302713][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.325042][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.384031][ T7876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.394012][ T7876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.404994][ T7876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.420243][ T7876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.448647][ T7876] geneve2: left promiscuous mode