last executing test programs: 10m4.09665509s ago: executing program 0 (id=374): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 10m3.985276393s ago: executing program 0 (id=376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) 10m2.379560424s ago: executing program 0 (id=379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000300), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 10m2.200390428s ago: executing program 0 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 10m1.994427153s ago: executing program 0 (id=382): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 10m1.814443225s ago: executing program 0 (id=385): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 9m46.237273586s ago: executing program 32 (id=385): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 9m0.362449146s ago: executing program 3 (id=761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r2, &(0x7f0000000000)={0x800, 0x9, 0x9, 0x9a}, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) 9m0.086519665s ago: executing program 3 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m58.853467333s ago: executing program 3 (id=768): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000003c0)={0x1, &(0x7f00000002c0)=[{0x0, 0x3d, 0x10, 0x3}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001024000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 8m58.620121175s ago: executing program 3 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) dup3(r4, r2, 0x80000) 8m56.692049948s ago: executing program 3 (id=776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000540)="d65ff67c969f58c556f486e0b17dee9b1db1bacbad8d6ccb0f9fd5f3b35a1c87c4e0ab50544682dcf39050db958d67d3c94ddd5209e22d0e61aa82bff92d8e3a4db3", 0x42}, {&(0x7f0000000a00)="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", 0x1d9}, {&(0x7f0000000c00)="c00e31f63fbd24753e76353ac34a5e1db4e30200ebecbbe80cfa66e768f4ebb39beaf6b345268cc32edf19ba3d0baa247d7de49872fce0b2ed0b02202dd7ed177dc3a367e7510a91e37d17deb49064ebf24b0fa59aed5ef37943f0d75c3f29be09009cdd2c6a02d80bb2fc03f2e3aeb2feebbcce9f70359f3b24dd60d67cdbc5d7fa580ed69e00f5000000000000000000000000000093909aebfa97fd739d4d2171ab02d7c31f4458adcd19f686ef03a7d7e9129f1bdba7989cbd6069ea1ae061f27b46ce987336e6c255b8b08d765179dd52c2db762ba6e3dc63ccb30b433882a864bd2ad726deb26439107b5bf78ba16b278091eec8993d3319db89ccff487897f9615ad47c7cb84806228b86d4250adf58c5de46e0b709f7ae5c5842678efb475e81e06265e57a37be594f159b1f89d504c15f64652d7809328c181b7283ceda411084c3b3eeb16553e8179ed12df768dab1d0c9ee884af1795546a4cb08afcd3a6460347b3f688fabe3e68ccb92632660077ea633957c26e8661e96d067548ede2d17", 0x185}, {&(0x7f00000007c0)="0c26ffec3f032e46de9f1f3b1e1503bc28c09bb5263dbd8f973e11853e6a1ee19acb33c1a09fa191ebd6ef0726b9a183990775a4cd8180b280a3c41b0c928b66b5a386f07c5a8f03d5b23a4a0ed89bf4", 0x50}], 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 8m56.370783033s ago: executing program 3 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40182, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r3, 0x8, 0x8000, 0x2, 0x6, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @remote, {[@lsrr={0x83, 0x1f, 0x8e, [@broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xfd, 0x3, 0x4, [{@private=0xa010101, 0x9}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x15c, 0x24, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xb}, {0x3, 0x7}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x6, 0xfffffffc, 0x1, 0x4d46, 0xfa, 0x4}}, {0xc, 0x2, [0x1, 0x0, 0xe358, 0x2]}}, {{0x1c, 0x1, {0x95, 0xff, 0x15, 0xffffe4e4, 0x1, 0x8, 0xe7, 0x3}}, {0xa, 0x2, [0x81, 0x4c, 0x0]}}, {{0x1c, 0x1, {0x6, 0x4, 0x4, 0x9, 0x2, 0xb, 0xffff8001, 0x1}}, {0x6, 0x2, [0x95e0]}}, {{0x1c, 0x1, {0x0, 0x80, 0x1, 0xe1, 0x0, 0x101, 0xeca5, 0x7}}, {0x12, 0x2, [0x81, 0x1, 0x7, 0xe, 0xfff7, 0x1, 0x7]}}, {{0x1c, 0x1, {0x81, 0xe, 0x5, 0x8, 0x0, 0xffffffff, 0x8, 0xa}}, {0x18, 0x2, [0x8001, 0xa, 0x3, 0x3ff, 0x300, 0x9, 0x5, 0xe, 0x5, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1b}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0xf173, 0x8, 0x1, 0x5ac7, 0x101, 0x1}}, {0x6, 0x2, [0x77]}}, {{0x1c, 0x1, {0xff, 0xff, 0x93e7, 0x6, 0x2, 0x38, 0x4f, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40000) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'geneve0\x00', 0x400}) 8m41.27417267s ago: executing program 33 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40182, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r3, 0x8, 0x8000, 0x2, 0x6, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @remote, {[@lsrr={0x83, 0x1f, 0x8e, [@broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xfd, 0x3, 0x4, [{@private=0xa010101, 0x9}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x15c, 0x24, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xb}, {0x3, 0x7}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x6, 0xfffffffc, 0x1, 0x4d46, 0xfa, 0x4}}, {0xc, 0x2, [0x1, 0x0, 0xe358, 0x2]}}, {{0x1c, 0x1, {0x95, 0xff, 0x15, 0xffffe4e4, 0x1, 0x8, 0xe7, 0x3}}, {0xa, 0x2, [0x81, 0x4c, 0x0]}}, {{0x1c, 0x1, {0x6, 0x4, 0x4, 0x9, 0x2, 0xb, 0xffff8001, 0x1}}, {0x6, 0x2, [0x95e0]}}, {{0x1c, 0x1, {0x0, 0x80, 0x1, 0xe1, 0x0, 0x101, 0xeca5, 0x7}}, {0x12, 0x2, [0x81, 0x1, 0x7, 0xe, 0xfff7, 0x1, 0x7]}}, {{0x1c, 0x1, {0x81, 0xe, 0x5, 0x8, 0x0, 0xffffffff, 0x8, 0xa}}, {0x18, 0x2, [0x8001, 0xa, 0x3, 0x3ff, 0x300, 0x9, 0x5, 0xe, 0x5, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1b}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0xf173, 0x8, 0x1, 0x5ac7, 0x101, 0x1}}, {0x6, 0x2, [0x77]}}, {{0x1c, 0x1, {0xff, 0xff, 0x93e7, 0x6, 0x2, 0x38, 0x4f, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40000) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'geneve0\x00', 0x400}) 7m7.478551703s ago: executing program 4 (id=1522): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32, @ANYBLOB="00000000000000001000000000000001"], 0x50) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 7m7.128783212s ago: executing program 4 (id=1523): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x2337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000300)) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m4.018509119s ago: executing program 4 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 7m3.660527918s ago: executing program 2 (id=1533): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32, @ANYBLOB="00000000000000001000000000000001"], 0x50) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 7m3.419122336s ago: executing program 2 (id=1536): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m3.134053432s ago: executing program 4 (id=1539): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x85494000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x3, 0x0) splice(r3, 0x0, r1, 0x0, 0x1c, 0xe) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x5c, 0x0, @fd_index=0xffffffff, 0xab, 0x0, 0x57, 0x3, 0x1}) io_uring_enter(r6, 0x15f1, 0xff9c, 0x69, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r5, 0xffffffffffffffff, 0x0) 7m0.245565262s ago: executing program 2 (id=1557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4048010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x24000051}, 0x40) 6m59.679881649s ago: executing program 4 (id=1562): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x7ff, r3, 0x0, 0x0, 0xd51c, 0x0, 0x1}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x69}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) 6m59.482634886s ago: executing program 2 (id=1564): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m58.986566157s ago: executing program 2 (id=1566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000640)='\'', 0x1, 0x4000001, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000680), 0xb) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 6m58.826361163s ago: executing program 2 (id=1568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d5303", 0x26}], 0x1) 6m47.86732602s ago: executing program 4 (id=1589): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m43.582148055s ago: executing program 34 (id=1568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d5303", 0x26}], 0x1) 6m32.556604709s ago: executing program 35 (id=1589): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m3.505420788s ago: executing program 8 (id=3892): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m3.413798377s ago: executing program 8 (id=3893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setuid(0xee01) 2m3.365856692s ago: executing program 8 (id=3895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000810000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 2m3.28234197s ago: executing program 8 (id=3896): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m1.470962577s ago: executing program 8 (id=3905): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000810000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 2m1.318628263s ago: executing program 8 (id=3906): msgsnd(0x0, 0x0, 0x8, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=@newchain={0x24, 0x66, 0x601, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xffe0}, {0x3}}}, 0x24}}, 0x20000000) 1m46.192299209s ago: executing program 36 (id=3906): msgsnd(0x0, 0x0, 0x8, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=@newchain={0x24, 0x66, 0x601, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xffe0}, {0x3}}}, 0x24}}, 0x20000000) 4.71078761s ago: executing program 7 (id=4728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[], 0x0) 4.40896074s ago: executing program 7 (id=4733): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 4.18076848s ago: executing program 7 (id=4737): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.355045055s ago: executing program 5 (id=4749): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) close(r2) 3.259498856s ago: executing program 5 (id=4751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f00000004c0)='net/nfsfs\x00') munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x3ffa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/73, 0x49, 0xac8c) 3.079957942s ago: executing program 9 (id=4752): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.882416352s ago: executing program 9 (id=4753): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x560c89bb) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) 2.572190933s ago: executing program 6 (id=4754): syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000280)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x1300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x14, r1, 0xb31, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 2.374269832s ago: executing program 7 (id=4755): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x8040) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000380)=0x8000) 1.362776817s ago: executing program 6 (id=4756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[], 0x0) 1.302412525s ago: executing program 5 (id=4757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.226430962s ago: executing program 1 (id=4758): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 1.17752808s ago: executing program 7 (id=4759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff0b, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000050000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.110220826s ago: executing program 9 (id=4760): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0, 0x4c}}, 0x0) 1.07141982s ago: executing program 1 (id=4761): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 1.069931675s ago: executing program 6 (id=4762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 1.043292923s ago: executing program 5 (id=4763): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 924.335986ms ago: executing program 9 (id=4764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91103a00000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 883.07663ms ago: executing program 7 (id=4765): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 803.425368ms ago: executing program 9 (id=4766): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x4be, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"/680], 0x0) 729.521046ms ago: executing program 6 (id=4767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 643.130063ms ago: executing program 1 (id=4768): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 577.873028ms ago: executing program 6 (id=4769): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x24000054}, 0x0) 485.07918ms ago: executing program 9 (id=4770): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x560c89bb) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) 419.068276ms ago: executing program 1 (id=4771): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 385.484913ms ago: executing program 6 (id=4772): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, 0x0) 380.272038ms ago: executing program 5 (id=4773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[], 0x0) 287.122666ms ago: executing program 1 (id=4774): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0, 0x4c}}, 0x0) 112.784457ms ago: executing program 1 (id=4775): syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000280)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x1300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x40) 0s ago: executing program 5 (id=4776): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) syz_emit_ethernet(0xd2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6a9ea504009c110000000000000000000000ffffe0000002ff0200000000000000000000000000014e234e20009c90"], 0x0) kernel console output (not intermixed with test programs): 546.386526][T13600] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 546.386526][T13600] program syz.7.2851 not setting count and/or reply_len properly [ 547.192672][T13628] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.211383][T13628] __nla_validate_parse: 1 callbacks suppressed [ 547.211404][T13628] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 548.496094][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.553620][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.575625][ T3558] bond0 (unregistering): Released all slaves [ 549.454535][ T3558] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 549.480671][ T3558] bond1 (unregistering): Released all slaves [ 550.626078][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2877'. [ 550.797779][T13673] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2881'. [ 551.191763][ T37] kauditd_printk_skb: 51 callbacks suppressed [ 551.191784][ T37] audit: type=1326 audit(550.994:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.192215][ T37] audit: type=1326 audit(550.994:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.253101][ T37] audit: type=1326 audit(551.054:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.254735][ T37] audit: type=1326 audit(551.064:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.255028][ T37] audit: type=1326 audit(551.064:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8334fdf90 code=0x7ffc0000 [ 551.255366][ T37] audit: type=1326 audit(551.064:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.255521][ T37] audit: type=1326 audit(551.064:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.255838][ T37] audit: type=1326 audit(551.064:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.256305][ T37] audit: type=1326 audit(551.064:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.256563][ T37] audit: type=1326 audit(551.064:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.7.