last executing test programs: 3m55.489304465s ago: executing program 4 (id=316): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioperm(0x4, 0x1, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000180), &(0x7f0000000580)}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x80000001, 0x20000000, 0x81, 0x3ff}, 0xb, 0x2}, [{0x6, 0x7fffffff, 0x9, 0xffffffff, 0x6a3, 0x1}, {0x6, 0x8, 0x3, 0x8, 0x8, 0x1}, {0x364b, 0x612e1579, 0x7, 0x3, 0x6, 0x7}, {0x4, 0x3, 0x2, 0x1ff, 0x7, 0x800003}, {0x2, 0x7, 0x67, 0x43e4dbe5, 0x0, 0x2000000}, {0xffffffff, 0x9, 0x18f, 0x3, 0x80000001}, {0x101, 0xfcb, 0x9, 0x7, 0x1, 0xf4d}, {0x80000001, 0x50000, 0x3, 0xff, 0x10, 0x80000001}, {0x3, 0x4, 0x471, 0x9, 0x4, 0x10}, {0x5, 0x7ff, 0x6, 0xcc6e, 0x3, 0x100}, {0x10001, 0x6, 0x1, 0x400, 0xb0a, 0x9}, {0x89a, 0x327a, 0xffff, 0x9, 0x4, 0x4}, {0xfffffffb, 0x6, 0x8, 0x2, 0xa760, 0x8}, {0x1004, 0x101, 0x5, 0xffff, 0x7}, {0x3, 0x5, 0x2, 0x2, 0x80000001, 0x7}, {0x1, 0x2, 0x3, 0x687, 0x1, 0x2000000}, {0x5, 0x7, 0x28632380, 0x0, 0x401, 0x101}, {0x5, 0xfffffffa, 0xde6, 0x6, 0x1871, 0x16000}, {0x655, 0x965, 0x0, 0xfb40, 0x7d60, 0x6}, {0x3ff, 0x3, 0x9, 0x4, 0x1, 0x14eb6124}, {0x0, 0x5f1b7e47, 0x100, 0x8, 0xea4, 0xe}, {0x1000, 0x6, 0xfffffffe, 0x9, 0x0, 0x80000001}, {0x7, 0x5, 0x5, 0x5, 0x40}, {0x4, 0x2, 0x7, 0x5, 0x2bb, 0x84a3}, {0xff, 0x9, 0x6, 0x5, 0x6, 0x69}, {0x2, 0x1, 0x27, 0x1, 0x6, 0x2}, {0x9, 0x0, 0x1800, 0x3, 0x7fff, 0x3}, {0x1, 0x0, 0x5, 0x6, 0xffffffff, 0xd}, {0x9, 0x6, 0x80000001, 0xa, 0x5, 0x10}, {0xb, 0x7fff, 0xf573, 0xb, 0x0, 0xbf}, {0xfffffffe, 0x2, 0x6, 0x0, 0x20, 0xf1ab}, {0x7fff, 0x80000001, 0xa77b, 0x4, 0x40, 0x9}, {0x3c, 0xe, 0xc9, 0xb1, 0x4, 0x71}, {0x3, 0xbb0f, 0x3, 0x0, 0x7f, 0x4}, {0x7, 0xfff, 0xc7d, 0xfd4, 0x1af3, 0xd}, {0x3, 0x1ec6, 0x3d9, 0x264, 0x5, 0x2}, {0x8, 0x5, 0xfffffffd, 0x9, 0xfffffffe, 0xd}, {0x99, 0x5, 0x30a2, 0x1, 0x3ac0abda, 0xfffffffa}, {0x2e, 0x200, 0xffffff2b, 0x2, 0x3, 0x7}, {0x7, 0xfffff001, 0x8, 0x40, 0x2, 0x8000000}, {0x9, 0x80000001, 0x7ff, 0x388, 0x2, 0x3}, {0x2, 0x400, 0xffffffff, 0xa, 0x4, 0x3aa30000}, {0x8, 0xf, 0x4, 0x6, 0x9}, {0x7, 0x6, 0xc5ec, 0x1, 0x1, 0x2}, {0xfffffb5c, 0x6, 0x4, 0x8, 0x72, 0x1}, {0x3, 0xa9, 0x3, 0x8, 0x6, 0x37}, {0x9, 0x1, 0x1, 0xa, 0x8000, 0x3}, {0x0, 0x6, 0x8, 0xaef, 0x8, 0x1}, {0x1, 0xda3d, 0xfffffff8, 0xfffffffd, 0x6, 0x5}, {0x1, 0xffffffff, 0x1, 0x3e, 0xe, 0x65}, {0x400, 0x5, 0x6, 0x2, 0x500, 0x8}, {0x18, 0xfffffffe, 0xe, 0x7, 0x800, 0x80000}, {0x0, 0xd, 0x8, 0x9, 0xfffffffd, 0x8}, {0x5, 0x7, 0x8, 0x0, 0x9, 0x6}, {0x6, 0x0, 0x2, 0x1, 0x1, 0x6}, {0x5, 0xffff68aa, 0x0, 0x10040, 0x7, 0x9}, {0x8, 0x0, 0x4, 0x0, 0x867, 0x2}, {0x5, 0x7, 0x4, 0x9, 0x7, 0x7}, {0x0, 0x9f1f, 0xffffff01, 0x8, 0x9ea, 0x4}, {0x7ff, 0x2, 0xfff, 0x6, 0xfffffff8, 0x50000}, {0x7f, 0x9, 0x2, 0x6cd, 0x1ff, 0xeaa}, {0x52, 0x6, 0x800, 0x28, 0xfff, 0xa24}, {0x3, 0xa, 0x6, 0x800, 0x3, 0x4942}, {0x1, 0x38f, 0x14, 0x5, 0xffffffff, 0x2}, {0x0, 0x6, 0x3, 0x9, 0xfd6a, 0x3}, {0x1000, 0x8, 0x6, 0xfffffffd, 0x6, 0x3}, {0x10, 0x800, 0xbd, 0xfff, 0x1, 0x7}, {0x6, 0x8, 0x2, 0x6, 0xa4, 0x4f08}, {0xec3a, 0x401, 0x8, 0x1c9, 0x7f, 0xfffffffb}, {0x40, 0x7, 0x7, 0x401, 0xb}, {0x9, 0x800, 0x5, 0xfffffffc, 0x3, 0x8}, {0x101, 0x2, 0xa7f, 0x4, 0xc, 0xfffffffd}, {0x9, 0x63ea, 0xffff8cd9, 0x4, 0x2, 0xfffffffb}, {0x200, 0x4, 0xb, 0x9e2c, 0xe, 0x1000}, {0x9, 0x9, 0x7ff, 0x0, 0x576}, {0x2, 0x9, 0xc, 0x8, 0x2, 0x6}, {0x0, 0x7, 0x4, 0x9, 0x2, 0xa2b7}, {0x7, 0x6, 0x1, 0x5, 0xb, 0x3}, {0x7fff, 0x100, 0x3, 0x8, 0x6, 0xe1920}, {0x4, 0x3b61, 0x2, 0x6891, 0xf, 0x800}, {0x3, 0x3, 0x8, 0x5, 0x240, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0xb4}, {0x6, 0x7f, 0xff, 0x10, 0x0, 0xc}, {0xc, 0x800, 0x10000, 0x0, 0xfffffffb}, {0x4, 0x8, 0x4, 0x0, 0x31, 0x9}, {0x0, 0x9, 0xcd8, 0x0, 0x7}, {0xd6, 0x448, 0x4, 0x8, 0xb}, {0x10001, 0x21, 0x6, 0x1, 0x6, 0x2000000}, {0xb, 0x2, 0x7, 0x800, 0x4f3e, 0x8}, {0x9, 0x7d, 0x101, 0x1, 0x5f, 0x6}, {0xfffffff9, 0xcf3, 0x9, 0x2, 0x9, 0x2}, {0x8001, 0x1000, 0x8, 0x6, 0x1, 0x84b5}, {0x7, 0xffffff80, 0xcb, 0x784, 0x5, 0xb5ee}, {0x6, 0x0, 0x7, 0xfffffffc, 0x0, 0x2}, {0xa, 0x3, 0x6, 0x3, 0x8, 0x80000000}, {0x8, 0xe, 0x4, 0xffffffff, 0x8, 0xb3}, {0x5, 0x6, 0x400, 0x73, 0x0, 0x4}, {0x3, 0x9, 0x6, 0x6, 0x1000, 0x100}, {0xffff, 0x0, 0x30f0, 0x2, 0x8, 0xffffffff}, {0x8, 0x0, 0x7, 0x5, 0x6, 0xb63}, {0x4, 0xada, 0x6, 0x3, 0x6, 0x75333cdc}, {0x0, 0x6, 0x1, 0xffffffff, 0x4f38, 0x9}, {0x6, 0x3ff, 0xa34, 0x2, 0x7, 0x4}, {0xffff249d, 0x9, 0x9, 0x7ff, 0x7, 0x1}, {0x9fa3, 0x0, 0x3, 0x6, 0x1, 0x9}, {0x6, 0x4, 0x86, 0x8000000, 0x2000008, 0x7fffffff}, {0x10000, 0x4, 0x10, 0xc348, 0x8001, 0x4}, {0x1000, 0x4d77, 0x70, 0x7fffffff, 0x2, 0xd2}, {0x40, 0xffff9014, 0x6c200, 0x5, 0x6, 0x7}, {0xfff, 0x4, 0xbb23, 0x7, 0x2, 0x5}, {0x86, 0x22cd, 0x8, 0x5, 0x7, 0xfffffffa}, {0x5, 0xb, 0x8, 0x8, 0x8, 0x100}, {0x101, 0x400, 0xada, 0x6, 0x80000800, 0x124a}, {0x4, 0xc6e, 0xac, 0x4, 0x65, 0x1}, {0x10001, 0x4, 0x5, 0x4, 0x5}, {0xdd, 0x81, 0x1, 0x5, 0x652a6abe, 0x2}, {0xfffffeff, 0x2, 0x7, 0x4, 0x8000, 0x4}, {0xdb, 0x0, 0x8, 0x10000, 0x8, 0x5}, {0x4, 0x9, 0xb, 0x0, 0x0, 0x20fa}, {0xa, 0x2, 0x3, 0x6, 0x8, 0xb9}, {0xfffff54e, 0xfff, 0xe, 0x1, 0x0, 0x4}, {0xff, 0x9, 0x6, 0x1a5d1526, 0xfffffffd, 0x3}, {0x7fff, 0x1000, 0x324, 0x4, 0x80000000, 0x80000000}, {0xffff, 0x8, 0x8, 0x9, 0xffff, 0x3}, {0x7, 0x1, 0xa2f2, 0xa0, 0x8, 0x8}, {0x6, 0x2, 0x1000, 0x0, 0x2d1a, 0xc00}, {0x5, 0x3, 0x101, 0xe, 0x491f, 0x9}, {0x2, 0x8, 0x3, 0x4, 0x8}], [{0x2, 0x1}, {0x4, 0x1}, {0xa}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x6}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x3}, {}, {0x4}, {0x5, 0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x3}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x5f52890cc5ecaef4}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {0x4}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x6d8294d27eb69e37}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x5}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) pipe2$watch_queue(&(0x7f0000000700), 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x6}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000001140)={0xa, 0x5e21, 0x7, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x40}}], 0x1, 0x44951) 3m52.324012782s ago: executing program 4 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x4, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m51.474529473s ago: executing program 4 (id=330): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x2, 0x3, 0x20420, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x5}, 0xfffffea7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x4, 0x5, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x5, 0x0, 0xf439}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x1c10c1, 0x9c37611dc13d0d23) fchown(r5, 0x0, 0xee01) 3m45.866342242s ago: executing program 4 (id=353): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000050) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_create1(0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x58139520, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 3m45.625968063s ago: executing program 4 (id=356): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 3m44.380041675s ago: executing program 4 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000c1ed4f42968489cf2c174078a6000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a300000000014"], 0x68}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x6d}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_emit_ethernet(0x249b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) 3m28.252665736s ago: executing program 32 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000c1ed4f42968489cf2c174078a6000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a300000000014"], 0x68}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x6d}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_emit_ethernet(0x249b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) 8.571470306s ago: executing program 6 (id=1589): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000d40)={0x6, {{0x2, 0x4e20, @multicast1}}, 0x1}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 5.64854199s ago: executing program 5 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002d40)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @ipv6=@icmpv6={0x4, 0x6, "e0f9f3", 0xeb6, 0x3a, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0xe}, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x22, 0x2, "3a6b82d1128e98ef918e43d7600a0cc0c1"}, {0x4}, {0x1, 0x1d1, "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"}]}}}}, 0xeec) 5.350983946s ago: executing program 2 (id=1602): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x10000, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000002}, 0x8, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.199671255s ago: executing program 5 (id=1604): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c00000400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.094720972s ago: executing program 2 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.884821675s ago: executing program 2 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 4.883720195s ago: executing program 5 (id=1609): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1], 0x0) 4.130573844s ago: executing program 1 (id=1610): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007"], 0x0, 0x44}, 0x28) 3.690526393s ago: executing program 1 (id=1612): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x1, 0x7) 3.470900689s ago: executing program 0 (id=1613): r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, 0x0, 0x9) 3.444917606s ago: executing program 2 (id=1614): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) 3.350730194s ago: executing program 1 (id=1615): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.124135907s ago: executing program 0 (id=1616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) 3.054653373s ago: executing program 6 (id=1617): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff8f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.011416704s ago: executing program 1 (id=1618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2.906743315s ago: executing program 2 (id=1619): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 2.532767883s ago: executing program 0 (id=1620): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000100000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.449869234s ago: executing program 5 (id=1622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$vim2m(0x0, 0x800, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendto$inet(r0, &(0x7f0000000280)="1d", 0x1, 0x200400c5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='veth1_virt_wifi\x00') 2.375945767s ago: executing program 6 (id=1623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 2.375208788s ago: executing program 1 (id=1624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000bbd687ed5521d54f8c2b59a1a8421c7c67fa75bf4d9451c499b7b36e00b5219f7d20e06edf8ffa0ca7832092452d3081836621dc5eba7c3f1eb3145e9f1bd5837e93ae5098b2ea1811907b450c36337b833fc98e97a8be63ac9fa6f0f7556c2abb16a352ee9529f8a6d3345107540d8b70af79ef2a53733387d843b53ffcca18994e4993d38f1bd3f6287a1d17909e2a40c5e7bc9655958a556a55"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000428bd7000fbdbdf2517000000040030800c00060002000000020000003c00308014000400c8e6c1e08ba4a41cc258dc8ce5ef2cc32400030021a138c2370656376ed4a49776c10f634dc589b13274cad5b82ac60a2089be1d08000300", @ANYRES32=0x0, @ANYBLOB="0c00308005000200070000"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000015) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @private0, 0xc}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.815657746s ago: executing program 2 (id=1625): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) 1.057284333s ago: executing program 0 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 850.777913ms ago: executing program 3 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)={0x10, 0x18, 0x15, 0x70bd28, 0xfefffbff}, 0x10}], 0x1, 0x0, 0x0, 0x40800}, 0x0) 807.290637ms ago: executing program 6 (id=1628): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x34, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 643.567296ms ago: executing program 1 (id=1629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000d40)={0x6, {{0x2, 0x4e20, @multicast1}}, 0x1}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 589.809427ms ago: executing program 5 (id=1630): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 514.293065ms ago: executing program 3 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xd37) 453.612719ms ago: executing program 6 (id=1632): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x10}, 0x4c}) 436.849277ms ago: executing program 3 (id=1633): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 322.60533ms ago: executing program 3 (id=1634): socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="41000200010001", 0x7) 320.241372ms ago: executing program 0 (id=1635): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 316.369231ms ago: executing program 5 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 272.549305ms ago: executing program 3 (id=1637): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 177.869629ms ago: executing program 6 (id=1638): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 24.265739ms ago: executing program 0 (id=1639): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, &(0x7f0000000500)=0x20) 0s ago: executing program 3 (id=1640): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) kernel console output (not intermixed with test programs): disconnect, device number 2 [ 130.094972][ T6565] loop5: detected capacity change from 0 to 128 [ 130.565302][ T30] audit: type=1326 audit(1763575837.040:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 131.567951][ T6575] loop4: detected capacity change from 0 to 128 [ 131.606802][ T30] audit: type=1800 audit(1763575838.970:278): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.207" name="bus" dev="loop4" ino=1048610 res=0 errno=0 [ 132.152879][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.159333][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160711][ T6587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.210'. [ 133.317479][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 133.387662][ T6580] syzkaller0: entered promiscuous mode [ 133.418593][ T6580] syzkaller0: entered allmulticast mode [ 133.458518][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.467135][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 133.476459][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.485380][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.493180][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.175332][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.216'. [ 134.871601][ T6618] tipc: Started in network mode [ 134.886911][ T6618] tipc: Node identity 568d2178897a, cluster identity 4711 [ 134.909340][ T6618] tipc: Enabled bearer , priority 0 [ 134.938305][ T6619] syzkaller0: entered promiscuous mode [ 134.945127][ T6619] syzkaller0: entered allmulticast mode [ 134.971633][ T6598] lo speed is unknown, defaulting to 1000 [ 134.974441][ T6627] tipc: Resetting bearer [ 135.014404][ T6615] tipc: Resetting bearer [ 135.047680][ T6615] tipc: Disabling bearer [ 135.069991][ T6612] lo speed is unknown, defaulting to 1000 [ 135.088125][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.222'. [ 135.372299][ T6645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.224'. [ 135.679455][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.228'. [ 136.050668][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.236'. [ 136.974418][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.240'. [ 137.267779][ T6693] lo speed is unknown, defaulting to 1000 [ 137.921178][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 139.663489][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 139.713594][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 139.764540][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 139.803016][ T6751] loop5: detected capacity change from 0 to 512 [ 140.040995][ T6757] loop1: detected capacity change from 0 to 128 [ 140.519444][ T6751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.599250][ T6751] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.747513][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.461429][ T6828] loop2: detected capacity change from 0 to 128 [ 145.132162][ T6848] geneve2: entered promiscuous mode [ 145.147774][ T6848] geneve2: entered allmulticast mode [ 145.453083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.463150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.682721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 146.212885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.309739][ T6849] syz.2.283 (6849) used greatest stack depth: 14760 bytes left [ 146.403901][ T6875] Zero length message leads to an empty skb [ 147.834469][ T6893] loop3: detected capacity change from 0 to 128 [ 148.021383][ T6892] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 148.394592][ T6904] syzkaller0: entered promiscuous mode [ 148.454027][ T6904] syzkaller0: entered allmulticast mode [ 148.698004][ T6913] syzkaller0: entered promiscuous mode [ 148.714520][ T6913] syzkaller0: entered allmulticast mode [ 148.796445][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 149.886496][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 149.944950][ T6934] tipc: Started in network mode [ 149.963218][ T6934] tipc: Node identity c6ba938d0073, cluster identity 4711 [ 149.970549][ T6934] tipc: Enabled bearer , priority 0 [ 150.013414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.038560][ T6934] syzkaller0: entered promiscuous mode [ 150.055317][ T6934] syzkaller0: entered allmulticast mode [ 150.160746][ T6934] tipc: Resetting bearer [ 150.183344][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'. [ 150.203414][ T6933] tipc: Resetting bearer [ 150.313620][ T6933] tipc: Disabling bearer [ 150.327856][ T6944] veth1_macvtap: left promiscuous mode [ 151.992817][ T6952] tipc: Enabling of bearer rejected, failed to enable media [ 152.915374][ T6959] loop4: detected capacity change from 0 to 128 [ 153.126336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.135226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.155099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.173837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.362709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 153.580033][ T6976] tipc: Enabled bearer , priority 0 [ 153.596186][ T6976] syzkaller0: entered promiscuous mode [ 153.609100][ T6976] syzkaller0: entered allmulticast mode [ 153.703285][ T6976] tipc: Resetting bearer [ 153.712656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.722753][ T6976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.746639][ T6973] lo speed is unknown, defaulting to 1000 [ 153.862677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.872925][ T6975] tipc: Resetting bearer [ 153.964558][ T6975] tipc: Disabling bearer [ 154.090528][ T6993] syz.1.328 uses obsolete (PF_INET,SOCK_PACKET) [ 155.375222][ T7003] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 155.946302][ T7013] loop3: detected capacity change from 0 to 128 [ 156.884644][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.336'. [ 157.156580][ T7028] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 157.198094][ T7028] bond2: entered promiscuous mode [ 157.203567][ T7028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.429908][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 158.329050][ T7044] netlink: 'syz.3.344': attribute type 3 has an invalid length. [ 158.535530][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 159.497277][ T7060] lo speed is unknown, defaulting to 1000 [ 160.032059][ T7073] sctp: [Deprecated]: syz.0.354 (pid 7073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.032059][ T7073] Use struct sctp_sack_info instead [ 160.071621][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 160.095770][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 160.115353][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.137089][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.165533][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.217595][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.415278][ T7083] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 160.523292][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 161.014129][ T7083] bond1: entered promiscuous mode [ 161.049643][ T7083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.084769][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 161.117223][ T7090] syzkaller0: entered promiscuous mode [ 161.122737][ T7090] syzkaller0: entered allmulticast mode [ 161.230812][ T7092] bond1: entered allmulticast mode [ 161.545041][ T7083] bond1: (slave bridge1): making interface the new active one [ 161.583927][ T7083] bridge1: entered promiscuous mode [ 161.607518][ T7083] bridge1: entered allmulticast mode [ 161.632365][ T7083] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 161.665261][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.367'. [ 162.146426][ T7116] lo speed is unknown, defaulting to 1000 [ 162.941359][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 163.030341][ T7134] syzkaller0: entered promiscuous mode [ 163.038866][ T7134] syzkaller0: entered allmulticast mode [ 163.244051][ T7145] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 163.251920][ T7145] netlink: 2 bytes leftover after parsing attributes in process `syz.1.382'. [ 163.290251][ T7145] bond0: entered promiscuous mode [ 163.295329][ T7145] bond_slave_0: entered promiscuous mode [ 163.301441][ T7145] bond_slave_1: entered promiscuous mode [ 163.312534][ T7145] bridge0: port 3(bond0) entered blocking state [ 163.388134][ T7145] bridge0: port 3(bond0) entered disabled state [ 163.415739][ T7145] bond0: entered allmulticast mode [ 163.421559][ T7145] bond_slave_0: entered allmulticast mode [ 163.427458][ T7145] bond_slave_1: entered allmulticast mode [ 163.439831][ T7145] bridge0: port 3(bond0) entered blocking state [ 163.446457][ T7145] bridge0: port 3(bond0) entered forwarding state [ 164.426322][ T7161] loop2: detected capacity change from 0 to 512 [ 164.482181][ T7161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.506151][ T7161] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.582285][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 164.765746][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.345372][ T7181] syzkaller0: entered promiscuous mode [ 165.351790][ T7181] syzkaller0: entered allmulticast mode [ 165.432513][ T7183] syzkaller0: entered promiscuous mode [ 165.438673][ T7183] syzkaller0: entered allmulticast mode [ 165.466784][ T7181] tipc: Started in network mode [ 165.477560][ T7181] tipc: Node identity 9ed504186698, cluster identity 4711 [ 165.493244][ T7181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.514591][ T7181] tipc: Enabled bearer , priority 0 [ 165.535074][ T7180] tipc: Resetting bearer [ 165.568486][ T7180] tipc: Disabling bearer [ 166.527691][ T7190] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 167.025946][ T7204] loop1: detected capacity change from 0 to 128 [ 167.779405][ T7212] tipc: Enabled bearer , priority 0 [ 167.863908][ T7213] syzkaller0: entered promiscuous mode [ 167.870279][ T7213] syzkaller0: entered allmulticast mode [ 167.949183][ T7212] tipc: Resetting bearer [ 168.011270][ T7211] tipc: Resetting bearer [ 168.014149][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 168.065426][ T7211] tipc: Disabling bearer [ 168.231130][ T7222] syzkaller0: entered promiscuous mode [ 168.250211][ T7222] syzkaller0: entered allmulticast mode [ 168.310186][ T5838] Bluetooth: hci4: link tx timeout [ 168.315896][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.325821][ T5845] Bluetooth: hci4: link tx timeout [ 168.330948][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.338974][ T5845] Bluetooth: hci4: link tx timeout [ 168.344121][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.352079][ T5845] Bluetooth: hci4: link tx timeout [ 168.358248][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.459831][ T5845] Bluetooth: hci4: link tx timeout [ 168.465130][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.502823][ T5845] Bluetooth: hci4: link tx timeout [ 168.508021][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.522669][ T5845] Bluetooth: hci4: link tx timeout [ 168.527836][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.915082][ T7239] netlink: 'syz.2.414': attribute type 12 has an invalid length. [ 170.214321][ T7243] openvswitch: netlink: Duplicate or invalid key (type 0). [ 170.268074][ T7243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.303806][ T7239] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 170.459641][ T7239] netlink: 'syz.2.414': attribute type 4 has an invalid length. [ 170.511184][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 171.069180][ T7269] siw: device registration error -23 [ 171.103521][ T30] audit: type=1326 audit(1763575877.514:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 171.174630][ T30] audit: type=1326 audit(1763575877.523:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 171.478190][ T7275] loop2: detected capacity change from 0 to 128 [ 172.164293][ T7281] syzkaller0: entered promiscuous mode [ 172.180096][ T7281] syzkaller0: entered allmulticast mode [ 172.212880][ T7281] tipc: Enabled bearer , priority 0 [ 172.304984][ T7280] tipc: Resetting bearer [ 172.377795][ T7280] tipc: Disabling bearer [ 172.404221][ T7288] vlan0: entered promiscuous mode [ 173.139138][ T7292] tipc: Enabling of bearer rejected, failed to enable media [ 174.243477][ T1205] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 174.389748][ T7303] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 174.512557][ T7303] bond1: entered promiscuous mode [ 174.551327][ T7303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.672746][ T7307] bond1: (slave bridge1): making interface the new active one [ 174.673504][ T1205] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 174.718659][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.724881][ T7307] bridge1: entered promiscuous mode [ 174.742890][ T7307] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 174.758479][ T1205] usb 4-1: config 0 descriptor?? [ 175.014282][ T7323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.021844][ T7323] IPv6: NLM_F_CREATE should be set when creating new route [ 175.156447][ T7323] lo: entered allmulticast mode [ 175.209690][ T7323] tunl0: entered allmulticast mode [ 175.265915][ T7323] gre0: entered allmulticast mode [ 175.321856][ T7323] gretap0: entered allmulticast mode [ 175.978274][ T7323] erspan0: entered allmulticast mode [ 176.013072][ T7323] ip_vti0: entered allmulticast mode [ 176.026035][ T7323] ip6_vti0: entered allmulticast mode [ 176.035687][ T7323] sit0: entered allmulticast mode [ 176.046390][ T7323] ip6tnl0: entered allmulticast mode [ 176.055412][ T7323] ip6gre0: entered allmulticast mode [ 176.071953][ T7323] syz_tun: entered allmulticast mode [ 176.081353][ T7323] ip6gretap0: entered allmulticast mode [ 176.105471][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.113472][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.133116][ T7323] bridge0: entered allmulticast mode [ 176.142594][ T7323] vcan0: entered allmulticast mode [ 176.151602][ T7323] bond0: entered allmulticast mode [ 176.156866][ T7323] bond_slave_0: entered allmulticast mode [ 176.164011][ T7323] bond_slave_1: entered allmulticast mode [ 176.178067][ T7323] team0: entered allmulticast mode [ 176.183646][ T7323] team_slave_0: entered allmulticast mode [ 176.196411][ T7323] team_slave_1: entered allmulticast mode [ 176.210165][ T7323] dummy0: entered allmulticast mode [ 176.277125][ T5899] usb 4-1: USB disconnect, device number 2 [ 176.287596][ T7323] nlmon0: entered allmulticast mode [ 176.294897][ T7323] caif0: entered allmulticast mode [ 176.304455][ T7323] batadv0: entered allmulticast mode [ 176.326189][ T7323] vxcan0: entered allmulticast mode [ 176.334399][ T7323] vxcan1: entered allmulticast mode [ 176.385229][ T7323] veth0: entered allmulticast mode [ 176.394939][ T7323] veth1: entered allmulticast mode [ 176.406735][ T7323] wg0: entered allmulticast mode [ 176.462953][ T7323] wg1: entered allmulticast mode [ 176.473100][ T7323] wg2: entered allmulticast mode [ 176.484059][ T7323] veth0_to_bridge: entered allmulticast mode [ 176.499890][ T7323] veth1_to_bridge: entered allmulticast mode [ 176.513726][ T7323] veth0_to_bond: entered allmulticast mode [ 176.525136][ T7323] veth1_to_bond: entered allmulticast mode [ 176.536866][ T7323] veth0_to_team: entered allmulticast mode [ 176.550942][ T7323] veth1_to_team: entered allmulticast mode [ 176.572122][ T7323] veth0_to_batadv: entered allmulticast mode [ 176.583205][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.620430][ T7323] batadv_slave_0: entered allmulticast mode [ 176.647551][ T7323] veth1_to_batadv: entered allmulticast mode [ 176.667114][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.689774][ T7323] batadv_slave_1: entered allmulticast mode [ 176.709363][ T7323] xfrm0: entered allmulticast mode [ 176.736352][ T7323] veth0_to_hsr: entered allmulticast mode [ 176.759103][ T7323] hsr_slave_0: entered allmulticast mode [ 176.776653][ T7323] veth1_to_hsr: entered allmulticast mode [ 176.801193][ T7323] hsr_slave_1: entered allmulticast mode [ 176.824321][ T7323] hsr0: entered allmulticast mode [ 176.844628][ T7323] veth1_virt_wifi: entered allmulticast mode [ 176.872257][ T7323] veth0_virt_wifi: entered allmulticast mode [ 176.891592][ T7323] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 176.914079][ T7323] veth1_vlan: entered allmulticast mode [ 176.934491][ T7323] veth0_vlan: entered allmulticast mode [ 176.991322][ T7323] vlan0: entered allmulticast mode [ 176.997138][ T7323] vlan1: entered allmulticast mode [ 177.029922][ T7323] macvlan0: entered allmulticast mode [ 177.071825][ T7323] macvlan1: entered allmulticast mode [ 177.083555][ T7323] ipvlan0: entered allmulticast mode [ 177.090042][ T7323] ipvlan1: entered allmulticast mode [ 177.096757][ T7323] veth1_macvtap: entered allmulticast mode [ 177.112703][ T7323] veth0_macvtap: entered allmulticast mode [ 177.228122][ T7323] macvtap0: entered allmulticast mode [ 177.242437][ T7323] macsec0: entered allmulticast mode [ 177.275705][ T7323] geneve0: entered allmulticast mode [ 177.343102][ T7323] geneve1: entered allmulticast mode [ 177.413242][ T7323] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 177.480035][ T7323] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 177.497270][ T7323] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 177.587493][ T7323] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 177.751340][ T7323] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 177.827904][ T7323] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 177.896140][ T7323] bond1: entered allmulticast mode [ 177.905445][ T7323] ip6erspan0: entered allmulticast mode [ 177.968349][ T7323] bond2: left promiscuous mode [ 177.973303][ T7323] bond2: entered allmulticast mode [ 177.995228][ T7323] bond3: entered allmulticast mode [ 178.028378][ T5912] lo speed is unknown, defaulting to 1000 [ 178.034278][ T5912] syz2: Port: 1 Link DOWN [ 178.157981][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.177508][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.182335][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.195719][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.198257][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.204002][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.221167][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.244954][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.254288][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.281617][ T7335] lo speed is unknown, defaulting to 1000 [ 178.429996][ T7350] lo speed is unknown, defaulting to 1000 [ 178.521846][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 178.577740][ T7363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.443'. [ 178.604795][ T7360] vxcan2: entered allmulticast mode [ 178.687034][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 178.897821][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 179.193191][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 179.408654][ T7378] loop1: detected capacity change from 0 to 128 [ 180.358408][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.365952][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.376813][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.392018][ T5838] Bluetooth: hci6: command tx timeout [ 180.414334][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.564630][ T7373] lo speed is unknown, defaulting to 1000 [ 181.125025][ T7398] loop2: detected capacity change from 0 to 1024 [ 181.516575][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 181.964741][ T5899] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 182.032572][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.142029][ T5899] usb 4-1: config 0 descriptor?? [ 182.615139][ T5838] Bluetooth: hci6: command tx timeout [ 182.635594][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 183.962556][ T5899] usb 4-1: USB disconnect, device number 3 [ 184.263908][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.282099][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.289433][ T7350] bridge_slave_0: entered allmulticast mode [ 184.310172][ T7350] bridge_slave_0: entered promiscuous mode [ 184.337117][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.350418][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.357907][ T7350] bridge_slave_1: entered allmulticast mode [ 184.366980][ T7350] bridge_slave_1: entered promiscuous mode [ 184.849999][ T5838] Bluetooth: hci6: command tx timeout [ 186.056748][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.139155][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.519593][ T5838] Bluetooth: hci6: command tx timeout [ 187.645719][ T7350] team0: Port device team_slave_0 added [ 187.696974][ T7350] team0: Port device team_slave_1 added [ 188.083540][ T7465] lo speed is unknown, defaulting to 1000 [ 188.190361][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 188.529325][ T7474] lo speed is unknown, defaulting to 1000 [ 188.583568][ T5899] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 188.592964][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.645706][ T5899] usb 1-1: config 0 descriptor?? [ 188.682618][ T7488] lo: entered allmulticast mode [ 188.708370][ T7488] tunl0: entered allmulticast mode [ 188.716109][ T7488] gre0: entered allmulticast mode [ 188.753578][ T7488] gretap0: entered allmulticast mode [ 188.763342][ T7488] erspan0: entered allmulticast mode [ 188.772954][ T7488] ip_vti0: entered allmulticast mode [ 188.782035][ T7488] ip6_vti0: entered allmulticast mode [ 188.805676][ T7488] sit0: entered allmulticast mode [ 188.823667][ T7488] ip6tnl0: entered allmulticast mode [ 188.847213][ T7488] ip6gre0: entered allmulticast mode [ 188.872877][ T7488] syz_tun: entered allmulticast mode [ 188.943722][ T7488] ip6gretap0: entered allmulticast mode [ 188.954675][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.962429][ T7488] bridge0: port 1(1¾x9ÿ) entered disabled state [ 189.004048][ T7488] bridge0: entered allmulticast mode [ 189.024353][ T7488] vcan0: entered allmulticast mode [ 189.052623][ T7488] bond0: entered allmulticast mode [ 189.069940][ T7488] bond_slave_0: entered allmulticast mode [ 189.092281][ T7488] bond_slave_1: entered allmulticast mode [ 189.133861][ T7488] team0: entered allmulticast mode [ 189.152813][ T7488] team_slave_0: entered allmulticast mode [ 189.173115][ T7488] team_slave_1: entered allmulticast mode [ 189.197744][ T7488] dummy0: entered allmulticast mode [ 189.220722][ T7488] nlmon0: entered allmulticast mode [ 189.244755][ T7488] caif0: entered allmulticast mode [ 189.262592][ T7488] vxcan0: entered allmulticast mode [ 189.280623][ T7488] vxcan1: entered allmulticast mode [ 189.296519][ T7488] veth0: entered allmulticast mode [ 189.315741][ T7488] veth1: entered allmulticast mode [ 189.433995][ T7488] wg0: entered allmulticast mode [ 189.520513][ T7488] wg1: entered allmulticast mode [ 189.606947][ T7488] wg2: entered allmulticast mode [ 189.615131][ T7488] veth0_to_bridge: entered allmulticast mode [ 189.640185][ T7488] veth1_to_bridge: entered allmulticast mode [ 189.652761][ T7488] veth0_to_bond: entered allmulticast mode [ 189.665465][ T7488] veth1_to_bond: entered allmulticast mode [ 189.678148][ T7488] veth0_to_team: entered allmulticast mode [ 189.690306][ T7488] veth1_to_team: entered allmulticast mode [ 189.702908][ T7488] veth0_to_batadv: entered allmulticast mode [ 189.733516][ T7488] batadv_slave_0: entered allmulticast mode [ 189.745258][ T7488] veth1_to_batadv: entered allmulticast mode [ 189.754903][ T7488] batadv_slave_1: entered allmulticast mode [ 189.769839][ T7488] xfrm0: entered allmulticast mode [ 189.779660][ T7488] veth0_to_hsr: entered allmulticast mode [ 189.790389][ T7488] hsr_slave_0: entered allmulticast mode [ 189.799926][ T7488] veth1_to_hsr: entered allmulticast mode [ 189.809558][ T7488] hsr_slave_1: entered allmulticast mode [ 189.823265][ T7488] hsr0: entered allmulticast mode [ 189.834225][ T7488] veth1_virt_wifi: entered allmulticast mode [ 189.859975][ T7488] veth0_virt_wifi: entered allmulticast mode [ 189.883586][ T7488] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 189.910557][ T7488] veth1_vlan: entered allmulticast mode [ 189.935609][ T7488] veth0_vlan: entered allmulticast mode [ 189.964223][ T7488] vlan0: left promiscuous mode [ 189.975891][ T7488] vlan0: entered allmulticast mode [ 189.987908][ T7488] vlan1: entered allmulticast mode [ 190.003364][ T7488] macvlan0: entered allmulticast mode [ 190.021287][ T7488] macvlan1: entered allmulticast mode [ 190.031095][ T7488] ipvlan0: entered allmulticast mode [ 190.046214][ T7488] ipvlan1: entered allmulticast mode [ 190.059479][ T7488] veth1_macvtap: entered allmulticast mode [ 190.077665][ T7488] veth0_macvtap: entered allmulticast mode [ 190.100381][ T7488] macvtap0: entered allmulticast mode [ 190.124317][ T7488] macsec0: entered allmulticast mode [ 190.152023][ T7488] geneve0: entered allmulticast mode [ 190.172497][ T7488] geneve1: entered allmulticast mode [ 190.196382][ T7488] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 190.206565][ T7488] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 190.229521][ T7488] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 190.248982][ T7488] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 190.280953][ T7488] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 190.307886][ T7488] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 190.333160][ T7488] ip6erspan0: entered allmulticast mode [ 190.379312][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.397018][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.463687][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.593146][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.636884][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.717423][ T5947] usb 1-1: USB disconnect, device number 3 [ 191.927554][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.029350][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.378592][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.490024][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.528376][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.181455][ T7350] hsr_slave_0: entered promiscuous mode [ 193.210477][ T7350] hsr_slave_1: entered promiscuous mode [ 193.216829][ T7350] debugfs: 'hsr0' already exists in 'hsr' [ 193.245559][ T7350] Cannot create hsr debugfs directory [ 193.251092][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'. [ 193.528375][ T7524] netlink: 200 bytes leftover after parsing attributes in process `syz.0.478'. [ 194.826042][ T7350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.849257][ T7350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.880694][ T7350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.910444][ T7350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 194.920177][ T7536] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 194.937411][ T7540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.944708][ T7540] IPv6: NLM_F_CREATE should be set when creating new route [ 195.019489][ T7536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.050124][ T7546] netlink: 'syz.5.485': attribute type 1 has an invalid length. [ 195.203125][ T7545] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.228069][ T7545] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 195.236678][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.5.485'. [ 195.299254][ T7545] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 195.662652][ T7536] veth3: entered promiscuous mode [ 195.686381][ T7536] bond4: (slave veth3): Enslaving as an active interface with a down link [ 195.778465][ T7546] bond2: entered promiscuous mode [ 195.785853][ T7546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.819209][ T7562] bond2: entered allmulticast mode [ 195.898749][ T7568] bond2: (slave bridge1): making interface the new active one [ 195.913489][ T7568] bridge1: entered promiscuous mode [ 195.949987][ T7568] bridge1: entered allmulticast mode [ 196.002556][ T7568] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 196.109536][ T7580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.131196][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.167227][ T7583] warning: `syz.1.488' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.240115][ T7584] syzkaller0: mtu greater than device maximum [ 196.442182][ T7599] fuse: Bad value for 'user_id' [ 196.482065][ T7599] fuse: Bad value for 'user_id' [ 196.488044][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 196.561947][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 196.609565][ T7600] vxcan2: entered allmulticast mode [ 196.775866][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.859261][ T7602] macvtap1: entered promiscuous mode [ 196.865291][ T7602] erspan0: entered promiscuous mode [ 196.871431][ T7602] macvtap1: entered allmulticast mode [ 197.698282][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.727059][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 197.774818][ T7612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.800750][ T7612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.890805][ T7618] siw: device registration error -23 [ 197.943820][ T30] audit: type=1326 audit(1763575902.629:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 198.168226][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.175454][ T7298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.264853][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.272109][ T7298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.261765][ T7636] fuse: Bad value for 'user_id' [ 199.283679][ T7636] fuse: Bad value for 'user_id' [ 199.349873][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 199.433192][ T7640] erspan0: entered promiscuous mode [ 199.448315][ T7640] macvtap1: entered promiscuous mode [ 199.459113][ T7640] macvtap1: entered allmulticast mode [ 199.487553][ T7640] erspan0: entered allmulticast mode [ 199.553288][ T7645] macvtap1: left promiscuous mode [ 199.573193][ T7645] macvtap1: left allmulticast mode [ 199.612318][ T7645] erspan0: left allmulticast mode [ 200.282016][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.520'. [ 200.396711][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.413655][ T7679] bond0: (slave rose0): Enslaving as an active interface with an up link [ 200.671683][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.660072][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.5.536'. [ 204.025533][ T7350] veth0_vlan: entered promiscuous mode [ 204.038849][ T7350] veth1_vlan: entered promiscuous mode [ 204.208355][ T7350] veth0_macvtap: entered promiscuous mode [ 204.267112][ T7350] veth1_macvtap: entered promiscuous mode [ 204.409374][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.478200][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.585024][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.615785][ T1150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.653485][ T1150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.693059][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.011322][ T7298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.019179][ T7298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.130926][ T7298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.150547][ T7298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.796641][ T7828] Bluetooth: MGMT ver 1.23 [ 207.100353][ T7836] loop2: detected capacity change from 0 to 128 [ 207.488722][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 207.523270][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.555'. [ 207.813877][ T7844] Bluetooth: MGMT ver 1.23 [ 209.984975][ T5142] Bluetooth: hci2: command 0x0401 tx timeout [ 209.985422][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 210.281566][ T7904] fuse: Bad value for 'fd' [ 210.389234][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.573'. [ 211.591791][ T7938] loop5: detected capacity change from 0 to 1024 [ 211.637494][ T7940] siw: device registration error -23 [ 211.711165][ T30] audit: type=1326 audit(1763575915.491:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7939 comm="syz.6.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 212.327659][ T7951] tipc: Enabled bearer , priority 0 [ 212.730328][ T7951] tipc: Resetting bearer [ 212.758108][ T7957] syzkaller0: entered promiscuous mode [ 212.764561][ T7962] fuse: Bad value for 'fd' [ 212.819526][ T7957] syzkaller0: entered allmulticast mode [ 212.980917][ T7948] tipc: Resetting bearer [ 213.381566][ T7948] tipc: Disabling bearer [ 213.535375][ T5943] tipc: Node number set to 1670081121 [ 213.936881][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 214.099279][ T7993] netlink: 36 bytes leftover after parsing attributes in process `syz.5.600'. [ 214.263419][ T7986] bond0: left allmulticast mode [ 214.287331][ T7986] bond_slave_0: left allmulticast mode [ 214.390722][ T8000] fuse: Bad value for 'fd' [ 214.396038][ T7986] bond_slave_1: left allmulticast mode [ 214.429768][ T7986] bond0: left promiscuous mode [ 214.461286][ T7986] bond_slave_0: left promiscuous mode [ 214.511251][ T7986] bond_slave_1: left promiscuous mode [ 214.543474][ T7986] bridge0: port 3(bond0) entered disabled state [ 214.606342][ T7986] bridge_slave_1: left allmulticast mode [ 214.638413][ T7986] bridge_slave_1: left promiscuous mode [ 214.684614][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.018304][ T7986] bridge_slave_0: left allmulticast mode [ 215.030460][ T7986] bridge_slave_0: left promiscuous mode [ 215.053406][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.286599][ T8021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 217.101417][ T8022] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 217.295727][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.620'. [ 217.785339][ T8075] netlink: 'syz.6.625': attribute type 1 has an invalid length. [ 217.888334][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.625'. [ 217.901099][ T8083] veth1_to_batadv: entered promiscuous mode [ 217.913394][ T8083] veth1_to_batadv: entered allmulticast mode [ 218.135470][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 218.236413][ T8079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.315096][ T8086] bond_slave_0: entered promiscuous mode [ 218.321045][ T8086] bond_slave_1: entered promiscuous mode [ 218.349201][ T8086] macvtap1: entered promiscuous mode [ 218.356475][ T8086] bond0: entered promiscuous mode [ 218.362293][ T8086] macvtap1: entered allmulticast mode [ 218.367775][ T8086] bond0: entered allmulticast mode [ 218.373017][ T8086] bond_slave_0: entered allmulticast mode [ 218.410148][ T8086] bond_slave_1: entered allmulticast mode [ 218.420933][ T8097] netlink: 'syz.3.630': attribute type 8 has an invalid length. [ 218.429079][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 218.441674][ T8086] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 218.480267][ T8093] macvtap1: left promiscuous mode [ 218.487189][ T8093] bond0: left promiscuous mode [ 218.493346][ T8093] macvtap1: left allmulticast mode [ 218.500569][ T8101] netlink: 'syz.3.630': attribute type 8 has an invalid length. [ 218.509273][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 218.530488][ T8093] bond0: left allmulticast mode [ 218.544001][ T8093] bond_slave_0: left allmulticast mode [ 218.565379][ T8093] bond_slave_1: left allmulticast mode [ 218.594671][ T8088] tipc: Enabled bearer , priority 0 [ 218.633413][ T8097] bond0: entered promiscuous mode [ 218.649510][ T8097] bond_slave_0: entered promiscuous mode [ 218.695331][ T8097] bond_slave_1: entered promiscuous mode [ 218.759246][ T8097] bond0: left promiscuous mode [ 218.772078][ T8097] bond_slave_0: left promiscuous mode [ 218.791989][ T8097] bond_slave_1: left promiscuous mode [ 218.876056][ T8101] bond0: entered promiscuous mode [ 218.911998][ T8101] bond_slave_0: entered promiscuous mode [ 218.941157][ T8101] bond_slave_1: entered promiscuous mode [ 218.948866][ T8101] bond0: left promiscuous mode [ 218.953942][ T8101] bond_slave_0: left promiscuous mode [ 218.959771][ T8101] bond_slave_1: left promiscuous mode [ 219.102750][ T8087] tipc: Disabling bearer [ 219.243638][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.636'. [ 219.517898][ T8116] bond3 (unregistering): Released all slaves [ 219.596377][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'. [ 220.161660][ T8130] bond1: Unable to set up delay as MII monitoring is disabled [ 220.199092][ T8130] bond1 (unregistering): Released all slaves [ 220.252100][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 220.252558][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 220.258305][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 220.271325][ T5843] Bluetooth: hci2: command 0x0401 tx timeout [ 220.403439][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.645'. [ 220.778074][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 221.790890][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.657'. [ 221.812505][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 221.851359][ T8181] bridge_slave_1: left promiscuous mode [ 221.879467][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.010945][ T8181] ¾x9ÿ: left promiscuous mode [ 222.036846][ T8181] bridge0: port 1(1¾x9ÿ) entered disabled state [ 223.029118][ T8201] loop1: detected capacity change from 0 to 128 [ 223.778011][ T8209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.815363][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 224.255300][ T8218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.539337][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 225.200895][ T8238] netlink: 40 bytes leftover after parsing attributes in process `syz.6.675'. [ 225.257478][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.675'. [ 225.297929][ T8238] netlink: 48 bytes leftover after parsing attributes in process `syz.6.675'. [ 225.322828][ T8241] netlink: 'syz.1.676': attribute type 2 has an invalid length. [ 225.347902][ T8241] : entered promiscuous mode [ 225.691953][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'. [ 226.625872][ T8266] lo speed is unknown, defaulting to 1000 [ 226.643911][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 227.178954][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 228.033571][ T8317] lo speed is unknown, defaulting to 1000 [ 228.114286][ T8323] netlink: 44 bytes leftover after parsing attributes in process `syz.5.698'. [ 228.397636][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.701'. [ 228.554245][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 228.710123][ T8335] lo speed is unknown, defaulting to 1000 [ 229.055146][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.063881][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.106082][ T8350] lo speed is unknown, defaulting to 1000 [ 229.178584][ T8352] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 229.231228][ T8358] tipc: Started in network mode [ 229.246583][ T8358] tipc: Node identity , cluster identity 4711 [ 229.266473][ T8358] tipc: Failed to obtain node identity [ 229.278489][ T8358] tipc: Enabling of bearer rejected, failed to enable media [ 230.277971][ T8369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.714'. [ 230.307246][ T5912] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 230.379085][ T8371] lo speed is unknown, defaulting to 1000 [ 230.514916][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 230.522224][ T5912] usb 7-1: config 0 has an invalid interface number: 148 but max is 0 [ 230.539281][ T5912] usb 7-1: config 0 has no interface number 0 [ 230.564339][ T5912] usb 7-1: config 0 interface 148 has no altsetting 0 [ 230.618056][ T5912] usb 7-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 230.654230][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.688669][ T5912] usb 7-1: Product: syz [ 230.706368][ T5912] usb 7-1: Manufacturer: syz [ 230.720384][ T5912] usb 7-1: SerialNumber: syz [ 230.749878][ T5912] usb 7-1: config 0 descriptor?? [ 230.766375][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 230.773274][ T5912] pl2303 7-1:0.148: required interrupt-in endpoint missing [ 230.915382][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'. [ 231.002933][ T5947] usb 7-1: USB disconnect, device number 2 [ 234.005966][ T8432] syz.2.738 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 234.207024][ T5943] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 234.378160][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 234.392988][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.404300][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.414086][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.625535][ T8440] loop2: detected capacity change from 0 to 128 [ 235.050842][ T5943] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 235.059966][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.210939][ T5943] usb 7-1: config 0 descriptor?? [ 235.451658][ T8452] lo speed is unknown, defaulting to 1000 [ 235.545557][ T8459] tipc: Enabling of bearer rejected, failed to enable media [ 235.722370][ T5943] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0001/input/input7 [ 235.751223][ T8467] netlink: 'syz.3.746': attribute type 12 has an invalid length. [ 235.766103][ T8467] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 236.041851][ T5943] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0001/input/input8 [ 236.346596][ T5943] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 236.381351][ T8477] netlink: 'syz.5.749': attribute type 2 has an invalid length. [ 236.389225][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 236.438893][ T8479] netlink: 'syz.5.749': attribute type 2 has an invalid length. [ 236.480949][ T5943] usb 7-1: USB disconnect, device number 3 [ 236.524010][ T8477] !: entered promiscuous mode [ 236.551649][ T8479] !: left promiscuous mode [ 236.703050][ T8488] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 237.220007][ T8498] loop5: detected capacity change from 0 to 1024 [ 237.568022][ T8503] loop6: detected capacity change from 0 to 128 [ 238.341795][ T973] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 238.686054][ T8515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.696205][ T973] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.705877][ T973] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 238.726459][ T973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.749225][ T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 238.799842][ T8515] lo: entered allmulticast mode [ 238.820592][ T8515] tunl0: entered allmulticast mode [ 238.830229][ T8515] gre0: entered allmulticast mode [ 238.847187][ T8515] gretap0: entered allmulticast mode [ 238.855687][ T8515] erspan0: entered allmulticast mode [ 238.865441][ T8515] ip_vti0: entered allmulticast mode [ 238.893834][ T973] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.903616][ T8515] ip6_vti0: entered allmulticast mode [ 238.927096][ T973] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.937872][ T8515] sit0: entered allmulticast mode [ 238.968211][ T8515] ip6tnl0: entered allmulticast mode [ 238.968734][ T973] usb 3-1: Product: syz [ 238.999298][ T973] usb 3-1: Manufacturer: syz [ 239.023985][ T8515] ip6gre0: entered allmulticast mode [ 239.032052][ T973] cdc_wdm 3-1:1.0: skipping garbage [ 239.071029][ T973] cdc_wdm 3-1:1.0: skipping garbage [ 239.082942][ T8515] syz_tun: entered allmulticast mode [ 239.086989][ T973] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 239.105082][ T973] cdc_wdm 3-1:1.0: Unknown control protocol [ 239.148124][ T8515] ip6gretap0: entered allmulticast mode [ 239.295442][ T8515] vcan0: entered allmulticast mode [ 239.358362][ T8515] bond0: entered allmulticast mode [ 239.415678][ T8515] bond_slave_0: entered allmulticast mode [ 239.422052][ T8515] bond_slave_1: entered allmulticast mode [ 239.433792][ T8515] team0: entered allmulticast mode [ 239.438934][ T8515] team_slave_0: entered allmulticast mode [ 239.444645][ T8515] team_slave_1: entered allmulticast mode [ 239.454285][ T8515] dummy0: entered allmulticast mode [ 239.810537][ T8515] nlmon0: entered allmulticast mode [ 240.120957][ T5899] usb 3-1: USB disconnect, device number 2 [ 240.150456][ T8515] caif0: entered allmulticast mode [ 240.158965][ T8515] vxcan0: entered allmulticast mode [ 240.211961][ T8515] vxcan1: entered allmulticast mode [ 240.238633][ T8515] veth0: entered allmulticast mode [ 240.299501][ T8515] veth1: entered allmulticast mode [ 240.390653][ T8515] wg0: entered allmulticast mode [ 240.430400][ T8515] wg1: entered allmulticast mode [ 240.461618][ T8515] wg2: entered allmulticast mode [ 240.468975][ T8515] veth0_to_bridge: entered allmulticast mode [ 240.497417][ T8515] bridge_slave_0: entered allmulticast mode [ 240.520155][ T8515] veth1_to_bridge: entered allmulticast mode [ 240.558651][ T8515] bridge_slave_1: entered allmulticast mode [ 240.567044][ T8515] veth0_to_bond: entered allmulticast mode [ 240.626288][ T8515] veth1_to_bond: entered allmulticast mode [ 240.673954][ T8515] veth0_to_team: entered allmulticast mode [ 240.693670][ T8515] veth1_to_team: entered allmulticast mode [ 240.710069][ T8515] veth0_to_batadv: entered allmulticast mode [ 240.729867][ T8515] batadv_slave_0: entered allmulticast mode [ 240.751203][ T8515] veth1_to_batadv: entered allmulticast mode [ 240.786580][ T8515] batadv_slave_1: entered allmulticast mode [ 240.823555][ T8515] xfrm0: entered allmulticast mode [ 240.876054][ T8515] veth0_to_hsr: entered allmulticast mode [ 240.914622][ T8515] hsr_slave_0: entered allmulticast mode [ 240.944789][ T8515] veth1_to_hsr: entered allmulticast mode [ 240.978974][ T8515] hsr_slave_1: entered allmulticast mode [ 241.002515][ T8515] hsr0: entered allmulticast mode [ 241.028088][ T8515] veth1_virt_wifi: entered allmulticast mode [ 241.056891][ T8515] veth0_virt_wifi: entered allmulticast mode [ 241.078172][ T8515] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 241.096402][ T8515] veth1_vlan: entered allmulticast mode [ 241.120291][ T8515] veth0_vlan: entered allmulticast mode [ 241.157526][ T8515] vlan0: entered allmulticast mode [ 241.162849][ T8515] vlan1: entered allmulticast mode [ 241.179091][ T8515] macvlan0: entered allmulticast mode [ 241.223168][ T8515] macvlan1: entered allmulticast mode [ 241.242735][ T8515] ipvlan0: entered allmulticast mode [ 241.258288][ T8515] ipvlan1: entered allmulticast mode [ 241.266943][ T8515] veth1_macvtap: entered allmulticast mode [ 241.286955][ T8515] veth0_macvtap: entered allmulticast mode [ 241.299822][ T8515] macvtap0: entered allmulticast mode [ 241.324315][ T8515] macsec0: entered allmulticast mode [ 241.352708][ T8515] geneve0: entered allmulticast mode [ 241.372259][ T8515] geneve1: entered allmulticast mode [ 241.408924][ T8515] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 241.439436][ T8515] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 241.467589][ T8515] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 241.498154][ T8515] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 241.539898][ T8515] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 241.569133][ T8515] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 241.586185][ T8515] ieee802154 phy1 wpan1: entered allmulticast mode [ 241.595474][ T8515] syztnl1: entered allmulticast mode [ 241.603631][ T8515] bond1: left promiscuous mode [ 241.609772][ T8515] bridge1: left promiscuous mode [ 241.614885][ T8515] bond1: entered allmulticast mode [ 241.620109][ T8515] bridge1: entered allmulticast mode [ 241.658259][ T8515] macvtap1: entered allmulticast mode [ 241.666158][ T8515] : entered allmulticast mode [ 241.679997][ T8515] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 241.704531][ T8547] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 241.958421][ T5981] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.967552][ T5981] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.037900][ T5981] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.252804][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 242.282816][ T5981] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.827872][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 243.053354][ T8573] lo speed is unknown, defaulting to 1000 [ 243.096907][ T8592] netlink: 200 bytes leftover after parsing attributes in process `syz.5.779'. [ 244.914537][ T8613] erspan0: left promiscuous mode [ 244.972652][ T5840] Bluetooth: hci6: command 0x0405 tx timeout [ 245.131707][ T8528] IPVS: starting estimator thread 0... [ 246.203311][ T8613] macvtap1: left promiscuous mode [ 246.821985][ T8616] IPVS: using max 25 ests per chain, 60000 per kthread [ 247.348457][ T8623] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 247.355013][ T8623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 247.433918][ T8623] vhci_hcd vhci_hcd.0: Device attached [ 247.485202][ T8627] syzkaller0: entered promiscuous mode [ 247.520133][ T8627] syzkaller0: entered allmulticast mode [ 247.698668][ T8559] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 247.721616][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 247.820302][ T8638] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 247.913388][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 247.927668][ T24] usb 3-1: config 0 has no interfaces? [ 247.943558][ T24] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 247.984963][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.022112][ T24] usb 3-1: config 0 descriptor?? [ 248.169004][ T8542] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 248.255604][ T8624] usb 37-1: recv xbuf, 0 [ 248.260854][ T24] usb 3-1: USB disconnect, device number 3 [ 248.305453][ T50] vhci_hcd: stop threads [ 248.323081][ T50] vhci_hcd: release socket [ 248.344950][ T50] vhci_hcd: disconnect device [ 248.352141][ T8559] vhci_hcd: vhci_device speed not set [ 248.361482][ T8542] usb 6-1: Using ep0 maxpacket: 16 [ 248.396985][ T8542] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 248.447257][ T8542] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 248.511210][ T8542] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 248.548809][ T8542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.571347][ T8542] usb 6-1: Product: syz [ 248.580370][ T8542] usb 6-1: Manufacturer: syz [ 248.589542][ T8542] usb 6-1: SerialNumber: syz [ 250.472942][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 250.846693][ T8627] tipc: Started in network mode [ 250.853071][ T8627] tipc: Node identity d6778bff6cbc, cluster identity 4711 [ 250.860407][ T8627] tipc: Enabled bearer , priority 0 [ 250.897466][ T8638] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 251.001985][ T8668] bond_slave_0: entered promiscuous mode [ 251.016016][ T8668] bond_slave_1: entered promiscuous mode [ 251.073109][ T8668] macvtap1: entered promiscuous mode [ 251.123888][ T8668] bond0: entered promiscuous mode [ 251.149121][ T8668] macvtap1: entered allmulticast mode [ 251.174340][ T8668] bond0: entered allmulticast mode [ 251.198812][ T8668] bond_slave_0: entered allmulticast mode [ 251.220879][ T8668] bond_slave_1: entered allmulticast mode [ 251.254754][ T8668] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 251.291392][ T8626] tipc: Resetting bearer [ 251.359622][ T8626] tipc: Disabling bearer [ 251.387451][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 251.408278][ T8526] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 251.456153][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 251.537427][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 251.583545][ T8682] siw: device registration error -23 [ 251.589980][ T8526] usb 1-1: Using ep0 maxpacket: 16 [ 251.606058][ T8526] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.619377][ T8684] fuse: Unknown parameter 'user_id00000000000000000000' [ 251.660265][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 251.675045][ T8526] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.689457][ T8526] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 251.711887][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.6.809'. [ 251.722847][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.735754][ T8688] cgroup: Unexpected value for 'cpuset_v2_mode' [ 251.743281][ T8526] usb 1-1: config 0 descriptor?? [ 251.985108][ T8696] netlink: 'syz.6.814': attribute type 1 has an invalid length. [ 252.057715][ T24] usb 6-1: USB disconnect, device number 2 [ 252.139152][ T8696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.157812][ T8699] bond1: Unable to set up delay as MII monitoring is disabled [ 252.236429][ T8703] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 252.338184][ T8709] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 252.349635][ T8526] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 252.600423][ T8709] bond2: entered promiscuous mode [ 252.606198][ T8709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.618869][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 252.665627][ T8716] loop5: detected capacity change from 0 to 128 [ 252.729683][ T8713] macvtap2: entered promiscuous mode [ 252.750500][ T8713] bond0: entered promiscuous mode [ 252.777456][ T8713] bond_slave_0: entered promiscuous mode [ 252.818470][ T8713] bond_slave_1: entered promiscuous mode [ 252.824758][ T8713] macvtap2: entered allmulticast mode [ 252.841259][ T8713] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 252.930157][ T8714] bond2: (slave bridge0): making interface the new active one [ 252.963653][ T8714] bridge0: entered promiscuous mode [ 252.996449][ T8714] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 253.274077][ T8733] syzkaller0: entered promiscuous mode [ 253.286242][ T8733] syzkaller0: entered allmulticast mode [ 253.686506][ T8745] trusted_key: syz.6.826 sent an empty control message without MSG_MORE. [ 253.931229][ T30] audit: type=1326 audit(1763575955.002:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.6.