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 551.529603][T13690] netlink: 'syz.7.2889': attribute type 21 has an invalid length. [ 551.726896][ T1304] tipc: Subscription rejected, illegal request [ 551.943473][ T3558] hsr_slave_0: left promiscuous mode [ 551.983115][ T3558] hsr_slave_1: left promiscuous mode [ 552.086338][ T3558] veth1_macvtap: left promiscuous mode [ 552.086454][ T3558] veth0_macvtap: left promiscuous mode [ 552.415321][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2904'. [ 552.577957][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2908'. [ 552.605886][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2908'. [ 552.800122][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2911'. [ 554.473663][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 554.733631][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 555.223974][T13763] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2921'. [ 556.162339][T13766] 9pnet_fd: p9_fd_create_tcp (13766): problem connecting socket to 127.0.0.1 [ 557.377694][T13686] lo speed is unknown, defaulting to 1000 [ 557.389278][ T5887] lo speed is unknown, defaulting to 1000 [ 557.389307][ T5887] syz2: Port: 1 Link DOWN [ 557.717469][T13702] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.046919][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2931'. [ 558.216651][T13702] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.246084][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 558.339323][T13791] syzkaller0: entered promiscuous mode [ 558.339351][T13791] syzkaller0: entered allmulticast mode [ 558.667683][T13702] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.746028][T13796] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2935'. [ 559.036348][T13810] Driver unsupported XDP return value 0 on prog (id 881) dev N/A, expect packet loss! [ 559.190942][T13816] program syz.8.2944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.215688][T13814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2943'. [ 559.426268][T13702] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.508615][T13317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 559.572255][T13317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 559.648741][T13828] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2949'. [ 559.689938][T13317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 559.780082][T13317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 560.081045][ T1165] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.218767][ T3713] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.308209][ T3713] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.401005][ T3534] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.710043][T13864] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2960'. [ 561.093826][T13317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.165795][T13317] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.193782][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.194028][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.260424][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.260583][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.668174][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2972'. [ 561.722196][T13897] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 562.250538][T13317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.480460][T13921] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.588176][T13317] veth0_vlan: entered promiscuous mode [ 562.691021][T13921] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.750384][T13317] veth1_vlan: entered promiscuous mode [ 562.905368][T13921] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.946810][T13317] veth0_macvtap: entered promiscuous mode [ 562.979179][T13317] veth1_macvtap: entered promiscuous mode [ 563.100398][T13934] netlink: 284 bytes leftover after parsing attributes in process `syz.6.2989'. [ 563.104101][T13921] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.150166][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2991'. [ 563.196068][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 563.238608][T13317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.292733][T13317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.386862][T10649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.400473][T10649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.414021][T10649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.457222][T10649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.600320][ T3558] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.759843][ T3558] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.351209][ T3713] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.591727][ T69] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.788699][ T3713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.788722][ T3713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.013440][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.013465][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.272196][T13987] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3014'. [ 566.875071][T14019] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3024'. [ 568.717891][T14064] tipc: Started in network mode [ 568.717926][T14064] tipc: Node identity d6d95f42c3e1, cluster identity 4711 [ 568.718141][T14064] tipc: Enabled bearer , priority 0 [ 568.839692][T14050] tipc: Disabling bearer [ 568.840945][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 568.840962][ T37] audit: type=1326 audit(568.644:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.842102][ T37] audit: type=1326 audit(568.644:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873098][ T37] audit: type=1326 audit(568.654:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873153][ T37] audit: type=1326 audit(568.654:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873197][ T37] audit: type=1326 audit(568.654:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873237][ T37] audit: type=1326 audit(568.654:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873277][ T37] audit: type=1326 audit(568.654:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873317][ T37] audit: type=1326 audit(568.654:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873359][ T37] audit: type=1326 audit(568.654:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 568.873400][ T37] audit: type=1326 audit(568.654:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14073 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 569.196652][T14071] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 569.196948][T14072] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 570.036561][T14128] tipc: Enabling of bearer rejected, failed to enable media [ 571.418569][T14184] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3089'. [ 572.911048][T14220] rdma_op ffff888038dc6a70 conn xmit_rdma 0000000000000000 [ 573.073003][T14224] syzkaller0: entered allmulticast mode [ 573.700666][T14224] syzkaller0 (unregistering): left allmulticast mode [ 573.946309][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 573.946333][ T37] audit: type=1326 audit(573.754:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.946396][ T37] audit: type=1326 audit(573.754:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.947812][ T37] audit: type=1326 audit(573.754:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.947982][ T37] audit: type=1326 audit(573.754:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.948201][ T37] audit: type=1326 audit(573.754:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.948304][ T37] audit: type=1326 audit(573.754:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.948474][ T37] audit: type=1326 audit(573.754:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.948815][ T37] audit: type=1326 audit(573.754:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.948944][ T37] audit: type=1326 audit(573.754:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 573.949375][ T37] audit: type=1326 audit(573.754:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.5.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755f6f749 code=0x7ffc0000 [ 574.201331][T14255] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.206679][T14255] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.205234][T14338] syz.7.3149: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 577.205438][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.7.3149 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 577.205477][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.205491][T14338] Call Trace: [ 577.205501][T14338] [ 577.205511][T14338] dump_stack_lvl+0xe8/0x150 [ 577.205550][T14338] warn_alloc+0x22e/0x3b0 [ 577.205593][T14338] ? stack_trace_save+0x9c/0xe0 [ 577.205625][T14338] ? __pfx_warn_alloc+0x10/0x10 [ 577.205669][T14338] ? kasan_save_track+0x4f/0x80 [ 577.205698][T14338] ? kasan_save_track+0x3e/0x80 [ 577.205726][T14338] ? __kasan_kmalloc+0x93/0xb0 [ 577.205757][T14338] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 577.205788][T14338] ? xskq_create+0x56/0x170 [ 577.205820][T14338] ? xsk_setsockopt+0x4dc/0x8d0 [ 577.205847][T14338] ? do_sock_setsockopt+0x17c/0x1b0 [ 577.205873][T14338] ? __x64_sys_setsockopt+0x145/0x1b0 [ 577.205897][T14338] ? do_syscall_64+0xec/0xf80 [ 577.205924][T14338] __vmalloc_node_range_noprof+0x134/0x16a0 [ 577.205996][T14338] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.206040][T14338] ? __kasan_kmalloc+0x93/0xb0 [ 577.206078][T14338] vmalloc_user_noprof+0xad/0xf0 [ 577.206113][T14338] ? xskq_create+0xbf/0x170 [ 577.206146][T14338] xskq_create+0xbf/0x170 [ 577.206182][T14338] xsk_init_queue+0xb0/0x110 [ 577.206218][T14338] xsk_setsockopt+0x4dc/0x8d0 [ 577.206251][T14338] ? __pfx_xsk_setsockopt+0x10/0x10 [ 577.206297][T14338] ? __fget_files+0x2a/0x420 [ 577.206320][T14338] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 577.206351][T14338] ? __pfx_xsk_setsockopt+0x10/0x10 [ 577.206383][T14338] do_sock_setsockopt+0x17c/0x1b0 [ 577.206416][T14338] __x64_sys_setsockopt+0x145/0x1b0 [ 577.206458][T14338] do_syscall_64+0xec/0xf80 [ 577.206479][T14338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.206501][T14338] ? trace_irq_disable+0x37/0x100 [ 577.206524][T14338] ? clear_bhb_loop+0x60/0xb0 [ 577.206552][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.206574][T14338] RIP: 0033:0x7fd8334ff749 [ 577.206594][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.206615][T14338] RSP: 002b:00007fd831766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 577.206638][T14338] RAX: ffffffffffffffda RBX: 00007fd833755fa0 RCX: 00007fd8334ff749 [ 577.206655][T14338] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 577.206669][T14338] RBP: 00007fd833583f91 R08: 0000000000000004 R09: 0000000000000000 [ 577.206683][T14338] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.206697][T14338] R13: 00007fd833756038 R14: 00007fd833755fa0 R15: 00007ffd41d8bf38 [ 577.206735][T14338] [ 577.206743][T14338] Mem-Info: [ 577.206752][T14338] active_anon:254 inactive_anon:23058 isolated_anon:0 [ 577.206752][T14338] active_file:15625 inactive_file:37470 isolated_file:0 [ 577.206752][T14338] unevictable:17165 dirty:202 writeback:0 [ 577.206752][T14338] slab_reclaimable:12808 slab_unreclaimable:104597 [ 577.206752][T14338] mapped:30988 shmem:19941 pagetables:1504 [ 577.206752][T14338] sec_pagetables:0 bounce:0 [ 577.206752][T14338] kernel_misc_reclaimable:0 [ 577.206752][T14338] free:1277891 free_pcp:10860 free_cma:0 [ 577.206813][T14338] Node 0 active_anon:1016kB inactive_anon:92232kB active_file:62300kB inactive_file:149880kB unevictable:67124kB isolated(anon):0kB isolated(file):0kB mapped:123952kB dirty:808kB writeback:0kB shmem:78228kB kernel_stack:12816kB pagetables:5860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 577.206865][T14338] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 577.206914][T14338] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.206979][T14338] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 577.207021][T14338] Node 0 DMA32 free:1190104kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:92232kB active_file:62300kB inactive_file:149880kB unevictable:67124kB writepending:808kB zspages:0kB present:3129332kB managed:2574692kB mlocked:0kB bounce:0kB free_pcp:43292kB local_pcp:31536kB free_cma:0kB [ 577.207090][T14338] lowmem_reserve[]: 0 0 1 1 1 [ 577.207127][T14338] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.207188][T14338] lowmem_reserve[]: 0 0 0 0 0 [ 577.207226][T14338] Node 1 Normal free:3906100kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:40kB free_cma:0kB [ 577.207293][T14338] lowmem_reserve[]: 0 0 0 0 0 [ 577.207331][T14338] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 577.207471][T14338] Node 0 DMA32: 203*4kB (UME) 75*8kB (UME) 128*16kB (UME) 847*32kB (UME) 1357*64kB (UM) 980*128kB (UME) 594*256kB (UM) 223*512kB (UME) 201*1024kB (UM) 38*2048kB (UM) 97*4096kB (UM) = 1190052kB [ 577.207649][T14338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.212998][T14338] Node 1 Normal: 169*4kB (UE) 42*8kB (UME) 38*16kB (UME) 215*32kB (UME) 92*64kB (UME) 34*128kB (UME) 9*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 945*4096kB (M) = 3906100kB [ 577.213182][T14338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.213201][T14338] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 577.213220][T14338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.213238][T14338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.213256][T14338] 89479 total pagecache pages [ 577.213265][T14338] 0 pages in swap cache [ 577.213272][T14338] Free swap = 124996kB [ 577.213280][T14338] Total swap = 124996kB [ 577.213289][T14338] 2097051 pages RAM [ 577.213297][T14338] 0 pages HighMem/MovableOnly [ 577.213305][T14338] 421352 pages reserved [ 577.213312][T14338] 0 pages cma reserved [ 577.843764][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3154'. [ 578.038748][T14352] tipc: Enabling of bearer rejected, failed to enable media [ 578.378390][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 578.402228][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 578.404445][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 578.408400][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 578.410228][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 578.922116][T14372] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.152614][T14372] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.498663][T14372] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.770195][T14372] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.483058][ T5819] Bluetooth: hci3: command tx timeout [ 580.610606][T14358] chnl_net:caif_netlink_parms(): no params data found [ 580.765606][ T3713] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.868510][ T37] kauditd_printk_skb: 260 callbacks suppressed [ 580.868533][ T37] audit: type=1326 audit(580.674:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14409 comm="syz.7.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 580.868970][ T37] audit: type=1326 audit(580.674:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14409 comm="syz.7.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 580.869361][ T37] audit: type=1326 audit(580.674:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14409 comm="syz.7.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 580.869752][ T37] audit: type=1326 audit(580.674:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14409 comm="syz.7.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 580.870063][ T37] audit: type=1326 audit(580.674:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14409 comm="syz.7.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 580.871522][ T37] audit: type=1326 audit(580.674:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14409 comm="syz.7.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 581.065490][ T13] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.142003][ T3713] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.225718][ T13] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.459259][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.460875][T14358] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.461512][T14358] bridge_slave_0: entered allmulticast mode [ 581.477339][T14358] bridge_slave_0: entered promiscuous mode [ 581.492216][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.492529][T14358] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.492755][T14358] bridge_slave_1: entered allmulticast mode [ 581.501548][T14358] bridge_slave_1: entered promiscuous mode [ 581.962316][T14431] netlink: 664 bytes leftover after parsing attributes in process `syz.6.3187'. [ 582.046708][T14358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.067349][T14358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.335391][ T37] audit: type=1326 audit(582.144:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 582.335595][ T37] audit: type=1326 audit(582.144:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 582.335720][ T37] audit: type=1326 audit(582.144:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 582.335916][ T37] audit: type=1326 audit(582.144:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 582.563023][ T5819] Bluetooth: hci3: command tx timeout [ 582.629734][T14358] team0: Port device team_slave_0 added [ 582.684277][T14358] team0: Port device team_slave_1 added [ 583.236168][T14445] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.304717][T14358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.304736][T14358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.304761][T14358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.320149][T14358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.320167][T14358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.320193][T14358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.746888][T14445] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.835673][ T4041] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.926749][T14358] hsr_slave_0: entered promiscuous mode [ 583.931331][T14358] hsr_slave_1: entered promiscuous mode [ 583.935020][T14358] debugfs: 'hsr0' already exists in 'hsr' [ 583.935047][T14358] Cannot create hsr debugfs directory [ 584.038136][T14445] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.141616][ T4041] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.406534][T14445] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.507942][ T4041] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.643104][ T5819] Bluetooth: hci3: command tx timeout [ 584.671464][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3203'. [ 584.820239][ T4041] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.323253][T14482] wireguard0: entered promiscuous mode [ 585.323285][T14482] wireguard0: entered allmulticast mode [ 586.228609][ T3534] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.475906][ T3534] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.640800][ T3534] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.723059][ T5819] Bluetooth: hci3: command tx timeout [ 586.770180][ T3558] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.814900][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3214'. [ 587.090477][ T4041] bridge_slave_1: left allmulticast mode [ 587.090514][ T4041] bridge_slave_1: left promiscuous mode [ 587.090903][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.145510][ T4041] bridge_slave_0: left allmulticast mode [ 587.145665][ T4041] bridge_slave_0: left promiscuous mode [ 587.145977][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.663587][ T4041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.734561][ T4041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.757148][ T4041] bond0 (unregistering): Released all slaves [ 591.277262][T14529] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3224'. [ 591.397466][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3226'. [ 591.899472][T14531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.930092][T14531] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.270149][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3236'. [ 594.387510][T14531] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.487040][T14554] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3235'. [ 594.693616][ T4041] hsr_slave_0: left promiscuous mode [ 594.751164][ T4041] hsr_slave_1: left promiscuous mode [ 594.752247][ T4041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.752274][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.829005][ T4041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.829039][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.094166][ T4041] veth1_macvtap: left promiscuous mode [ 595.094282][ T4041] veth0_macvtap: left promiscuous mode [ 595.094584][ T4041] veth1_vlan: left promiscuous mode [ 595.094782][ T4041] veth0_vlan: left promiscuous mode [ 599.423850][ T4041] team0 (unregistering): Port device team_slave_1 removed [ 599.733990][ T4041] team0 (unregistering): Port device team_slave_0 removed [ 602.337187][T14589] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3249'. [ 602.602079][T14531] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.941595][T14609] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 603.045034][T14611] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3259'. [ 603.129828][T14358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 603.274529][T14358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 603.321981][T14358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.486147][T14358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 603.583663][ T1304] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.683835][ T1304] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.818686][T10649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.911946][T10649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.000572][T14639] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 604.130131][T14358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.180384][T14358] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.200908][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.202652][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.267823][T10649] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.267981][T10649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.806036][T14670] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 604.861001][T14669] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.894640][T14672] netlink: 'syz.7.3281': attribute type 12 has an invalid length. [ 604.958031][T14358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.026349][T14669] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.227423][T14669] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.500767][T14669] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.044716][T14358] veth0_vlan: entered promiscuous mode [ 606.122016][T14358] veth1_vlan: entered promiscuous mode [ 606.151689][T14707] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 606.255263][T14358] veth0_macvtap: entered promiscuous mode [ 606.260641][T14358] veth1_macvtap: entered promiscuous mode [ 606.305868][T14358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.325548][T14358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.354218][T10649] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.354582][T10649] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.354758][T10649] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.357230][T10649] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.497718][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 606.497742][ T37] audit: type=1326 audit(606.284:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.497797][ T37] audit: type=1326 audit(606.284:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.497846][ T37] audit: type=1326 audit(606.284:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.499710][ T37] audit: type=1326 audit(606.304:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.499764][ T37] audit: type=1326 audit(606.304:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.499811][ T37] audit: type=1326 audit(606.304:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.499859][ T37] audit: type=1326 audit(606.304:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.499909][ T37] audit: type=1326 audit(606.304:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.499956][ T37] audit: type=1326 audit(606.304:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 606.500005][ T37] audit: type=1326 audit(606.304:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.7.