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x0 [ 254.405181][ T24] usb 1-1: USB disconnect, device number 4 [ 254.534078][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 255.299368][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.839'. [ 255.674432][ T7096] syz.4.362: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 255.693249][ T7096] CPU: 1 UID: 0 PID: 7096 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT(full) [ 255.693279][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.693294][ T7096] Call Trace: [ 255.693304][ T7096] [ 255.693314][ T7096] dump_stack_lvl+0x189/0x250 [ 255.693358][ T7096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.693400][ T7096] ? __pfx__printk+0x10/0x10 [ 255.693427][ T7096] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 255.693463][ T7096] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 255.693499][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.693528][ T7096] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 255.693563][ T7096] warn_alloc+0x214/0x310 [ 255.693607][ T7096] ? __pfx_warn_alloc+0x10/0x10 [ 255.693654][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.693683][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.693710][ T7096] ? __get_vm_area_node+0x28f/0x300 [ 255.693746][ T7096] ? hash_ipport4_resize+0x1ec/0x1a50 [ 255.693780][ T7096] __vmalloc_node_range_noprof+0x690/0x12d0 [ 255.693854][ T7096] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.693891][ T7096] ? hash_ipport4_resize+0x1ec/0x1a50 [ 255.693922][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.693950][ T7096] ? rcu_is_watching+0x15/0xb0 [ 255.693979][ T7096] ? hash_ipport4_resize+0x1ec/0x1a50 [ 255.694007][ T7096] __kvmalloc_node_noprof+0x674/0x910 [ 255.694044][ T7096] ? hash_ipport4_resize+0x1ec/0x1a50 [ 255.694081][ T7096] hash_ipport4_resize+0x1ec/0x1a50 [ 255.694117][ T7096] ? __pfx_hash_ipport4_add+0x10/0x10 [ 255.694171][ T7096] call_ad+0x44e/0xb00 [ 255.694218][ T7096] ? __pfx_call_ad+0x10/0x10 [ 255.694253][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.694290][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.694321][ T7096] ? __nla_parse+0x40/0x60 [ 255.694351][ T7096] ip_set_ad+0x791/0x930 [ 255.694398][ T7096] ? __entry_text_end+0x1020b5/0x1020b9 [ 255.694430][ T7096] ? __pfx_ip_set_ad+0x10/0x10 [ 255.694462][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.694526][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.694554][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.694586][ T7096] nfnetlink_rcv_msg+0xb4d/0x1130 [ 255.694623][ T7096] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 255.694680][ T7096] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 255.694713][ T7096] ? kasan_save_track+0x4f/0x80 [ 255.694807][ T7096] netlink_rcv_skb+0x208/0x470 [ 255.694829][ T7096] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.694865][ T7096] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 255.694903][ T7096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.694943][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.694972][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.694999][ T7096] ? security_capable+0x7e/0x2e0 [ 255.695035][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695068][ T7096] nfnetlink_rcv+0x282/0x2590 [ 255.695107][ T7096] ? __dev_queue_xmit+0x27b/0x3b50 [ 255.695138][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695165][ T7096] ? __dev_queue_xmit+0x1d79/0x3b50 [ 255.695192][ T7096] ? kasan_save_track+0x3e/0x80 [ 255.695225][ T7096] ? __kasan_slab_alloc+0x6c/0x80 [ 255.695272][ T7096] ? __dev_queue_xmit+0x27b/0x3b50 [ 255.695316][ T7096] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 255.695351][ T7096] ? __pfx___dev_queue_xmit+0x10/0x10 [ 255.695403][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695429][ T7096] ? ref_tracker_free+0x63a/0x7d0 [ 255.695452][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695478][ T7096] ? __asan_memcpy+0x40/0x70 [ 255.695510][ T7096] ? __pfx_ref_tracker_free+0x10/0x10 [ 255.695531][ T7096] ? __skb_clone+0x63/0x7a0 [ 255.695563][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695589][ T7096] ? __skb_clone+0x483/0x7a0 [ 255.695624][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695650][ T7096] ? skb_clone+0x246/0x3a0 [ 255.695682][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695709][ T7096] ? __netlink_deliver_tap+0x807/0x850 [ 255.695732][ T7096] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.695760][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695791][ T7096] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.695825][ T7096] netlink_unicast+0x82f/0x9e0 [ 255.695873][ T7096] ? __pfx_netlink_unicast+0x10/0x10 [ 255.695913][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695939][ T7096] ? skb_put+0x11b/0x210 [ 255.695961][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.695994][ T7096] netlink_sendmsg+0x805/0xb30 [ 255.696032][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.696060][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.696087][ T7096] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.696125][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.696153][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.696181][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.696208][ T7096] __sock_sendmsg+0x21c/0x270 [ 255.696246][ T7096] ____sys_sendmsg+0x505/0x830 [ 255.696281][ T7096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.696318][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.696345][ T7096] ? import_iovec+0x74/0xa0 [ 255.696382][ T7096] ___sys_sendmsg+0x21f/0x2a0 [ 255.696419][ T7096] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.696455][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.696518][ T7096] ? __fget_files+0x2a/0x420 [ 255.696540][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.696567][ T7096] ? __fget_files+0x3a0/0x420 [ 255.696603][ T7096] __x64_sys_sendmsg+0x19b/0x260 [ 255.696634][ T7096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.696682][ T7096] ? do_syscall_64+0xbe/0xfa0 [ 255.696723][ T7096] do_syscall_64+0xfa/0xfa0 [ 255.696757][ T7096] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.696792][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.696814][ T7096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.696841][ T7096] ? exc_page_fault+0xab/0x100 [ 255.696879][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.696902][ T7096] RIP: 0033:0x7f8868b8f749 [ 255.696924][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.696942][ T7096] RSP: 002b:00007f8869954038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.696966][ T7096] RAX: ffffffffffffffda RBX: 00007f8868de5fa0 RCX: 00007f8868b8f749 [ 255.696984][ T7096] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 000000000000000b [ 255.696999][ T7096] RBP: 00007f8868c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.697014][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.697028][ T7096] R13: 00007f8868de6038 R14: 00007f8868de5fa0 R15: 00007ffd646b6d28 [ 255.697068][ T7096] [ 256.329851][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.363179][ T7096] Mem-Info: [ 256.366599][ T7096] active_anon:5621 inactive_anon:0 isolated_anon:0 [ 256.366599][ T7096] active_file:3780 inactive_file:39951 isolated_file:0 [ 256.366599][ T7096] unevictable:768 dirty:157 writeback:0 [ 256.366599][ T7096] slab_reclaimable:11064 slab_unreclaimable:113723 [ 256.366599][ T7096] mapped:39720 shmem:1359 pagetables:1273 [ 256.366599][ T7096] sec_pagetables:0 bounce:0 [ 256.366599][ T7096] kernel_misc_reclaimable:0 [ 256.366599][ T7096] free:1287170 free_pcp:15088 free_cma:0 [ 256.412010][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.420992][ T7096] Node 0 active_anon:22484kB inactive_anon:0kB active_file:15120kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158880kB dirty:628kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13896kB pagetables:4924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.453044][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.468473][ T7096] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.499401][ T7096] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.529892][ T7096] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 256.535680][ T7096] Node 0 DMA32 free:1245292kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22484kB inactive_anon:0kB active_file:15120kB inactive_file:159596kB unevictable:1536kB writepending:628kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:40532kB local_pcp:27268kB free_cma:0kB [ 256.569282][ T7096] lowmem_reserve[]: 0 0 0 0 0 [ 256.576823][ T7096] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.608977][ T7096] lowmem_reserve[]: 0 0 0 0 0 [ 256.613825][ T7096] Node 1 Normal free:3888484kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19940kB local_pcp:12228kB free_cma:0kB [ 256.652982][ T7096] lowmem_reserve[]: 0 0 0 0 0 [ 256.657812][ T7096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.670673][ T7096] Node 0 DMA32: 1482*4kB (UME) 163*8kB (UME) 76*16kB (UM) 319*32kB (UME) 44*64kB (UME) 21*128kB (UM) 26*256kB (UME) 18*512kB (UM) 15*1024kB (UM) 7*2048kB (UM) 287*4096kB (UM) = 1245280kB [ 256.690668][ T7096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 256.703463][ T7096] Node 1 Normal: 175*4kB (UE) 59*8kB (UME) 41*16kB (UME) 102*32kB (UME) 36*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3888484kB [ 256.722246][ T7096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.731872][ T7096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.741258][ T7096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.750877][ T7096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.760339][ T7096] 45084 total pagecache pages [ 256.765111][ T7096] 0 pages in swap cache [ 256.769293][ T7096] Free swap = 124996kB [ 256.773447][ T7096] Total swap = 124996kB [ 256.777880][ T7096] 2097051 pages RAM [ 256.781698][ T7096] 0 pages HighMem/MovableOnly [ 256.786507][ T7096] 424122 pages reserved [ 256.790678][ T7096] 0 pages cma reserved [ 257.558999][ T3490] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.572477][ T8807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.850'. [ 257.666752][ T8812] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 257.669806][ T3490] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.720895][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.6.854'. [ 257.754104][ T8812] bond5: entered promiscuous mode [ 257.763055][ T8812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.786079][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 257.788428][ T3490] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.889271][ T8812] bond5: (slave bridge1): making interface the new active one [ 257.902834][ T8812] bridge1: entered promiscuous mode [ 257.914047][ T8812] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 257.987083][ T8819] syzkaller0: entered promiscuous mode [ 257.992599][ T8819] syzkaller0: entered allmulticast mode [ 258.024400][ T3490] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.116749][ T8559] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 259.298306][ T8559] usb 7-1: Using ep0 maxpacket: 8 [ 259.329131][ T8559] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 259.356161][ T8559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.380083][ T8559] usb 7-1: Product: syz [ 259.388906][ T8559] usb 7-1: Manufacturer: syz [ 259.404501][ T8559] usb 7-1: SerialNumber: syz [ 259.412268][ T8559] usb 7-1: config 0 descriptor?? [ 259.427657][ T8559] usbtest 7-1:0.0: FX2 device [ 259.440028][ T8559] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 259.464698][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 259.536358][ T30] audit: type=1326 audit(1763575960.250:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 259.558558][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.584580][ T30] audit: type=1326 audit(1763575960.250:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 259.629587][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 259.798059][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.811566][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.826662][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.847330][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 259.871827][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.881861][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.896352][ T24] usb 1-1: Product: syz [ 259.904186][ T24] usb 1-1: Manufacturer: syz [ 259.920045][ T8850] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 259.940730][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 259.945998][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 259.972146][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 259.978094][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 260.173424][ T8528] usb 1-1: USB disconnect, device number 5 [ 260.639226][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.655813][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.813341][ T8853] lo speed is unknown, defaulting to 1000 [ 260.844724][ T8863] ip6erspan0: entered allmulticast mode [ 260.871127][ T8863] bond2: left promiscuous mode [ 260.891289][ T8863] bridge0: left promiscuous mode [ 260.915165][ T8863] bond2: entered allmulticast mode [ 260.940354][ T8863] bridge0: entered allmulticast mode [ 260.969853][ T7298] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.001710][ T8853] lo speed is unknown, defaulting to 1000 [ 261.010148][ T7298] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.047079][ T8853] lo speed is unknown, defaulting to 1000 [ 261.074027][ T7298] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.113779][ T8853] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 261.140294][ T7298] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.174438][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.874'. [ 261.215698][ T8853] lo speed is unknown, defaulting to 1000 [ 261.243243][ T8853] lo speed is unknown, defaulting to 1000 [ 261.284165][ T8853] lo speed is unknown, defaulting to 1000 [ 261.303890][ T8853] lo speed is unknown, defaulting to 1000 [ 261.311777][ T3490] bridge_slave_1: left allmulticast mode [ 261.317638][ T3490] bridge_slave_1: left promiscuous mode [ 261.328732][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.342061][ T3490] bridge_slave_0: left allmulticast mode [ 261.347730][ T3490] bridge_slave_0: left promiscuous mode [ 261.355104][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.404921][ T8880] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 261.414758][ T8554] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 261.529012][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.878'. [ 261.576857][ T8554] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.587636][ T8554] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.597846][ T8554] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.611121][ T8554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.619522][ T8554] usb 2-1: SerialNumber: syz [ 261.686411][ T3490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.699151][ T3490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.710256][ T3490] bond0 (unregistering): Released all slaves [ 261.728976][ T8853] lo speed is unknown, defaulting to 1000 [ 261.764235][ T8880] bond6: entered promiscuous mode [ 261.774805][ T8880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.829090][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.855668][ T8554] usb 2-1: 0:2 : does not exist [ 261.862748][ T8885] bond6: (slave bridge2): making interface the new active one [ 261.870390][ T8885] bridge2: entered promiscuous mode [ 261.880167][ T8885] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 261.890766][ T8853] lo speed is unknown, defaulting to 1000 [ 261.902906][ T8853] lo speed is unknown, defaulting to 1000 [ 261.911073][ T8853] lo speed is unknown, defaulting to 1000 [ 261.956159][ T3490] tipc: Left network mode [ 262.017395][ T43] usb 7-1: USB disconnect, device number 4 [ 262.040041][ T8554] usb 2-1: USB disconnect, device number 2 [ 262.846597][ T8897] syzkaller0: entered promiscuous mode [ 262.862559][ T8897] syzkaller0: entered allmulticast mode [ 263.546350][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 263.670847][ T8914] loop5: detected capacity change from 0 to 128 [ 264.211343][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.888'. [ 264.580763][ T8932] siw: device registration error -23 [ 264.593261][ T30] audit: type=1326 audit(1763575964.983:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b5b8f749 code=0x7ffc0000 [ 266.655659][ T3490] hsr_slave_0: left promiscuous mode [ 266.680682][ T3490] hsr_slave_1: left promiscuous mode [ 266.733584][ T3490] veth1_macvtap: left promiscuous mode [ 266.745577][ T3490] veth0_macvtap: left promiscuous mode [ 266.756594][ T3490] veth1_vlan: left promiscuous mode [ 266.764257][ T3490] veth0_vlan: left promiscuous mode [ 267.314159][ T3490] team0 (unregistering): Port device team_slave_1 removed [ 267.371974][ T3490] team0 (unregistering): Port device team_slave_0 removed [ 267.866938][ T8950] tipc: Enabling of bearer rejected, failed to enable media [ 267.887267][ T8961] netlink: 'syz.1.898': attribute type 12 has an invalid length. [ 267.908746][ T8962] ¾x9ÿ: renamed from bridge_slave_0 [ 267.984209][ T8958] lo speed is