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8334ff749 code=0x7ffc0000 [ 607.407302][ T3558] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.409554][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.409575][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.461172][T14734] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 607.608089][ T4041] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.733487][ T3534] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.821958][ T1399] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.845557][ T1399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.845581][ T1399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.087628][T14758] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 608.612281][T14774] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.680451][T14788] tipc: Started in network mode [ 608.680486][T14788] tipc: Node identity 463cbabd260f, cluster identity 4711 [ 608.681194][T14788] tipc: Enabled bearer , priority 0 [ 608.915318][T14771] tipc: Disabling bearer [ 609.062768][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3336'. [ 609.131195][T14774] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.362161][T14774] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.562194][T14774] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.623428][T14831] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3348'. [ 609.757853][T14833] tipc: Enabled bearer , priority 0 [ 609.962310][T14845] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3354'. [ 609.977573][T14832] tipc: Disabling bearer [ 610.245273][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3359'. [ 610.706695][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3368'. [ 611.073219][ T1304] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.149815][ T69] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.282685][ T69] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.364789][ T3713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.722595][T14910] bond0: entered promiscuous mode [ 611.722619][T14910] bond_slave_0: entered promiscuous mode [ 611.734364][T14910] bond_slave_1: entered promiscuous mode [ 611.738178][T14910] batadv0: entered promiscuous mode [ 611.765089][T14910] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 611.803050][T14910] bond0: left promiscuous mode [ 611.803076][T14910] bond_slave_0: left promiscuous mode [ 611.803459][T14910] bond_slave_1: left promiscuous mode [ 611.854035][T14910] batadv0: left promiscuous mode [ 612.050538][T14926] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 612.509949][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 612.509980][ T37] audit: type=1326 audit(612.314:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.514146][ T37] audit: type=1326 audit(612.324:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.515314][ T37] audit: type=1326 audit(612.324:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.515568][ T37] audit: type=1326 audit(612.324:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.516081][ T37] audit: type=1326 audit(612.324:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.518850][ T37] audit: type=1326 audit(612.324:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.519170][ T37] audit: type=1326 audit(612.324:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.519695][ T37] audit: type=1326 audit(612.324:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.520185][ T37] audit: type=1326 audit(612.324:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.520648][ T37] audit: type=1326 audit(612.324:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 612.972943][T14957] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 614.111134][T15007] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3430'. [ 614.374167][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3436'. [ 614.611044][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3439'. [ 615.144916][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3449'. [ 615.880719][T15085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3463'. [ 615.921815][T15082] syzkaller1: entered promiscuous mode [ 615.921844][T15082] syzkaller1: entered allmulticast mode [ 616.074308][T15092] netlink: 'syz.5.3466': attribute type 39 has an invalid length. [ 616.258356][T15101] 9p: Bad value for 'rfdno' [ 616.452129][T15110] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3476'. [ 616.995818][T15134] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.999500][T15134] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.699640][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3503'. [ 617.763746][T15172] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3504'. [ 618.187708][T15200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3517'. [ 618.333273][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 618.333297][ T37] audit: type=1326 audit(618.114:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333352][ T37] audit: type=1326 audit(618.114:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333400][ T37] audit: type=1326 audit(618.114:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333447][ T37] audit: type=1326 audit(618.114:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333495][ T37] audit: type=1326 audit(618.114:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333542][ T37] audit: type=1326 audit(618.114:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333589][ T37] audit: type=1326 audit(618.114:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333634][ T37] audit: type=1326 audit(618.114:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333679][ T37] audit: type=1326 audit(618.124:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 618.333724][ T37] audit: type=1326 audit(618.124:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 619.153327][T15231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3531'. [ 619.304176][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3532'. [ 619.731495][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3542'. [ 619.904899][T15267] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 620.246478][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3555'. [ 620.255689][T15287] IPv6: Can't replace route, no match found [ 620.560806][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3558'. [ 620.733441][T15306] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 621.111718][T15312] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.196778][T15324] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3567'. [ 621.313869][T15325] tipc: Enabling of bearer rejected, failed to enable media [ 621.449683][T15312] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.537712][T15335] Unsupported ieee802154 address type: 0 [ 621.738310][T15312] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.852801][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3578'. [ 621.910610][T15348] ip6gre1: entered allmulticast mode [ 622.043562][T15312] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.043797][T15351] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3579'. [ 622.200047][T15356] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3581'. [ 622.603625][ T69] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.755886][ T4041] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.864207][ T69] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.059942][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3593'. [ 623.083924][ T4041] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.105958][T15447] __nla_validate_parse: 1 callbacks suppressed [ 625.105981][T15447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3624'. [ 625.173272][T15450] program syz.6.3626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.751183][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3635'. [ 626.891964][T15487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3639'. [ 627.530999][T15514] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3653'. [ 627.810603][T15529] netlink: 'syz.8.3659': attribute type 1 has an invalid length. [ 628.395483][T15545] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3667'. [ 628.424368][T15547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3666'. [ 628.776109][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3672'. [ 628.808915][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3672'. [ 628.856360][T15565] netlink: 660 bytes leftover after parsing attributes in process `syz.1.3676'. [ 628.925164][T15563] pim6reg1: entered promiscuous mode [ 628.925196][T15563] pim6reg1: entered allmulticast mode [ 630.830755][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 630.830780][ T37] audit: type=1326 audit(630.634:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15603 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 630.830850][ T37] audit: type=1326 audit(630.634:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15603 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 630.830898][ T37] audit: type=1326 audit(630.634:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15603 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 631.466527][T15629] random: crng reseeded on system resumption [ 631.622168][T15629] Restarting kernel threads ... [ 631.666406][ T37] audit: type=1326 audit(631.474:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15634 comm="syz.6.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 631.669832][ T37] audit: type=1326 audit(631.474:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15634 comm="syz.6.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 631.670658][ T37] audit: type=1326 audit(631.474:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15634 comm="syz.6.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 631.670927][ T37] audit: type=1326 audit(631.474:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15634 comm="syz.6.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 631.671066][T15629] Done restarting kernel threads. [ 631.671404][ T37] audit: type=1326 audit(631.474:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15634 comm="syz.6.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 631.796020][ T37] audit: type=1326 audit(631.604:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15634 comm="syz.6.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 631.796168][ T37] audit: type=1326 audit(631.604:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15634 comm="syz.6.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 632.945597][T15648] netlink: 'syz.6.3711': attribute type 12 has an invalid length. [ 632.985466][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3710'. [ 634.755411][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3724'. [ 635.716937][T15727] netlink: 'syz.7.3745': attribute type 10 has an invalid length. [ 635.757259][T15727] team0: Failed to send options change via netlink (err -105) [ 635.757289][T15727] team0: Port device dummy0 added [ 635.776222][T15727] netlink: 'syz.7.3745': attribute type 10 has an invalid length. [ 635.803490][T15727] team0: Failed to send options change via netlink (err -105) [ 635.803756][T15727] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 635.811883][T15727] team0: Port device dummy0 removed [ 635.839135][T15727] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 636.488654][T15762] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3761'. [ 638.223679][T15792] ªªªªªª: renamed from vlan0 (while UP) [ 638.697366][T15804] netlink: 'syz.6.3777': attribute type 12 has an invalid length. [ 640.094250][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 640.094272][ T37] audit: type=1326 audit(639.904:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.094464][ T37] audit: type=1326 audit(639.904:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.094617][ T37] audit: type=1326 audit(639.904:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.095264][ T37] audit: type=1326 audit(639.904:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.095665][ T37] audit: type=1326 audit(639.904:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.095716][ T37] audit: type=1326 audit(639.904:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.095767][ T37] audit: type=1326 audit(639.904:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.096345][ T37] audit: type=1326 audit(639.904:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15820 comm="syz.6.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1c8aaf749 code=0x7ffc0000 [ 640.816270][T15837] netlink: 'syz.1.3788': attribute type 5 has an invalid length. [ 640.816294][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 641.154862][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3793'. [ 641.267089][T15852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3795'. [ 641.575952][T15864] netlink: 'syz.5.3801': attribute type 5 has an invalid length. [ 641.575977][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3801'. [ 641.784920][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3803'. [ 641.818167][T15867] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.820593][T15867] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.913047][T15870] hsr_slave_0: left promiscuous mode [ 641.950381][T15870] hsr_slave_1: left promiscuous mode [ 642.149702][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3807'. [ 642.418904][T15891] netlink: 'syz.7.3812': attribute type 5 has an invalid length. [ 642.418920][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3812'. [ 642.727835][T15904] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3818'. [ 643.425572][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.433575][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3830'. [ 643.464668][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.466301][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.475290][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.477000][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 644.485992][T15963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3841'. [ 645.321153][T15977] macvtap0: refused to change device tx_queue_len [ 645.603437][ T5819] Bluetooth: hci4: command tx timeout [ 646.674977][T16001] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.784306][T16019] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 646.828915][T15931] chnl_net:caif_netlink_parms(): no params data found [ 646.870209][T16021] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 647.078918][T16001] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.182328][T16031] __nla_validate_parse: 2 callbacks suppressed [ 647.182350][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3868'. [ 647.684826][ T5819] Bluetooth: hci4: command tx timeout [ 648.089431][T16001] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.528667][T16001] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.793458][T15931] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.793692][T15931] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.793954][T15931] bridge_slave_0: entered allmulticast mode [ 648.800772][T15931] bridge_slave_0: entered promiscuous mode [ 648.975190][ T3558] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.637841][T15931] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.639621][T15931] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.639887][T15931] bridge_slave_1: entered allmulticast mode [ 649.644187][T15931] bridge_slave_1: entered promiscuous mode [ 649.768448][ T5819] Bluetooth: hci4: command tx timeout [ 650.018559][ T3558] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.221392][T15931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.232720][T16074] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3883'. [ 650.327078][T15931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.327156][ T3713] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.466897][ T3558] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.706377][T15931] team0: Port device team_slave_0 added [ 650.726919][ T3558] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.794911][ T4041] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.796787][T15931] team0: Port device team_slave_1 added [ 651.384842][ T69] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.402304][T15931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.402323][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.402352][T15931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.464659][T15931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.464680][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.464706][T15931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.465257][ T1304] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.514510][T16103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3894'. [ 651.843845][ T5819] Bluetooth: hci4: command tx timeout [ 652.891831][T15931] hsr_slave_0: entered promiscuous mode [ 652.906667][T15931] hsr_slave_1: entered promiscuous mode [ 652.911538][T15931] debugfs: 'hsr0' already exists in 'hsr' [ 652.911577][T15931] Cannot create hsr debugfs directory [ 654.077989][T16133] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.337680][T16133] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.475186][ T3558] bridge_slave_1: left allmulticast mode [ 655.475217][ T3558] bridge_slave_1: left promiscuous mode [ 655.475475][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.535181][ T3558] bridge_slave_0: left allmulticast mode [ 655.535209][ T3558] bridge_slave_0: left promiscuous mode [ 655.535457][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.398808][T16173] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3923'. [ 657.202983][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 657.773634][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.833670][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.854951][ T3558] bond0 (unregistering): Released all slaves [ 658.703613][ T3558] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 658.726629][ T3558] bond1 (unregistering): Released all slaves [ 659.555510][ T3558] bond2 (unregistering): Released all slaves [ 659.749540][T16133] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.756242][T16188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3928'. [ 660.819023][ T3558] tipc: Left network mode [ 660.939220][T16133] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.028258][T16197] netlink: 'syz.7.3932': attribute type 29 has an invalid length. [ 662.264952][ T37] audit: type=1326 audit(662.074:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.266552][ T37] audit: type=1326 audit(662.074:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.266953][ T37] audit: type=1326 audit(662.074:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.267117][ T37] audit: type=1326 audit(662.074:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.267860][ T37] audit: type=1326 audit(662.074:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.268011][ T37] audit: type=1326 audit(662.074:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.268793][ T37] audit: type=1326 audit(662.074:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.268941][ T37] audit: type=1326 audit(662.074:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.269061][ T37] audit: type=1326 audit(662.074:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.269223][ T37] audit: type=1326 audit(662.074:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.1.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 662.743036][ T5813] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 662.911888][ T5813] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 662.911976][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.911997][ T5813] usb 2-1: Product: syz [ 662.912012][ T5813] usb 2-1: Manufacturer: syz [ 662.912026][ T5813] usb 2-1: SerialNumber: syz [ 662.946057][ T5813] usb 2-1: config 0 descriptor?? [ 664.017592][T16219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3940'. [ 664.144419][ T5813] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 664.144450][ T5813] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 664.144491][ T5813] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 664.176952][ T5813] usb 2-1: USB disconnect, device number 10 [ 664.307564][ T69] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.322334][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3941'. [ 664.414693][ T1165] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.763156][ T3558] hsr_slave_0: left promiscuous mode [ 664.784067][ T3558] hsr_slave_1: left promiscuous mode [ 664.785078][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.785105][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.815798][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.815828][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.929539][ T3558] veth1_macvtap: left promiscuous mode [ 664.929648][ T3558] veth0_macvtap: left promiscuous mode [ 664.929891][ T3558] veth1_vlan: left promiscuous mode [ 664.930159][ T3558] veth0_vlan: left promiscuous mode [ 665.191954][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3952'. [ 668.053755][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 668.283573][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 668.702683][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.723128][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.725038][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.758032][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.758850][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.819211][ T5818] Bluetooth: hci2: command tx timeout [ 670.983810][ T58] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.063713][T16251] netlink: 'syz.5.3953': attribute type 12 has an invalid length. [ 671.068754][T16260] netlink: 'syz.7.3956': attribute type 12 has an invalid length. [ 671.141104][T10988] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.676007][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3962'. [ 672.701341][T16286] netlink: 'syz.5.3967': attribute type 12 has an invalid length. [ 672.790736][T15931] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 672.892995][ T5818] Bluetooth: hci2: command tx timeout [ 672.897373][T15931] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 672.982256][T16262] chnl_net:caif_netlink_parms(): no params data found [ 672.994635][ T3558] IPVS: stop unused estimator thread 0... [ 673.083392][T15931] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 673.221210][T15931] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 673.440221][T16322] netlink: 'syz.7.3980': attribute type 12 has an invalid length. [ 673.994660][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.994897][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.995121][T16262] bridge_slave_0: entered allmulticast mode [ 673.996950][T16262] bridge_slave_0: entered promiscuous mode [ 673.999873][T16333] netlink: 'syz.7.3981': attribute type 4 has an invalid length. [ 674.051998][T16334] netlink: 'syz.7.3981': attribute type 4 has an invalid length. [ 674.073440][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.073581][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.073808][T16262] bridge_slave_1: entered allmulticast mode [ 674.076890][T16262] bridge_slave_1: entered promiscuous mode [ 674.295708][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.356321][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.481134][T16350] netlink: 'syz.7.3987': attribute type 12 has an invalid length. [ 674.577730][T16348] syzkaller0: entered promiscuous mode [ 674.577760][T16348] syzkaller0: entered allmulticast mode [ 674.676100][T16262] team0: Port device team_slave_0 added [ 674.677481][T16348] tipc: Started in network mode [ 674.677508][T16348] tipc: Node identity 3285818a9079, cluster identity 4711 [ 674.678521][T16348] tipc: Enabled bearer , priority 0 [ 674.679039][T16355] netlink: 'syz.7.3989': attribute type 12 has an invalid length. [ 674.733416][T16345] tipc: Resetting bearer [ 674.914097][T16345] tipc: Disabling bearer [ 674.963101][ T5818] Bluetooth: hci2: command tx timeout [ 675.065820][T16262] team0: Port device team_slave_1 added [ 675.219910][ T37] kauditd_printk_skb: 104 callbacks suppressed [ 675.220465][ T37] audit: type=1326 audit(675.024:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.220525][ T37] audit: type=1326 audit(675.024:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.220572][ T37] audit: type=1326 audit(675.024:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.220618][ T37] audit: type=1326 audit(675.024:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.220663][ T37] audit: type=1326 audit(675.024:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.221375][ T37] audit: type=1326 audit(675.024:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.221481][ T37] audit: type=1326 audit(675.024:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.221876][ T37] audit: type=1326 audit(675.024:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.222058][ T37] audit: type=1326 audit(675.024:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.222467][ T37] audit: type=1326 audit(675.024:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 675.626329][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.626349][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.626377][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.633225][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.633241][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.633266][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.901058][T16380] netlink: 'syz.1.4000': attribute type 12 has an invalid length. [ 675.921208][T16262] hsr_slave_0: entered promiscuous mode [ 675.925356][T16262] hsr_slave_1: entered promiscuous mode [ 676.031186][T16381] syzkaller0: entered promiscuous mode [ 676.031214][T16381] syzkaller0: entered allmulticast mode [ 676.245634][T15931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.247879][T16381] tipc: Started in network mode [ 676.247912][T16381] tipc: Node identity 56cd7dec4fb7, cluster identity 4711 [ 676.248420][T16381] tipc: Enabled bearer , priority 0 [ 677.092600][ T5818] Bluetooth: hci2: command tx timeout [ 677.406256][T16377] tipc: Resetting bearer [ 677.544768][T16377] tipc: Disabling bearer [ 677.707513][ T5887] tipc: Node number set to 427458028 [ 677.960312][ T3558] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.118660][T15931] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.331783][ T3558] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.247862][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.252084][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.332131][ T3558] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.435267][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.435473][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.447224][T16431] syzkaller0: entered promiscuous mode [ 679.447250][T16431] syzkaller0: entered allmulticast mode [ 679.587595][T16433] tipc: Enabled bearer , priority 0 [ 679.616088][ T3558] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.673272][T16428] tipc: Resetting bearer [ 679.795318][T16428] tipc: Disabling bearer [ 680.097749][T16439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4022'. [ 681.222700][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4022'. [ 681.269632][T16449] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4024'. [ 681.366149][T16262] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 681.562245][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 681.562264][ T37] audit: type=1326 audit(681.364:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.590844][ T37] audit: type=1326 audit(681.394:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.616858][ T37] audit: type=1326 audit(681.424:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.617305][ T37] audit: type=1326 audit(681.424:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.617632][ T37] audit: type=1326 audit(681.424:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.619079][ T37] audit: type=1326 audit(681.424:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.619547][ T37] audit: type=1326 audit(681.424:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.619828][ T37] audit: type=1326 audit(681.424:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.620395][ T37] audit: type=1326 audit(681.424:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.620732][ T37] audit: type=1326 audit(681.424:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16455 comm="syz.5.