unknown, defaulting to 1000 [ 268.312325][ T5142] Bluetooth: hci6: command 0x0405 tx timeout [ 268.483416][ T8523] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 268.834651][ T8523] usb 2-1: Using ep0 maxpacket: 32 [ 268.950996][ T8523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.973230][ T8523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.016051][ T8523] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 269.089857][ T8523] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 269.110092][ T8523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.135069][ T8523] usb 2-1: config 0 descriptor?? [ 269.212120][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.912'. [ 269.313262][ T9003] veth0_virt_wifi: renamed from veth1_vlan [ 269.545292][ T9006] syzkaller0: entered promiscuous mode [ 269.571013][ T9006] syzkaller0: entered allmulticast mode [ 269.668365][ T8523] usbhid 2-1:0.0: can't add hid device: -71 [ 269.681404][ T8523] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.693156][ T8523] usb 2-1: USB disconnect, device number 3 [ 270.641267][ T9040] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 273.140450][ T9029] tipc: Enabling of bearer rejected, failed to enable media [ 273.150339][ T9033] netlink: 'syz.2.919': attribute type 12 has an invalid length. [ 273.366933][ T9062] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 273.409002][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.927'. [ 273.494831][ T9077] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 273.734511][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.931'. [ 273.853181][ T9077] bond1: entered promiscuous mode [ 273.863424][ T9077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.034820][ T9077] bond1: (slave bridge0): making interface the new active one [ 274.266828][ T9077] bridge0: entered promiscuous mode [ 275.091027][ T9077] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 275.355229][ T30] audit: type=1326 audit(1763575975.039:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 275.440443][ T30] audit: type=1326 audit(1763575975.039:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 275.585177][ T30] audit: type=1326 audit(1763575975.085:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 275.996709][ T30] audit: type=1326 audit(1763575975.085:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 276.075855][ T9111] syzkaller0: entered promiscuous mode [ 276.084229][ T9111] syzkaller0: entered allmulticast mode [ 276.135730][ T30] audit: type=1326 audit(1763575975.085:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 280.532714][ T9118] netlink: 'syz.3.941': attribute type 12 has an invalid length. [ 280.547772][ T9132] tipc: Enabling of bearer rejected, failed to enable media [ 280.747357][ T9167] siw: device registration error -23 [ 280.816715][ T30] audit: type=1326 audit(1763575980.155:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b5b8f749 code=0x7ffc0000 [ 281.078579][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.964'. [ 281.213042][ T9189] syzkaller0: entered promiscuous mode [ 281.219642][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.967'. [ 281.229868][ T9189] syzkaller0: entered allmulticast mode [ 281.238975][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'. [ 281.254770][ T9195] netlink: 'syz.2.966': attribute type 12 has an invalid length. [ 281.310788][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 281.386314][ T9201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.393590][ T9201] IPv6: NLM_F_CREATE should be set when creating new route [ 282.520794][ T9201] lo: entered allmulticast mode [ 282.550693][ T9201] tunl0: entered allmulticast mode [ 282.565842][ T9201] gre0: entered allmulticast mode [ 282.629965][ T9212] siw: device registration error -23 [ 282.637095][ T9201] gretap0: entered allmulticast mode [ 282.651955][ T30] audit: type=1326 audit(1763575981.867:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.6.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 283.360081][ T9201] erspan0: entered allmulticast mode [ 283.385239][ T9201] ip_vti0: entered allmulticast mode [ 283.414983][ T9201] ip6_vti0: entered allmulticast mode [ 283.461804][ T9201] sit0: entered allmulticast mode [ 283.510441][ T9201] ip6tnl0: entered allmulticast mode [ 283.535090][ T9201] ip6gre0: entered allmulticast mode [ 283.684364][ T9201] syz_tun: entered allmulticast mode [ 283.694478][ T9201] ip6gretap0: entered allmulticast mode [ 283.715961][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.723741][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.750059][ T9201] bridge0: entered allmulticast mode [ 283.770411][ T9201] vcan0: entered allmulticast mode [ 283.784302][ T9201] bond_slave_0: left promiscuous mode [ 283.792176][ T9201] bond_slave_1: left promiscuous mode [ 283.797822][ T9201] bond0: entered allmulticast mode [ 283.803080][ T9201] bond_slave_0: entered allmulticast mode [ 283.808914][ T9201] bond_slave_1: entered allmulticast mode [ 283.820824][ T9201] team0: entered allmulticast mode [ 283.826754][ T9201] team_slave_0: entered allmulticast mode [ 283.832511][ T9201] team_slave_1: entered allmulticast mode [ 283.876779][ T9201] dummy0: entered allmulticast mode [ 283.943641][ T9201] nlmon0: entered allmulticast mode [ 283.967417][ T9201] caif0: entered allmulticast mode [ 283.978743][ T9201] veth0: entered allmulticast mode [ 284.025161][ T9201] veth1: entered allmulticast mode [ 284.086059][ T9201] wg0: entered allmulticast mode [ 284.117993][ T9201] wg1: entered allmulticast mode [ 284.230531][ T9201] wg2: entered allmulticast mode [ 284.314084][ T9201] veth0_to_bridge: entered allmulticast mode [ 284.372172][ T9201] veth1_to_bridge: entered allmulticast mode [ 284.422841][ T9201] veth0_to_bond: entered allmulticast mode [ 284.433981][ T9201] veth1_to_bond: entered allmulticast mode [ 284.444854][ T9201] veth0_to_team: entered allmulticast mode [ 284.457013][ T9201] veth1_to_team: entered allmulticast mode [ 284.469046][ T9201] veth0_to_batadv: entered allmulticast mode [ 284.479010][ T9201] batadv_slave_0: entered allmulticast mode [ 284.490102][ T9201] veth1_to_batadv: entered allmulticast mode [ 284.509011][ T9201] batadv_slave_1: entered allmulticast mode [ 284.519947][ T9201] xfrm0: entered allmulticast mode [ 284.529360][ T9201] veth0_to_hsr: entered allmulticast mode [ 284.541329][ T9201] hsr_slave_0: entered allmulticast mode [ 284.550101][ T9201] veth1_to_hsr: entered allmulticast mode [ 284.559460][ T9201] hsr_slave_1: entered allmulticast mode [ 284.578566][ T9201] hsr0: entered allmulticast mode [ 284.588332][ T9201] veth1_virt_wifi: entered allmulticast mode [ 284.598137][ T9201] veth0_virt_wifi: entered allmulticast mode [ 284.607512][ T9201] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 284.616422][ T9201] veth0_vlan: entered allmulticast mode [ 284.632533][ T9201] vlan0: entered allmulticast mode [ 284.638461][ T9201] vlan1: entered allmulticast mode [ 284.644534][ T9201] macvlan0: entered allmulticast mode [ 284.652411][ T9201] macvlan1: entered allmulticast mode [ 284.667035][ T9201] ipvlan0: entered allmulticast mode [ 284.674575][ T9201] ipvlan1: entered allmulticast mode [ 284.683187][ T9201] veth1_macvtap: entered allmulticast mode [ 284.736424][ T9201] veth0_macvtap: entered allmulticast mode [ 284.792097][ T9201] macvtap0: entered allmulticast mode [ 284.878895][ T9201] geneve0: entered allmulticast mode [ 284.922827][ T9201] geneve1: entered allmulticast mode [ 285.108613][ T9201] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 285.157340][ T9201] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 285.170994][ T9201] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 285.181245][ T9201] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 285.215071][ T9201] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 285.237490][ T9201] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 285.248659][ T9201] bond1: entered allmulticast mode [ 285.257160][ T9201] batadv0: entered allmulticast mode [ 285.262618][ T9201] ip6erspan0: entered allmulticast mode [ 285.270235][ T9201] geneve2: left promiscuous mode [ 285.280935][ T9201] bond2: left promiscuous mode [ 285.285727][ T9201] bridge1: left promiscuous mode [ 285.299606][ T9201] macvtap1: entered allmulticast mode [ 285.357440][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 285.383674][ T7298] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.466190][ T7298] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.491504][ T7298] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.492550][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.985'. [ 285.511331][ T7298] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.600241][ T9249] netlink: 'syz.2.984': attribute type 12 has an invalid length. [ 285.735312][ T9251] syzkaller0: entered promiscuous mode [ 285.748626][ T9251] syzkaller0: entered allmulticast mode [ 285.761607][ T8526] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 285.932329][ T8526] usb 6-1: config 2 has an invalid interface number: 169 but max is 0 [ 285.944041][ T8526] usb 6-1: config 2 has no interface number 0 [ 286.007460][ T8526] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 286.045062][ T8526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.090455][ T9260] netlink: 36 bytes leftover after parsing attributes in process `syz.6.990'. [ 286.117323][ T8526] cypress_m8 6-1:2.169: DeLorme Earthmate USB converter detected [ 286.138602][ T8526] earthmate ttyUSB0: required endpoint is missing [ 286.336175][ T8526] usb 6-1: USB disconnect, device number 3 [ 286.353753][ T8526] cypress_m8 6-1:2.169: device disconnected [ 287.615379][ T9283] netlink: 'syz.0.998': attribute type 2 has an invalid length. [ 287.671497][ T9290] netlink: 'syz.0.998': attribute type 2 has an invalid length. [ 288.281103][ T9283] !: entered promiscuous mode [ 288.298805][ T9290] !: left promiscuous mode [ 288.387250][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 288.466705][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 288.582896][ T9302] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1003'. [ 288.599278][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1005'. [ 289.253013][ T1205] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 289.438598][ T1205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.462146][ T1205] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 289.486858][ T1205] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 289.499516][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.514015][ T1205] usb 2-1: config 0 descriptor?? [ 289.551679][ T1205] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 289.569191][ T1205] dvb-usb: bulk message failed: -22 (3/0) [ 289.607451][ T1205] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 289.619809][ T1205] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 289.628159][ T1205] usb 2-1: media controller created [ 289.636505][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.762675][ T9323] dvb-usb: bulk message failed: -22 (2/0) [ 289.770141][ T9323] dvb-usb: bulk message failed: -22 (4/0) [ 289.820136][ T1205] dvb-usb: bulk message failed: -22 (6/0) [ 289.830436][ T1205] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 289.868937][ T1205] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 289.894151][ T1205] dvb-usb: schedule remote query interval to 150 msecs. [ 289.902957][ T1205] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 289.924860][ T1205] usb 2-1: USB disconnect, device number 4 [ 290.002464][ T30] audit: type=1326 audit(1763575988.752:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 290.026330][ T1205] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 290.133461][ T30] audit: type=1326 audit(1763575988.817:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9300f8f749 code=0x7ffc0000 [ 290.151529][ T9330] syzkaller0: entered promiscuous mode [ 290.161500][ T9330] syzkaller0: entered allmulticast mode [ 292.441850][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 292.855844][ T9371] siw: device registration error -23 [ 292.877215][ T30] audit: type=1326 audit(1763575991.427:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.6.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 293.975963][ T9401] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1036'. [ 294.032499][ T9400] syzkaller0: entered promiscuous mode [ 294.038142][ T9400] syzkaller0: entered allmulticast mode [ 296.747955][ T9418] syzkaller1: entered promiscuous mode [ 296.756270][ T9418] syzkaller1: entered allmulticast mode [ 297.221002][ T9435] siw: device registration error -23 [ 297.244642][ T30] audit: type=1326 audit(1763575995.524:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 297.301613][ T30] audit: type=1326 audit(1763575995.552:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e498f749 code=0x7ffc0000 [ 297.451691][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1050'. [ 297.477120][ T9444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1050'. [ 298.373690][ T9463] syzkaller0: entered promiscuous mode [ 298.428011][ T9463] syzkaller0: entered allmulticast mode [ 298.838359][ T9467] lo speed is unknown, defaulting to 1000 [ 298.838696][ T9476] syzkaller1: entered promiscuous mode [ 298.881136][ T9476] syzkaller1: entered allmulticast mode [ 299.391229][ T9484] lo speed is unknown, defaulting to 1000 [ 299.886346][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 299.960665][ T9504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1067'. [ 300.377847][ T9511] pim6reg1: entered promiscuous mode [ 300.386408][ T9511] pim6reg1: entered allmulticast mode [ 300.445014][ T9519] syzkaller0: entered promiscuous mode [ 300.455568][ T9519] syzkaller0: entered allmulticast mode [ 300.477606][ T9523] ÿÿÿÿÿÿ: renamed from vlan1 [ 300.628485][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 300.640825][ T9533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1078'. [ 300.672880][ T9527] syzkaller0: entered promiscuous mode [ 300.678530][ T9527] syzkaller0: entered allmulticast mode [ 300.697032][ T9535] macvtap2: entered promiscuous mode [ 300.702342][ T9535] bridge0: entered promiscuous mode [ 300.716262][ T9535] macvtap2: entered allmulticast mode [ 300.754501][ T9539] macvtap2: left promiscuous mode [ 300.766851][ T9539] bridge0: left promiscuous mode [ 300.780462][ T9539] macvtap2: left allmulticast mode [ 300.828726][ T9530] tipc: Enabled bearer , priority 0 [ 300.843488][ T9529] tipc: Enabled bearer , priority 0 [ 300.883349][ T9528] tipc: Disabling bearer [ 300.917817][ T9526] tipc: Resetting bearer [ 300.970843][ T9526] tipc: Disabling bearer [ 301.013474][ T9547] pim6reg1: entered promiscuous mode [ 301.019071][ T9547] pim6reg1: entered allmulticast mode [ 301.078372][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1085'. [ 301.131863][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1085'. [ 301.492539][ T9559] lo speed is unknown, defaulting to 1000 [ 301.874780][ T9575] syzkaller0: entered promiscuous mode [ 301.887825][ T9575] syzkaller0: entered allmulticast mode [ 302.009782][ T9583] netlink: 'syz.1.1096': attribute type 21 has an invalid length. [ 302.018097][ T9583] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1096'. [ 302.299526][ T9590] syzkaller0: entered promiscuous mode [ 302.311792][ T9590] syzkaller0: entered allmulticast mode [ 302.338974][ T9590] tipc: Started in network mode [ 302.343999][ T9590] tipc: Node identity e622437cf39b, cluster identity 4711 [ 302.372438][ T9590] tipc: Enabled bearer , priority 0 [ 302.394064][ T9588] tipc: Resetting bearer [ 302.422104][ T9588] tipc: Disabling bearer [ 302.452157][ T9597] syzkaller0: entered promiscuous mode [ 302.468365][ T9597] syzkaller0: entered allmulticast mode [ 302.534035][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.546047][ T9597] tipc: Enabled bearer , priority 0 [ 302.586422][ T9593] tipc: Resetting bearer [ 302.597028][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 302.728314][ T9593] tipc: Disabling bearer [ 302.742428][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 302.912255][ T8526] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 303.100431][ T8526] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.112694][ T8526] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.774044][ T8526] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.786106][ T8526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.799783][ T8526] usb 4-1: SerialNumber: syz [ 304.173389][ T9634] syzkaller0: entered promiscuous mode [ 304.180989][ T8526] usb 4-1: 0:2 : does not exist [ 304.192270][ T8526] usb 4-1: unit 5: unexpected type 0x03 [ 304.198526][ T9634] syzkaller0: entered allmulticast mode [ 304.283351][ T9630] syzkaller0: entered promiscuous mode [ 304.449314][ T9630] syzkaller0: entered allmulticast mode [ 304.861613][ T8526] usb 4-1: USB disconnect, device number 4 [ 305.322526][ T9653] tipc: Enabled bearer , priority 0 [ 305.393375][ T9651] tipc: Disabling bearer [ 306.400838][ T5142] Bluetooth: hci6: command 0x0405 tx timeout [ 306.536282][ T9663] netlink: 'syz.3.1123': attribute type 12 has an invalid length. [ 307.467246][ T9682] Driver unsupported XDP return value 0 on prog (id 286) dev N/A, expect packet loss! [ 308.040219][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 308.534965][ T9695] syzkaller0: entered promiscuous mode [ 308.540798][ T9695] syzkaller0: entered allmulticast mode [ 308.547122][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 308.550425][ T9695] tipc: Started in network mode [ 308.561219][ T9695] tipc: Node identity 226d9ec65aeb, cluster identity 4711 [ 308.584148][ T9695] tipc: Enabled bearer , priority 0 [ 308.604029][ T9694] tipc: Resetting bearer [ 308.669069][ T9694] tipc: Disabling bearer [ 308.775644][ T9704] tipc: Enabled bearer , priority 0 [ 308.862191][ T9703] tipc: Disabling bearer [ 308.944109][ T9719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1145'. [ 309.150992][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 309.200399][ T9726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.252470][ T9726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.779367][ T8544] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 309.931916][ T9732] bond0: left promiscuous mode [ 309.936759][ T9732] bond_slave_0: left promiscuous mode [ 309.942529][ T9732] bond_slave_1: left promiscuous mode [ 310.006665][ T9739] siw: device registration error -23 [ 310.028760][ T30] audit: type=1326 audit(1763576007.478:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0206f8f749 code=0x7ffc0000 [ 310.060898][ T8544] usb 3-1: Using ep0 maxpacket: 8 [ 310.073803][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1155'. [ 310.124473][ T8544] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 310.127228][ T30] audit: type=1326 audit(1763576007.516:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0206f8f749 code=0x7ffc0000 [ 310.133679][ T8544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.206620][ T8544] usb 3-1: Product: syz [ 310.213585][ T8544] usb 3-1: Manufacturer: syz [ 310.235132][ T8544] usb 3-1: SerialNumber: syz [ 310.261194][ T8544] usb 3-1: config 0 descriptor?? [ 310.283358][ T8544] usbtest 3-1:0.0: FX2 device [ 310.294107][ T9750] syzkaller0: entered promiscuous mode [ 310.299146][ T8544] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 310.317540][ T9750] syzkaller0: entered allmulticast mode [ 310.414021][ T9756] tipc: Enabled bearer , priority 0 [ 310.453913][ T9755] tipc: Disabling bearer [ 310.473608][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 310.507649][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1164'. [ 310.542053][ T9758] bond7 (unregistering): Released all slaves [ 310.880763][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1169'. [ 310.894056][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1170'. [ 311.637347][ T9802] syzkaller0: entered promiscuous mode [ 311.643023][ T9802] syzkaller0: entered allmulticast mode [ 312.858531][ T8523] usb 3-1: USB disconnect, device number 4 [ 313.009263][ T8526] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 313.189306][ T8526] usb 7-1: Using ep0 maxpacket: 16 [ 313.196669][ T8526] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.229654][ T8526] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.240011][ T8526] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 313.249230][ T8526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.260384][ T8526] usb 7-1: config 0 descriptor?? [ 313.327140][ T9839] loop2: detected capacity change from 0 to 1024 [ 313.354523][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 314.101524][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 314.575881][ C0] hrtimer: interrupt took 32618 ns [ 315.605081][ T8526] usbhid 7-1:0.0: can't add hid device: -71 [ 315.611193][ T8526] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 315.629431][ T8526] usb 7-1: USB disconnect, device number 5 [ 315.883346][ T8544] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 315.942656][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 316.003153][ T9884] bond3 (unregistering): Released all slaves [ 316.029868][ T9873] lo speed is unknown, defaulting to 1000 [ 316.043706][ T8544] usb 6-1: Using ep0 maxpacket: 8 [ 316.062058][ T8544] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 316.083213][ T8544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.156433][ T8544] usb 6-1: Product: syz [ 316.164194][ T8544] usb 6-1: Manufacturer: syz [ 316.174719][ T8544] usb 6-1: SerialNumber: syz [ 316.189887][ T8544] usb 6-1: config 0 descriptor?? [ 316.243354][ T8544] usbtest 6-1:0.0: FX2 device [ 316.257494][ T8544] usbtest 6-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 316.276372][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1210'. [ 316.778364][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 317.145338][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1225'. [ 317.435273][ T9949] wg2: left allmulticast mode [ 317.505702][ T9949] wg2: entered promiscuous mode [ 317.523371][ T9949] wg2: entered allmulticast mode [ 317.666920][ T43] usb 6-1: USB disconnect, device number 4 [ 317.820171][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 318.836876][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 318.867746][ T9983] tipc: Enabled bearer , priority 0 [ 318.910109][ T9975] tipc: Disabling bearer [ 318.930035][ T9989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1246'. [ 319.263740][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1250'. [ 319.297536][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1251'. [ 320.240907][T10013] tipc: Enabled bearer , priority 0 [ 320.270247][T10013] syzkaller0: entered promiscuous mode [ 320.275736][T10013] syzkaller0: entered allmulticast mode [ 320.368168][T10013] tipc: Resetting bearer [ 320.408566][T10012] tipc: Resetting bearer [ 320.519974][T10012] tipc: Disabling bearer [ 320.615405][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 320.638897][T10029] tipc: Enabled bearer , priority 0 [ 320.658006][T10028] tipc: Disabling bearer [ 320.747920][T10037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1263'. [ 320.787214][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1264'. [ 321.064543][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1265'. [ 321.114673][T10045] syzkaller0: entered promiscuous mode [ 321.142350][T10045] syzkaller0: entered allmulticast mode [ 321.283878][T10050] lo speed is unknown, defaulting to 1000 [ 321.575097][T10055] v: renamed from vlan0 [ 321.651849][T10065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.667367][T10067] Cannot find del_set index 4 as target [ 321.796576][T10072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1278'. [ 322.657410][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 322.925421][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 322.994771][T10094] syzkaller0: entered promiscuous mode [ 323.033034][T10094] syzkaller0: entered allmulticast mode [ 323.229609][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1289'. [ 323.699188][T10105] bond3 (unregistering): Released all slaves [ 323.817783][T10107] "syz.0.1290" (10107) uses obsolete ecb(arc4) skcipher [ 324.009692][T10124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1293'. [ 324.358281][T10135] netlink: 'syz.0.1295': attribute type 12 has an invalid length. [ 326.502050][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 326.566044][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 326.891128][T10175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1310'. [ 327.043690][T10179] netlink: ct family unspecified [ 327.063084][T10179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.507514][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.339751][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1324'. [ 329.250298][T10218] openvswitch: netlink: Duplicate or invalid key (type 0). [ 329.263613][T10218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.399801][T10221] IPVS: fo: FWM 3 0x00000003 - no destination available [ 330.125089][ T43] lo speed is unknown, defaulting to 1000 [ 330.292919][T10245] netlink: 'syz.5.1337': attribute type 2 has an invalid length. [ 330.312994][T10245] !: entered promiscuous mode [ 330.315142][T10234] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 330.321243][T10245] netlink: 'syz.5.1337': attribute type 2 has an invalid length. [ 330.335338][T10245] !: left promiscuous mode [ 330.360414][T10234] syz_tun: entered promiscuous mode [ 330.390135][T10234] syz_tun: entered allmulticast mode [ 330.412689][T10234] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 332.355485][T10264] loop2: detected capacity change from 0 to 256 [ 332.524000][T10268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1344'. [ 332.566605][T10264] FAT-fs (loop2): Directory bread(block 64) failed [ 332.602713][T10270] IPVS: fo: FWM 3 0x00000003 - no destination available [ 332.602728][T10264] FAT-fs (loop2): Directory bread(block 65) failed [ 332.694020][T10264] FAT-fs (loop2): Directory bread(block 66) failed [ 332.714030][T10264] FAT-fs (loop2): Directory bread(block 67) failed [ 332.731552][T10264] FAT-fs (loop2): Directory bread(block 68) failed [ 332.753293][T10264] FAT-fs (loop2): Directory bread(block 69) failed [ 332.759921][T10264] FAT-fs (loop2): Directory bread(block 70) failed [ 332.786983][T10264] FAT-fs (loop2): Directory bread(block 71) failed [ 332.826490][T10264] FAT-fs (loop2): Directory bread(block 72) failed [ 332.858450][T10264] FAT-fs (loop2): Directory bread(block 73) failed [ 333.767684][T10293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1356'. [ 335.071305][T10305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'. [ 335.191101][ T5142] Bluetooth: hci6: command 0x0405 tx timeout [ 335.997037][T10318] cgroup: Setting release_agent not allowed [ 337.363901][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 337.408673][T10339] siw: device registration error -23 [ 337.442857][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1375'. [ 337.491729][T10340] loop5: detected capacity change from 0 to 1024 [ 338.622522][T10362] lo speed is unknown, defaulting to 1000 [ 338.743828][T10371] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1382'. [ 338.882285][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 339.123601][T10376] bond2 (unregistering): Released all slaves [ 339.245283][ T8544] IPVS: starting estimator thread 0... [ 339.306644][ T8526] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 339.349376][T10394] IPVS: using max 26 ests per chain, 62400 per kthread [ 339.501691][ T8526] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.548876][ T8526] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.611904][ T8526] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 339.646950][ T8526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 339.673397][T10391] syzkaller0: entered promiscuous mode [ 339.676711][ T8526] usb 7-1: SerialNumber: syz [ 339.678887][T10391] syzkaller0: entered allmulticast mode [ 339.680182][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 339.761520][T10408] siw: device registration error -23 [ 339.863855][T10397] syzkaller0: entered promiscuous mode [ 339.873566][T10397] syzkaller0: entered allmulticast mode [ 339.927514][ T8526] usb 7-1: 0:2 : does not exist [ 339.940208][ T8526] usb 7-1: unit 255 not found! [ 340.025669][ T8526] usb 7-1: USB disconnect, device number 6 [ 340.155825][T10418] netlink: 'syz.2.1394': attribute type 10 has an invalid length. [ 340.914762][T10439] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1399'. [ 340.985746][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1400'. [ 341.211803][T10413] v: renamed from vlan0 (while UP) [ 341.231428][T10418] syz_tun: entered promiscuous mode [ 341.241971][T10418] syz_tun: left allmulticast mode [ 341.262243][T10418] syz_tun: entered allmulticast mode [ 341.273913][T10418] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 341.367006][T10424] lo speed is unknown, defaulting to 1000 [ 341.462707][ T8528] IPVS: starting estimator thread 0... [ 341.581603][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1401'. [ 341.740044][T10452] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001 [ 341.779959][T10446] IPVS: using max 25 ests per chain, 60000 per kthread [ 341.906662][T10453] loop1: detected capacity change from 0 to 256 [ 341.982298][T10453] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 342.983576][T10469] syzkaller0: entered promiscuous mode [ 342.990791][T10469] syzkaller0: entered allmulticast mode [ 343.209090][T10476] siw: device registration error -23 [ 343.270411][ T30] audit: type=1326 audit(1763576038.562:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.5.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3ed8f749 code=0x7ffc0000 [ 343.668228][ T30] audit: type=1326 audit(1763576038.571:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.5.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3ed8f749 code=0x7ffc0000 [ 343.836779][T10489] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 343.860210][T10486] syzkaller0: entered promiscuous mode [ 343.865755][T10486] syzkaller0: entered allmulticast mode [ 343.958600][T10501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'. [ 344.019061][T10489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.147420][T10525] loop2: detected capacity change from 0 to 128 [ 345.283778][T10535] netlink: 'syz.3.1428': attribute type 10 has an invalid length. [ 345.688474][T10542] tipc: Enabling of bearer rejected, failed to enable media [ 346.470072][T10541] syzkaller0: entered promiscuous mode [ 346.475576][T10541] syzkaller0: entered allmulticast mode [ 346.533044][T10545] syzkaller0: entered promiscuous mode [ 346.541893][T10545] syzkaller0: entered allmulticast mode [ 346.581480][T10551] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 346.594442][T10551] overlayfs: missing 'lowerdir' [ 346.771253][T10553] tipc: Enabled bearer , priority 0 [ 346.974714][T10539] tipc: Resetting bearer [ 347.043137][T10539] tipc: Disabling bearer [ 347.090827][T10564] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 347.155770][T10564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.240824][T10564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1437'. [ 347.514600][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1441'. [ 347.594212][T10584] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 347.721889][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 350.243786][ T5142] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 350.425906][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 350.631952][T10625] netlink: 'syz.3.1455': attribute type 4 has an invalid length. [ 350.738715][T10627] loop6: detected capacity change from 0 to 16 [ 350.814976][T10627] erofs (device loop6): mounted with root inode @ nid 36. [ 352.321564][T10644] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 352.448968][T10644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.563094][T10644] bond3: (slave ip6gretap1): making interface the new active one [ 352.639701][T10644] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 354.605816][ T5142] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 354.615515][ T5142] Bluetooth: hci2: command 0x0401 tx timeout [ 354.639463][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1474'. [ 355.766617][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1492'. [ 356.828686][ T5142] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 356.917720][ T5142] Bluetooth: hci2: command 0x0401 tx timeout [ 359.680104][T10736] siw: device registration error -23 [ 359.704374][ T30] audit: type=1326 audit(1763576053.930:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0206f8f749 code=0x7ffc0000 [ 361.279146][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 361.289732][ T5142] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 362.452757][T10748] lo speed is unknown, defaulting to 1000 [ 362.563891][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 363.663735][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 363.678539][T10792] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1520'. [ 364.204331][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 364.867885][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 364.873929][ T5142] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 367.257841][T10841] loop1: detected capacity change from 0 to 128 [ 368.289162][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 370.064951][ T8554] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 370.228769][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1556'. [ 370.290371][ T8554] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.324843][ T8554] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.370895][ T8554] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.416192][ T8554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.463125][ T8554] usb 1-1: SerialNumber: syz [ 370.471538][T10891] overlay: Unknown parameter '/' [ 370.757024][ T8554] usb 1-1: 0:2 : does not exist [ 370.841763][ T8554] usb 1-1: USB disconnect, device number 6 [ 371.992305][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1568'. [ 372.060447][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1568'. [ 372.137564][T10920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1570'. [ 372.159771][T10918] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 372.177843][T10920] openvswitch: netlink: Flow key attr not present in new flow. [ 372.223054][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 372.243180][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 372.265424][T10918] 8021q: adding VLAN 0 to HW filter on device bond8 [ 372.411197][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 372.432836][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 373.373236][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.647805][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.724173][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.733373][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.170640][T10941] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001 [ 375.178280][T10941] IPVS: fo: FWM 3 0x00000003 - no destination available [ 375.285205][T10942] loop5: detected capacity change from 0 to 256 [ 375.454999][T10942] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 376.925239][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1584'. [ 377.206359][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1587'. [ 377.226418][T10970] netlink: 'syz.5.1588': attribute type 1 has an invalid length. [ 377.231432][T10973] openvswitch: netlink: Flow key attr not present in new flow. [ 377.420355][T10970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.468871][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 377.480060][T10976] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 377.535891][T10976] bond3: entered allmulticast mode [ 379.722047][T10977] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 379.851708][T10989] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1594'. [ 380.097969][T10998] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 380.586912][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1604'. [ 380.605503][T11011] fuse: Bad value for 'group_id' [ 380.622757][T11011] fuse: Bad value for 'group_id' [ 380.633581][T11012] openvswitch: netlink: Flow key attr not present in new flow. [ 380.642864][T11014] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 380.919083][T11021] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 381.641786][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 381.805049][T11021] bond2 (unregistering): Released all slaves [ 381.909853][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 381.938081][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.949633][T11026] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 381.959173][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.033132][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.060455][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.101023][ T43] usb 6-1: SerialNumber: syz [ 382.352795][ T43] usb 6-1: 0:2 : does not exist [ 382.451073][ T43] usb 6-1: USB disconnect, device number 5 [ 384.952478][T11079] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 385.072781][T11079] 8021q: adding VLAN 0 to HW filter on device bond9 [ 385.106325][ T8528] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 385.178836][T11079] bond9: (slave ip6gretap1): making interface the new active one [ 385.224308][T11079] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 385.256268][ T8528] usb 3-1: device descriptor read/64, error -71 [ 385.543566][ T8528] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 497.997857][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 498.004929][ C1] rcu: 0-...!: (1 GPs behind) idle=b4d4/1/0x4000000000000000 softirq=40518/40519 fqs=2 [ 498.015830][ C1] rcu: (detected by 1, t=10502 jiffies, g=39049, q=114 ncpus=2) [ 498.023548][ C1] Sending NMI from CPU 1 to CPUs 0: [ 498.023582][ C0] NMI backtrace for cpu 0 [ 498.023597][ C0] CPU: 0 UID: 0 PID: 11110 Comm: syz.3.1640 Not tainted syzkaller #0 PREEMPT(full) [ 498.023621][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.023634][ C0] RIP: 0010:check_preemption_disabled+0x25/0x120 [ 498.023662][ C0] Code: 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 de b4 27 07 48 89 44 24 08 65 8b 05 e6 b4 27 07 65 8b 0d db b4 27 07 c1 ff ff ff 7f 74 23 65 48 8b 0d bb b4 27 07 48 3b 4c 24 08 0f [ 498.023680][ C0] RSP: 0018:ffffc90000007bb0 EFLAGS: 00000082 [ 498.023699][ C0] RAX: 0000000000000000 RBX: ffffffff89602478 RCX: 0000000080010002 [ 498.023714][ C0] RDX: 0000000000010000 RSI: ffffffff8bbf08c0 RDI: ffffffff8bbf0880 [ 498.023730][ C0] RBP: 0000000000000001 R08: ffff8880583b015f R09: 1ffff1100b07602b [ 498.023745][ C0] R10: dffffc0000000000 R11: ffffed100b07602c R12: ffff8880583b0360 [ 498.023761][ C0] R13: ffffffff89602478 R14: ffffffff8df3d6e0 R15: ffff88807de41000 [ 498.023782][ C0] FS: 000055558de6f500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 498.023801][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.023816][ C0] CR2: 00007f9301ddcf98 CR3: 000000002fe27000 CR4: 0000000000350ef0 [ 498.023833][ C0] Call Trace: [ 498.023842][ C0] [ 498.023850][ C0] ? __pfx___netif_schedule+0x10/0x10 [ 498.023875][ C0] ? advance_sched+0x9f8/0xc90 [ 498.023899][ C0] rcu_is_watching+0x15/0xb0 [ 498.023924][ C0] ? advance_sched+0x9f8/0xc90 [ 498.023947][ C0] lock_release+0x4b/0x3e0 [ 498.023968][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.023994][ C0] ? advance_sched+0x9f8/0xc90 [ 498.024016][ C0] ? advance_sched+0x9f8/0xc90 [ 498.024039][ C0] advance_sched+0xb23/0xc90 [ 498.024073][ C0] ? __pfx_advance_sched+0x10/0x10 [ 498.024095][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 498.024119][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 498.024152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.024189][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 498.024212][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.024237][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.024268][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 498.024311][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 498.024340][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 498.024371][ C0] [ 498.024379][ C0] [ 498.024394][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.024417][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 498.024450][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 3f 0d b8 09 e8 7a b9 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 498.024467][ C0] RSP: 0018:ffffc9000f1677b8 EFLAGS: 00000286 [ 498.024486][ C0] RAX: 2a2061c8b2749500 RBX: 0000000000000000 RCX: 2a2061c8b2749500 [ 498.024501][ C0] RDX: 0000000000000000 RSI: ffffffff8d70e34e RDI: ffffffff8bbf08e0 [ 498.024516][ C0] RBP: ffffc9000f167810 R08: ffffffff8f7ced77 R09: 1ffffffff1ef9dae [ 498.024532][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9daf R12: ffff88807ddfdac0 [ 498.024549][ C0] R13: dffffc0000000000 R14: ffff88802e599e40 R15: ffff8880b883abd8 [ 498.024579][ C0] ? finish_task_switch+0x266/0x950 [ 498.024616][ C0] __schedule+0x17a0/0x4cc0 [ 498.024658][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 498.024685][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.024711][ C0] ? __pfx___schedule+0x10/0x10 [ 498.024743][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.024767][ C0] ? __cgroup_account_cputime+0xe5/0x120 [ 498.024798][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.024822][ C0] ? rcu_is_watching+0x15/0xb0 [ 498.024848][ C0] ? preempt_schedule+0xae/0xc0 [ 498.024879][ C0] preempt_schedule_common+0x83/0xd0 [ 498.024914][ C0] preempt_schedule+0xae/0xc0 [ 498.024944][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 498.024974][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.024998][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 498.025028][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 498.025059][ C0] preempt_schedule_thunk+0x16/0x30 [ 498.025088][ C0] try_to_wake_up+0x82b/0x12b0 [ 498.025125][ C0] wake_up_q+0x85/0xd0 [ 498.025148][ C0] futex_wake+0x4a0/0x560 [ 498.025174][ C0] ? __pfx_futex_wake+0x10/0x10 [ 498.025193][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 498.025224][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 498.025249][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.025279][ C0] do_futex+0x395/0x420 [ 498.025315][ C0] ? __pfx_do_futex+0x10/0x10 [ 498.025344][ C0] ? count_memcg_event_mm+0x21/0x260 [ 498.025372][ C0] ? count_memcg_event_mm+0x21/0x260 [ 498.025410][ C0] __se_sys_futex+0x36f/0x400 [ 498.025441][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.025470][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 498.025502][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.025526][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 498.025551][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.025576][ C0] ? __x64_sys_futex+0x21/0xf0 [ 498.025609][ C0] do_syscall_64+0xfa/0xfa0 [ 498.025641][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.025672][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.025692][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.025717][ C0] ? exc_page_fault+0xab/0x100 [ 498.025749][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.025769][ C0] RIP: 0033:0x7f9300f8f749 [ 498.025788][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.025805][ C0] RSP: 002b:00007ffec15d8d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 498.025826][ C0] RAX: ffffffffffffffda RBX: 00007f93011e5fa8 RCX: 00007f9300f8f749 [ 498.025842][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f93011e5fa8 [ 498.025857][ C0] RBP: 0000000000000000 R08: 00007ffec15d8bb7 R09: 00000001c15d900f [ 498.025871][ C0] R10: 00007f93011e5fa0 R11: 0000000000000246 R12: 00007f93011e5fac [ 498.025886][ C0] R13: 00007f93011e5fa0 R14: 00000000000000f0 R15: 0000000000000002 [ 498.025913][ C0] [ 498.026574][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g39049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 498.641167][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 498.651127][ C1] rcu: RCU grace-period kthread stack dump: [ 498.657001][ C1] task:rcu_preempt state:R running task stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 498.670508][ C1] Call Trace: [ 498.673778][ C1] [ 498.676704][ C1] __schedule+0x1798/0x4cc0 [ 498.681244][ C1] ? __lock_acquire+0xab9/0xd20 [ 498.686093][ C1] ? __pfx___schedule+0x10/0x10 [ 498.690963][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.696597][ C1] ? schedule+0x91/0x360 [ 498.700853][ C1] schedule+0x165/0x360 [ 498.705024][ C1] schedule_timeout+0x12b/0x270 [ 498.709872][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 498.715248][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 498.721149][ C1] ? __pfx_process_timeout+0x10/0x10 [ 498.726444][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.732166][ C1] ? prepare_to_swait_event+0x341/0x380 [ 498.737723][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 498.742583][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 498.748735][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 498.754008][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 498.759218][ C1] ? finish_swait+0xcd/0x1f0 [ 498.763815][ C1] rcu_gp_kthread+0x99/0x390 [ 498.768404][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 498.773599][ C1] ? __kthread_parkme+0x7b/0x200 [ 498.778540][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.784169][ C1] ? __kthread_parkme+0x1a1/0x200 [ 498.789202][ C1] kthread+0x711/0x8a0 [ 498.793284][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 498.798493][ C1] ? __pfx_kthread+0x10/0x10 [ 498.803084][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.808718][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.813919][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.819546][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.824750][ C1] ? __pfx_kthread+0x10/0x10 [ 498.829343][ C1] ret_from_fork+0x4bc/0x870 [ 498.833935][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 498.839048][ C1] ? __switch_to_asm+0x39/0x70 [ 498.843807][ C1] ? __switch_to_asm+0x33/0x70 [ 498.848572][ C1] ? __pfx_kthread+0x10/0x10 [ 498.853169][ C1] ret_from_fork_asm+0x1a/0x30 [ 498.857947][ C1] [ 498.860953][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 498.867266][ C1] CPU: 1 UID: 0 PID: 11111 Comm: syz.0.1639 Not tainted syzkaller #0 PREEMPT(full) [ 498.876630][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.886676][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 498.893357][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 e6 73 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 91 6f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 75 6f [ 498.913220][ C1] RSP: 0018:ffffc9000c52f480 EFLAGS: 00000293 [ 498.919305][ C1] RAX: ffffffff81b4944b RBX: 1ffff11017108441 RCX: ffff888055515ac0 [ 498.927267][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 498.935230][ C1] RBP: ffffc9000c52f600 R08: ffffffff8f7ced77 R09: 1ffffffff1ef9dae [ 498.943191][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9daf R12: ffff8880b8842208 [ 498.951171][ C1] R13: dffffc0000000000 R14: ffff8880b893b240 R15: 0000000000000000 [ 498.959134][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 498.968051][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.974621][ C1] CR2: 00007f48e4bb7198 CR3: 000000005c140000 CR4: 0000000000350ef0 [ 498.982588][ C1] Call Trace: [ 498.985856][ C1] [ 498.988784][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 498.994000][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 499.000328][ C1] ? free_pgd_range+0x144b/0x14c0 [ 499.005355][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.010986][ C1] ? rcu_is_watching+0x15/0xb0 [ 499.015751][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 499.020957][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 499.026070][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 499.031198][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.036826][ C1] ? free_pgtables+0x8e0/0x9c0 [ 499.041590][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 499.047159][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 499.052284][ C1] tlb_flush_mmu+0x1a7/0x680 [ 499.056868][ C1] ? __pfx_down_write+0x10/0x10 [ 499.061714][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 499.066315][ C1] exit_mmap+0x444/0xb40 [ 499.070561][ C1] ? uprobe_clear_state+0x20f/0x290 [ 499.075844][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 499.080610][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 499.086269][ C1] ? __pfx_exit_aio+0x10/0x10 [ 499.091048][ C1] ? uprobe_clear_state+0x27c/0x290 [ 499.096239][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.101875][ C1] __mmput+0x118/0x430 [ 499.105945][ C1] exit_mm+0x1da/0x2c0 [ 499.110018][ C1] ? __pfx_exit_mm+0x10/0x10 [ 499.114611][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.120243][ C1] ? rcu_is_watching+0x15/0xb0 [ 499.125012][ C1] do_exit+0x648/0x2300 [ 499.129178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.134809][ C1] ? do_raw_spin_lock+0x121/0x290 [ 499.139854][ C1] ? __pfx_do_exit+0x10/0x10 [ 499.144468][ C1] do_group_exit+0x21c/0x2d0 [ 499.149068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.154697][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.159907][ C1] get_signal+0x1285/0x1340 [ 499.164618][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 499.170228][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 499.176387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.182020][ C1] ? __se_sys_futex+0x36f/0x400 [ 499.186896][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 499.192352][ C1] exit_to_user_mode_loop+0x72/0x130 [ 499.197633][ C1] do_syscall_64+0x2bd/0xfa0 [ 499.202236][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.207449][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.213509][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.219139][ C1] ? exc_page_fault+0xab/0x100 [ 499.223909][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.229797][ C1] RIP: 0033:0x7f0206f8f749 [ 499.234293][ C1] Code: Unable to access opcode bytes at 0x7f0206f8f71f. [ 499.241295][ C1] RSP: 002b:00007f0207efe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 499.249708][ C1] RAX: 0000000000000001 RBX: 00007f02071e5fa8 RCX: 00007f0206f8f749 [ 499.257683][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f02071e5fac [ 499.265647][ C1] RBP: 00007f02071e5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 499.273620][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 499.281596][ C1] R13: 00007f02071e6038 R14: 00007ffca87cd570 R15: 00007ffca87cd658 [ 499.289585][ C1]