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 681.834237][T16262] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 681.981919][T16262] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 682.203498][T16262] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 682.242571][T16462] tipc: Enabled bearer , priority 0 [ 682.242767][T16466] syzkaller0: entered promiscuous mode [ 682.242790][T16466] syzkaller0: entered allmulticast mode [ 683.041400][T16480] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4034'. [ 683.163332][T16461] tipc: Resetting bearer [ 683.458022][T16461] tipc: Disabling bearer [ 684.531224][ T3558] bridge_slave_1: left allmulticast mode [ 684.531254][ T3558] bridge_slave_1: left promiscuous mode [ 684.531520][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.655489][ T3558] bridge_slave_0: left promiscuous mode [ 684.655768][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.949431][T16522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4048'. [ 685.587627][T16541] netlink: 'syz.5.4058': attribute type 1 has an invalid length. [ 685.587650][T16541] netlink: 'syz.5.4058': attribute type 4 has an invalid length. [ 685.587663][T16541] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4058'. [ 685.588526][T16541] netlink: 'syz.5.4058': attribute type 1 has an invalid length. [ 685.588538][T16541] netlink: 'syz.5.4058': attribute type 4 has an invalid length. [ 685.588544][T16541] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4058'. [ 687.113669][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.193728][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.226332][ T3558] bond0 (unregistering): Released all slaves [ 687.467272][ T3558] tipc: Left network mode [ 687.625372][ T3558] IPVS: stopping backup sync thread 16021 ... [ 688.140144][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 688.140165][ T37] audit: type=1326 audit(687.944:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.140512][ T37] audit: type=1326 audit(687.944:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.141094][ T37] audit: type=1326 audit(687.944:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.141476][ T37] audit: type=1326 audit(687.944:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.183018][ T37] audit: type=1326 audit(687.944:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.304924][ T37] audit: type=1326 audit(688.114:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.305073][ T37] audit: type=1326 audit(688.114:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.307361][ T37] audit: type=1326 audit(688.114:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.307532][ T37] audit: type=1326 audit(688.114:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16581 comm="syz.1.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 688.370722][T16589] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4076'. [ 688.538567][T15931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.744460][T16599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4079'. [ 688.838758][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.082989][ T3558] hsr_slave_0: left promiscuous mode [ 689.123389][ T3558] hsr_slave_1: left promiscuous mode [ 689.124587][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.124615][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.164465][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.164495][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.279912][ T3558] veth1_macvtap: left promiscuous mode [ 689.279982][ T3558] veth0_macvtap: left promiscuous mode [ 689.281239][ T3558] veth1_vlan: left promiscuous mode [ 689.281385][ T3558] veth0_vlan: left promiscuous mode [ 689.805096][ T3558] pim6reg (unregistering): left allmulticast mode [ 690.923378][ T37] audit: type=1326 audit(690.734:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 691.983524][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 692.277635][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 692.359273][T16640] netlink: 'syz.1.4096': attribute type 4 has an invalid length. [ 694.623520][T16611] tipc: Enabling of bearer rejected, failed to enable media [ 694.868896][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.901756][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.901890][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.957859][T10649] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.958015][T10649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.342143][T15931] veth0_vlan: entered promiscuous mode [ 695.416555][T15931] veth1_vlan: entered promiscuous mode [ 695.510917][T15931] veth0_macvtap: entered promiscuous mode [ 695.527137][T15931] veth1_macvtap: entered promiscuous mode [ 695.576808][T15931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.599231][T15931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.632415][ T4041] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.632695][ T4041] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.632738][ T4041] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.632776][ T4041] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.242770][ T1399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.242792][ T1399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.403424][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.503099][ T4041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.503125][ T4041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.631955][T16675] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4104'. [ 697.096671][T16684] syzkaller0: entered promiscuous mode [ 697.096700][T16684] syzkaller0: entered allmulticast mode [ 697.190688][T16691] netlink: 'syz.7.4107': attribute type 4 has an invalid length. [ 697.303456][T16692] tipc: Enabled bearer , priority 0 [ 697.331987][T16683] tipc: Resetting bearer [ 697.459343][T16683] tipc: Disabling bearer [ 697.751542][T16262] veth0_vlan: entered promiscuous mode [ 697.766528][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 697.766549][ T37] audit: type=1326 audit(697.574:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16706 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 697.766710][ T37] audit: type=1326 audit(697.574:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16706 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 697.774015][T16262] veth1_vlan: entered promiscuous mode [ 697.829812][ T37] audit: type=1326 audit(697.604:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16706 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 697.829872][ T37] audit: type=1326 audit(697.614:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16708 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f546b132005 code=0x7ffc0000 [ 697.829920][ T37] audit: type=1326 audit(697.614:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16706 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 697.829964][ T37] audit: type=1326 audit(697.624:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16706 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 697.830006][ T37] audit: type=1326 audit(697.634:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16706 comm="syz.5.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 697.851233][T16262] veth0_macvtap: entered promiscuous mode [ 697.891658][T16262] veth1_macvtap: entered promiscuous mode [ 697.950900][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.978843][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.032399][ T3534] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.032453][ T3534] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.032490][ T3534] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.032523][ T3534] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.186183][T16713] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4115'. [ 698.929268][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.929290][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.162205][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.162229][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.649628][T16741] syzkaller0: entered promiscuous mode [ 700.649658][T16741] syzkaller0: entered allmulticast mode [ 700.740553][T16750] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4129'. [ 700.936821][T16731] tipc: Enabled bearer , priority 0 [ 700.973629][T16730] tipc: Resetting bearer [ 701.196320][T16730] tipc: Disabling bearer [ 701.495811][ T37] audit: type=1326 audit(701.304:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 701.497635][ T37] audit: type=1326 audit(701.304:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 701.499617][ T37] audit: type=1326 audit(701.304:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546b0ff749 code=0x7ffc0000 [ 702.013897][T16782] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 702.220528][T16792] syzkaller0: entered promiscuous mode [ 702.220556][T16792] syzkaller0: entered allmulticast mode [ 702.805530][T16798] tipc: Enabled bearer , priority 0 [ 702.818687][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4149'. [ 703.174594][T16791] tipc: Resetting bearer [ 703.203366][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 703.357781][T16791] tipc: Disabling bearer [ 707.905321][T16910] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4193'. [ 707.905353][T16910] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4193'. [ 708.752447][T16931] random: crng reseeded on system resumption [ 709.296321][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 709.296343][ T37] audit: type=1326 audit(709.094:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16944 comm="syz.9.4207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2af27bf749 code=0x0 [ 709.463043][ T37] audit: type=1326 audit(709.244:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.463113][ T37] audit: type=1326 audit(709.244:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.463163][ T37] audit: type=1326 audit(709.244:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.463212][ T37] audit: type=1326 audit(709.244:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.463262][ T37] audit: type=1326 audit(709.244:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.463311][ T37] audit: type=1326 audit(709.244:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.466283][ T37] audit: type=1326 audit(709.274:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.466728][ T37] audit: type=1326 audit(709.274:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.469403][ T37] audit: type=1326 audit(709.274:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16951 comm="syz.1.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 709.786717][T16953] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.008309][T16953] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.260040][T16953] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.325922][T16972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4217'. [ 710.597053][T16953] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.301678][T16992] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4223'. [ 713.354076][ T3534] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.388445][ T3534] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.434127][ T153] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.500985][ T153] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.527698][T17000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4229'. [ 713.808948][T17006] netlink: 'syz.7.4231': attribute type 12 has an invalid length. [ 714.345525][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 714.345544][ T37] audit: type=1326 audit(714.154:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17021 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 714.346006][ T37] audit: type=1326 audit(714.154:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17021 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 714.352868][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4240'. [ 714.573314][T17034] netlink: 'syz.5.4244': attribute type 12 has an invalid length. [ 714.684307][T17041] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4247'. [ 714.952905][T17051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4252'. [ 715.225854][T17061] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4258'. [ 715.405201][T17063] netlink: 'syz.7.4257': attribute type 12 has an invalid length. [ 715.718434][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4265'. [ 715.901311][T17087] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4269'. [ 716.043984][T17093] netlink: 'syz.5.4272': attribute type 12 has an invalid length. [ 716.270896][T17102] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4278'. [ 716.524983][T17116] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4282'. [ 716.837413][T17123] netlink: 'syz.6.4285': attribute type 12 has an invalid length. [ 722.474897][T17222] netlink: 'syz.1.4327': attribute type 4 has an invalid length. [ 722.477035][T17222] netlink: 'syz.1.4327': attribute type 4 has an invalid length. [ 725.092428][T17266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4346'. [ 725.266883][T17276] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4349'. [ 725.621288][T17294] ..@ÿ: renamed from bond_slave_0 (while UP) [ 725.883072][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4365'. [ 726.427784][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4378'. [ 727.139801][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4391'. [ 730.588396][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 730.615244][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 730.617064][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 730.619045][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 730.620323][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 731.706254][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4431'. [ 731.811819][T17456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.811852][T17456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.830073][T17460] netlink: 'syz.1.4432': attribute type 4 has an invalid length. [ 731.859837][T17456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.859868][T17456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.882973][T17461] netlink: 'syz.1.4432': attribute type 4 has an invalid length. [ 732.643013][ T5819] Bluetooth: hci5: command tx timeout [ 732.759153][T17438] chnl_net:caif_netlink_parms(): no params data found [ 733.092425][ T37] audit: type=1326 audit(732.894:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17480 comm="syz.1.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 733.121060][ T37] audit: type=1326 audit(732.924:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17480 comm="syz.1.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 733.121265][ T37] audit: type=1326 audit(732.924:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17480 comm="syz.1.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 733.122244][ T37] audit: type=1326 audit(732.924:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17480 comm="syz.1.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 733.122434][ T37] audit: type=1326 audit(732.924:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17480 comm="syz.1.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 733.127579][ T37] audit: type=1326 audit(732.934:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17480 comm="syz.1.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacdbaf749 code=0x7ffc0000 [ 733.391822][ T37] audit: type=1107 audit(733.194:3380): pid=17487 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 733.457051][T17438] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.457827][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.458052][T17438] bridge_slave_0: entered allmulticast mode [ 733.467413][T17438] bridge_slave_0: entered promiscuous mode [ 733.484135][T17438] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.484331][T17438] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.484522][T17438] bridge_slave_1: entered allmulticast mode [ 733.489739][T17438] bridge_slave_1: entered promiscuous mode [ 733.750831][T17438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.770679][T17438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.134016][T17438] team0: Port device team_slave_0 added [ 734.137328][T17438] team0: Port device team_slave_1 added [ 734.264500][T17505] syzkaller0: entered promiscuous mode [ 734.264524][T17505] syzkaller0: entered allmulticast mode [ 734.500595][T17438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.500608][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.500631][T17438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.513204][T17438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.513221][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.513247][T17438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.722965][ T5819] Bluetooth: hci5: command tx timeout [ 735.179599][T17438] hsr_slave_0: entered promiscuous mode [ 735.182108][T17438] hsr_slave_1: entered promiscuous mode [ 735.193171][T17526] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4456'. [ 735.205567][T17438] debugfs: 'hsr0' already exists in 'hsr' [ 735.205596][T17438] Cannot create hsr debugfs directory [ 735.329481][ T3558] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.746040][ T3558] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.942026][T17543] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4464'. [ 735.963837][T17541] syzkaller0: entered promiscuous mode [ 735.963865][T17541] syzkaller0: entered allmulticast mode [ 736.180218][ T3558] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.253338][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4468'. [ 736.258670][T17552] bridge_slave_1: left allmulticast mode [ 736.258696][T17552] bridge_slave_1: left promiscuous mode [ 736.258957][T17552] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.385149][T17552] bridge_slave_0: left allmulticast mode [ 736.385184][T17552] bridge_slave_0: left promiscuous mode [ 736.385483][T17552] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.804262][ T5819] Bluetooth: hci5: command tx timeout [ 737.328529][T17566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4474'. [ 737.330684][ T3558] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.696972][T17574] netlink: 'syz.5.4478': attribute type 12 has an invalid length. [ 738.514338][T17588] syzkaller0: entered promiscuous mode [ 738.514372][T17588] syzkaller0: entered allmulticast mode [ 738.644020][ T3558] bridge_slave_1: left allmulticast mode [ 738.644055][ T3558] bridge_slave_1: left promiscuous mode [ 738.644334][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.739930][ T3558] bridge_slave_0: left allmulticast mode [ 738.739964][ T3558] bridge_slave_0: left promiscuous mode [ 738.740265][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.885279][ T5819] Bluetooth: hci5: command tx timeout [ 741.423634][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.485610][ T5977] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 741.486203][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.543716][ T3558] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 741.588153][ T3558] bond0 (unregistering): Released all slaves [ 741.623804][ T5977] usb 7-1: device descriptor read/64, error -71 [ 741.873056][ T5977] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 742.002970][ T5977] usb 7-1: device descriptor read/64, error -71 [ 742.113667][ T5977] usb usb7-port1: attempt power cycle [ 742.462972][ T5977] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 742.524279][ T5977] usb 7-1: device descriptor read/8, error -71 [ 742.792962][ T5977] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 742.821654][ T5977] usb 7-1: device descriptor read/8, error -71 [ 742.899010][T17636] syzkaller0: entered promiscuous mode [ 742.899040][T17636] syzkaller0: entered allmulticast mode [ 742.946926][ T5977] usb usb7-port1: unable to enumerate USB device [ 743.092467][ T37] audit: type=1326 audit(742.894:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.092534][ T37] audit: type=1326 audit(742.894:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.138908][ T37] audit: type=1326 audit(742.944:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.139217][ T37] audit: type=1326 audit(742.944:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.140122][ T37] audit: type=1326 audit(742.944:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.140377][ T37] audit: type=1326 audit(742.944:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.141173][ T37] audit: type=1326 audit(742.944:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.141341][ T37] audit: type=1326 audit(742.944:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.142176][ T37] audit: type=1326 audit(742.944:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.207764][ T37] audit: type=1326 audit(742.944:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17638 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 743.251082][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.251111][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.295395][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.295422][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.386586][ T3558] veth1_macvtap: left promiscuous mode [ 743.386702][ T3558] veth0_macvtap: left promiscuous mode [ 746.080862][T17689] netlink: 220 bytes leftover after parsing attributes in process `syz.9.4530'. [ 746.195397][T17693] netlink: 'syz.9.4532': attribute type 1 has an invalid length. [ 746.195414][T17693] netlink: 'syz.9.4532': attribute type 4 has an invalid length. [ 746.195422][T17693] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4532'. [ 746.196033][T17693] netlink: 'syz.9.4532': attribute type 1 has an invalid length. [ 746.196044][T17693] netlink: 'syz.9.4532': attribute type 4 has an invalid length. [ 746.196050][T17693] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4532'. [ 746.252776][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 749.313281][T17720] netlink: 'syz.6.4545': attribute type 12 has an invalid length. [ 749.881861][T17739] netlink: 'syz.1.4552': attribute type 10 has an invalid length. [ 749.896621][T17739] team0: Port device dummy0 added [ 749.902527][T17738] bridge0: port 3(gretap0) entered blocking state [ 749.902777][T17738] bridge0: port 3(gretap0) entered disabled state [ 749.923216][T17738] gretap0: entered allmulticast mode [ 749.939820][T17739] netlink: 'syz.1.4552': attribute type 10 has an invalid length. [ 749.962353][T17738] gretap0: entered promiscuous mode [ 749.969174][T17738] bridge0: port 3(gretap0) entered blocking state [ 749.969359][T17738] bridge0: port 3(gretap0) entered forwarding state [ 749.986783][T17740] netlink: 'syz.6.4550': attribute type 13 has an invalid length. [ 750.053784][T17739] team0: Port device dummy0 removed [ 750.058853][T17739] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 750.427036][T17740] bridge0: port 3(gretap0) entered disabled state [ 750.744686][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.748346][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.781745][T17756] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4558'. [ 750.781764][T17756] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4558'. [ 751.457062][T17740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.481219][T17740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.863107][ T3500] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.943777][ T3500] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.113183][ T3500] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.173356][ T3500] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.218811][T17438] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 753.258612][T17438] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 753.356479][T17438] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 753.417485][T17438] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 753.815612][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 753.894294][T17438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.969691][T17438] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.989385][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.990459][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.017094][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.020479][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.038729][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4581'. [ 754.050300][ T37] kauditd_printk_skb: 108 callbacks suppressed [ 754.050321][ T37] audit: type=1326 audit(753.854:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.050649][ T37] audit: type=1326 audit(753.854:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.051078][ T37] audit: type=1326 audit(753.854:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.051418][ T37] audit: type=1326 audit(753.854:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.051566][ T37] audit: type=1326 audit(753.854:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.051828][ T37] audit: type=1326 audit(753.854:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.054931][ T37] audit: type=1326 audit(753.864:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.055352][ T37] audit: type=1326 audit(753.864:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.055803][ T37] audit: type=1326 audit(753.864:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 754.056089][ T37] audit: type=1326 audit(753.864:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17811 comm="syz.9.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2af27bf749 code=0x7ffc0000 [ 755.100607][T17438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.568374][T17853] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 755.568397][T17853] netlink: 'syz.1.4595': attribute type 4 has an invalid length. [ 755.568410][T17853] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4595'. [ 755.570459][T17853] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 755.570478][T17853] netlink: 'syz.1.4595': attribute type 4 has an invalid length. [ 755.570489][T17853] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4595'. [ 756.039011][T17438] veth0_vlan: entered promiscuous mode [ 756.069531][T17438] veth1_vlan: entered promiscuous mode [ 756.206316][T17438] veth0_macvtap: entered promiscuous mode [ 756.237763][T17438] veth1_macvtap: entered promiscuous mode [ 756.337854][T17438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.399599][T17438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.469271][ T3558] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.469324][ T3558] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.469373][ T3558] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.469410][ T3558] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.028392][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.028415][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.117940][T10988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.117963][T10988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.143637][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4604'. [ 757.797503][T17893] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4608'. [ 757.797534][T17893] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4608'. [ 759.586274][T17905] syzkaller1: entered promiscuous mode [ 759.586323][T17905] syzkaller1: entered allmulticast mode [ 759.587251][T17910] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 761.122095][T17945] netlink: 'syz.6.4628': attribute type 10 has an invalid length. [ 761.139369][T17945] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 761.246900][T17947] serio: Serial port ptm0 [ 761.264267][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4627'. [ 761.439357][T17947] serio: Serial port ptm0 [ 761.825008][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 761.825028][ T37] audit: type=1326 audit(761.634:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a367f749 code=0x7ffc0000 [ 761.825382][ T37] audit: type=1326 audit(761.634:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a367f749 code=0x7ffc0000 [ 761.826026][ T37] audit: type=1326 audit(761.634:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fb8a367f749 code=0x7ffc0000 [ 761.826406][ T37] audit: type=1326 audit(761.634:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a367f749 code=0x7ffc0000 [ 761.826801][ T37] audit: type=1326 audit(761.634:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17963 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a367f749 code=0x7ffc0000 [ 763.565514][T17987] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 763.565538][T17987] netlink: 'syz.1.4645': attribute type 4 has an invalid length. [ 763.565561][T17987] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4645'. [ 763.566545][T17987] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 763.566582][T17987] netlink: 'syz.1.4645': attribute type 4 has an invalid length. [ 763.566595][T17987] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4645'. [ 763.906057][ T37] audit: type=1107 audit(763.714:3522): pid=17990 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 764.193158][T17813] Set syz1 is full, maxelem 65536 reached [ 764.606775][T18012] netlink: 'syz.7.4657': attribute type 1 has an invalid length. [ 764.606802][T18012] netlink: 'syz.7.4657': attribute type 4 has an invalid length. [ 764.606816][T18012] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4657'. [ 764.609732][T18012] netlink: 'syz.7.4657': attribute type 1 has an invalid length. [ 764.609750][T18012] netlink: 'syz.7.4657': attribute type 4 has an invalid length. [ 764.609764][T18012] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4657'. [ 765.107118][T17997] sctp: [Deprecated]: syz.1.4650 (pid 17997) Use of int in maxseg socket option. [ 765.107118][T17997] Use struct sctp_assoc_value instead [ 765.424835][T18037] netlink: 'syz.7.4669': attribute type 1 has an invalid length. [ 765.424862][T18037] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4669'. [ 765.433915][T18032] Falling back ldisc for ttyS3. [ 765.443176][T18037] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4669'. [ 765.653807][T18047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4670'. [ 766.491694][T18073] validate_nla: 3 callbacks suppressed [ 766.491716][T18073] netlink: 'syz.5.4685': attribute type 1 has an invalid length. [ 766.491731][T18073] netlink: 'syz.5.4685': attribute type 4 has an invalid length. [ 766.491744][T18073] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4685'. [ 766.522717][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4686'. [ 766.535004][T18073] netlink: 'syz.5.4685': attribute type 1 has an invalid length. [ 766.535026][T18073] netlink: 'syz.5.4685': attribute type 4 has an invalid length. [ 766.535041][T18073] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4685'. [ 767.199052][T18103] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4697'. [ 767.231579][T18104] netlink: 'syz.5.4698': attribute type 10 has an invalid length. [ 767.231602][T18104] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4698'. [ 767.377922][T18102] bridge_slave_0: left allmulticast mode [ 767.377946][T18102] bridge_slave_0: left promiscuous mode [ 767.378113][T18102] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.487039][T18102] bridge_slave_1: left allmulticast mode [ 767.487072][T18102] bridge_slave_1: left promiscuous mode [ 767.487365][T18102] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.594158][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4700'. [ 767.614670][T18102] bond0: (slave ..@ÿ): Releasing backup interface [ 767.704202][T18102] bond0: (slave bond_slave_1): Releasing backup interface [ 767.790516][T18102] team0: Port device team_slave_0 removed [ 767.831430][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4705'. [ 767.833488][T18102] team0: Port device team_slave_1 removed [ 767.834626][T18102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.834662][T18102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.834981][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4705'. [ 767.885324][T18102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.885355][T18102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.937775][T18102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 767.942059][T18104] batman_adv: batadv0: Adding interface: virt_wifi0 [ 767.942077][T18104] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.947883][T18104] batman_adv: batadv0: Interface activated: virt_wifi0 [ 769.762916][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 770.068046][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4726'. [ 770.105619][T18172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4727'. [ 770.256360][ T6401] IPVS: starting estimator thread 0... [ 770.343006][T18183] IPVS: using max 7 ests per chain, 16800 per kthread [ 770.682968][ T6401] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 770.812939][ T6401] usb 2-1: device descriptor read/64, error -71 [ 771.063112][ T6401] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 771.192932][ T6401] usb 2-1: device descriptor read/64, error -71 [ 771.313414][ T6401] usb usb2-port1: attempt power cycle [ 771.528993][T18228] __nla_validate_parse: 3 callbacks suppressed [ 771.529014][T18228] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4737'. [ 771.529035][T18228] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4737'. [ 771.696130][ T6401] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 772.023895][ T6401] usb 2-1: device descriptor read/8, error -71 [ 772.392944][ T6401] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 772.402691][T18239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4754'. [ 772.420172][ T6401] usb 2-1: device descriptor read/8, error -71 [ 773.081010][ T6401] usb usb2-port1: unable to enumerate USB device [ 773.143037][ T37] audit: type=1326 audit(772.934:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0bb3f749 code=0x7ffc0000 [ 773.143101][ T37] audit: type=1326 audit(772.934:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8b0bb3f749 code=0x7ffc0000 [ 773.143148][ T37] audit: type=1326 audit(772.934:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0bb3f749 code=0x7ffc0000 [ 773.143191][ T37] audit: type=1326 audit(772.944:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b0bb3df90 code=0x7ffc0000 [ 773.143237][ T37] audit: type=1326 audit(772.944:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8b0bb40f77 code=0x7ffc0000 [ 773.143284][ T37] audit: type=1326 audit(772.944:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b0bb3f749 code=0x7ffc0000 [ 773.143330][ T37] audit: type=1326 audit(772.944:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8b0bb40f77 code=0x7ffc0000 [ 773.143614][ T37] audit: type=1326 audit(772.954:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b0bb3e3aa code=0x7ffc0000 [ 773.144087][ T37] audit: type=1326 audit(772.954:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0bb3f749 code=0x7ffc0000 [ 773.153129][ T37] audit: type=1326 audit(772.954:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18240 comm="syz.7.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b0bb3f749 code=0x7ffc0000 [ 773.667377][T18252] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4759'. [ 774.067218][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4767'. [ 774.711018][T18279] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 774.711044][T18279] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 18279, name: syz.6.4772 [ 774.711064][T18279] preempt_count: 2, expected: 0 [ 774.711075][T18279] RCU nest depth: 1, expected: 1 [ 774.711084][T18279] 3 locks held by syz.6.4772/18279: [ 774.711097][T18279] #0: ffff8880606e43d8 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xd40 [ 774.711180][T18279] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 774.711237][T18279] #2: ffff8880b893fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 774.711295][T18279] Preemption disabled at: [ 774.711301][T18279] [] __slab_alloc+0xea/0x1f0 [ 774.711334][T18279] CPU: 1 UID: 0 PID: 18279 Comm: syz.6.4772 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 774.711358][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.711372][T18279] Call Trace: [ 774.711380][T18279] [ 774.711390][T18279] dump_stack_lvl+0xe8/0x150 [ 774.711422][T18279] __might_resched+0x32a/0x480 [ 774.711448][T18279] ? __slab_alloc+0xea/0x1f0 [ 774.711474][T18279] rt_spin_lock+0xc7/0x3e0 [ 774.711507][T18279] ? __pfx_rt_spin_lock+0x10/0x10 [ 774.711535][T18279] ? __lock_acquire+0x6b6/0x2cf0 [ 774.711569][T18279] ? __lock_acquire+0x6b6/0x2cf0 [ 774.711602][T18279] ___slab_alloc+0x12f/0x13e0 [ 774.711630][T18279] ? unwind_next_frame+0xa5/0x23d0 [ 774.711657][T18279] ? lock_acquire+0x107/0x340 [ 774.711684][T18279] ? __bpf_stream_push_str+0xa8/0x2b0 [ 774.711711][T18279] __slab_alloc+0xc6/0x1f0 [ 774.711734][T18279] ? __bpf_stream_push_str+0xa8/0x2b0 [ 774.711759][T18279] kmalloc_nolock_noprof+0x1be/0x440 [ 774.711790][T18279] ? __bpf_stream_push_str+0xa8/0x2b0 [ 774.711817][T18279] __bpf_stream_push_str+0xa8/0x2b0 [ 774.711836][T18279] ? __asan_memcpy+0x40/0x70 [ 774.711867][T18279] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 774.711902][T18279] bpf_stream_stage_printk+0x14e/0x1c0 [ 774.711921][T18279] ? __pfx_find_from_stack_cb+0x10/0x10 [ 774.711947][T18279] ? arch_bpf_stack_walk+0x112/0x170 [ 774.711985][T18279] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 774.712025][T18279] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 774.712048][T18279] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 774.712069][T18279] ? irqentry_exit+0x5dd/0x660 [ 774.712089][T18279] ? trace_irq_disable+0x37/0x100 [ 774.712117][T18279] ? read_tsc+0x9/0x20 [ 774.712151][T18279] bpf_check_timed_may_goto+0xaa/0xb0 [ 774.712189][T18279] arch_bpf_timed_may_goto+0x21/0x40 [ 774.712217][T18279] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 774.712242][T18279] bpf_trace_run9+0x2de/0x510 [ 774.712269][T18279] ? bpf_trace_run9+0x1ec/0x510 [ 774.712294][T18279] ? __pfx_bpf_trace_run9+0x10/0x10 [ 774.712346][T18279] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 774.712386][T18279] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 774.712409][T18279] ? kmem_cache_alloc_node_noprof+0x292/0x6f0 [ 774.712458][T18279] ? __alloc_skb+0x27e/0x3a0 [ 774.712494][T18279] ? do_raw_spin_lock+0x121/0x290 [ 774.712528][T18279] virtio_transport_alloc_skb+0x10af/0x1110 [ 774.712576][T18279] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 774.712608][T18279] ? __local_bh_enable+0x1e2/0x2f0 [ 774.712646][T18279] virtio_transport_send_pkt_info+0x694/0x10b0 [ 774.712699][T18279] virtio_transport_connect+0xa7/0x100 [ 774.712728][T18279] ? __pfx_virtio_transport_connect+0x10/0x10 [ 774.712761][T18279] ? __pfx_vsock_auto_bind+0x10/0x10 [ 774.712799][T18279] ? vsock_assign_transport+0x672/0x7f0 [ 774.712833][T18279] vsock_connect+0xaca/0xd40 [ 774.712872][T18279] ? __might_fault+0xb0/0x130 [ 774.712905][T18279] ? __might_fault+0xb0/0x130 [ 774.712936][T18279] ? __pfx_vsock_connect+0x10/0x10 [ 774.712972][T18279] ? __pfx_autoremove_wake_function+0x10/0x10 [ 774.713010][T18279] ? bpf_lsm_socket_connect+0x9/0x20 [ 774.713044][T18279] __sys_connect+0x323/0x450 [ 774.713073][T18279] ? __pfx___sys_connect+0x10/0x10 [ 774.713111][T18279] ? rcu_is_watching+0x15/0xb0 [ 774.713156][T18279] __x64_sys_connect+0x7a/0x90 [ 774.713182][T18279] do_syscall_64+0xec/0xf80 [ 774.713203][T18279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.713225][T18279] ? trace_irq_disable+0x37/0x100 [ 774.713247][T18279] ? clear_bhb_loop+0x60/0xb0 [ 774.713274][T18279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.713295][T18279] RIP: 0033:0x7fb8a367f749 [ 774.713315][T18279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.713334][T18279] RSP: 002b:00007fb8a18de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 774.713357][T18279] RAX: ffffffffffffffda RBX: 00007fb8a38d5fa0 RCX: 00007fb8a367f749 [ 774.713374][T18279] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 774.713389][T18279] RBP: 00007fb8a3703f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.713403][T18279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.713416][T18279] R13: 00007fb8a38d6038 R14: 00007fb8a38d5fa0 R15: 00007ffe68132168 [ 774.713453][T18279] [ 775.417047][T18292] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4765'. [ 775.417078][T18292] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4765'.