last executing test programs: 10m29.326096398s ago: executing program 0 (id=846): openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) pipe2$9p(&(0x7f0000000000), 0x0) creat(0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) 10m27.019339989s ago: executing program 0 (id=850): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) 10m23.747947357s ago: executing program 0 (id=860): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x0, 0x265a4e34}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m22.638710012s ago: executing program 0 (id=868): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp6\x00') lseek(r0, 0x1, 0x0) 10m22.370373089s ago: executing program 0 (id=870): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1000, 0x1, &(0x7f0000000800)) 10m22.1760518s ago: executing program 0 (id=873): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f000000a880)={0x2020}, 0x2020) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 10m6.817143917s ago: executing program 32 (id=873): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f000000a880)={0x2020}, 0x2020) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m10.312305398s ago: executing program 1 (id=3366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x4) syz_emit_ethernet(0x96, &(0x7f0000000240)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864, 0x30, 0x0, [], "a9e30205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f454dec5278a5ddaff09e9ac607652d"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2, {0x10000000, 0xfffe}}}}}}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffef4, 0x20008040, 0x0, 0xff1a) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 1m9.307509912s ago: executing program 1 (id=3368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.007967848s ago: executing program 1 (id=3369): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f00000002c0)=0x10) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m7.024543633s ago: executing program 1 (id=3373): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) 1m6.845938228s ago: executing program 1 (id=3374): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) io_uring_enter(r4, 0x21ac, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x32, 0x0, 0xa, 0x2, 0x0, @void, @value}, 0x28) r6 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x129400) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(0xffffffffffffffff, &(0x7f00000013c0)=""/4089, 0xff9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000240)={"4043f274", 0xf, 0x4, 0x3, 0x8, 0x200, "ade19ee8e15082c0260c5656fa713d", "19373cdb", "7e191ae0", "cc9e8cb1", ["d10e6c49c6df0a269f3b242f", "d2e7f10bb89d3768db553565", "e1b7d4c0f0ea14b05d652680", "aeda301a3f78578e8c5b56fd"]}) 1m4.47343668s ago: executing program 1 (id=3382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) 1m3.796854789s ago: executing program 33 (id=3382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) 15.230805325s ago: executing program 3 (id=3519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.180565309s ago: executing program 3 (id=3536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000540), 0x1, 0x80000) r2 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, 0x0, r1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 10.908005822s ago: executing program 6 (id=3540): openat$kvm(0xffffffffffffff9c, 0x0, 0x541, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_open(&(0x7f00000000c0)='\x04pYIr\x11>\x93\xdc\xd5\xee\\\xa1O\x01\r\x82\xce\xb4\xd6\xe2\x18\v\t)\xc0b\r\xddh\xe3\xd8sb#e\"\x8e^\xf8\x9dg\x86\xd1\x95\xa3\x0e\tb\x8fcm\xe7F\xf6\xbb=$\x88\xf8\x1f\xef\x88\xdd\xbdgx\xb4C\x9e~', 0x2, 0x18, &(0x7f0000000180)={0x1, 0xb, 0x80006, 0xfffffffc}) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) 10.691528402s ago: executing program 3 (id=3542): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x1}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x17, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) creat(&(0x7f0000000000)='./file1\x00', 0x5c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x2f, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000000100000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.840065387s ago: executing program 6 (id=3543): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev2(r6, &(0x7f0000000440)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x5, 0x80, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)=0x2, 0x4) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r10 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff6, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_POLICE={0x1c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40) dup3(r2, r1, 0x0) 5.519760375s ago: executing program 2 (id=3553): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.266740722s ago: executing program 2 (id=3555): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 5.029244032s ago: executing program 5 (id=3556): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) accept(r0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x4040000) 4.895995277s ago: executing program 6 (id=3557): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r1, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7e0}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) 4.859845103s ago: executing program 3 (id=3558): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 4.769659289s ago: executing program 5 (id=3559): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.483694526s ago: executing program 6 (id=3560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(&(0x7f0000007e80)='ufs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}}, 0x0) 3.602464057s ago: executing program 5 (id=3562): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0xffffffff85000014, 0x1, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.601524313s ago: executing program 4 (id=3563): r0 = syz_io_uring_setup(0x78d1, &(0x7f00000000c0)={0x0, 0x5023, 0xf54eb384850dfacc, 0x1, 0x27}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r0, 0x9d2, 0xa960, 0x21, &(0x7f0000000400)={[0x4395]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x7866, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) waitid(0x1, r5, 0x0, 0x4, 0x0) 3.422611083s ago: executing program 6 (id=3564): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) unshare(0x22020600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x25, 0x10, @val=@netkit={@void, @value=r2}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf25040000001800018014000200766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) 2.903357926s ago: executing program 2 (id=3565): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.832063619s ago: executing program 5 (id=3566): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.713793508s ago: executing program 2 (id=3567): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1}, &(0x7f0000000180)=0x8) 2.678944434s ago: executing program 4 (id=3568): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x7f) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0xf76, 0x7, 0x8, 0x8000a, 0x11, "d571de9262f6f2757c7f61487c169bb1af8f87"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) 2.56804059s ago: executing program 5 (id=3569): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) accept(r0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x4040000) 2.406114661s ago: executing program 4 (id=3570): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.336794745s ago: executing program 5 (id=3571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.281056814s ago: executing program 4 (id=3572): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x88200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000500)={0x9, 0x8, 0x1, 0x1ff, '\x00', '\x00', '\x00', 0xe, 0x1, 0x8, 0xfc2, "f9912fa04476a8f1497f7bbea0ce97e2"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{0x3}, 0x80}}}, 0x7) chdir(&(0x7f00000000c0)='./file1\x00') 1.169662618s ago: executing program 2 (id=3573): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.168612449s ago: executing program 3 (id=3574): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x7c, 0x28, 0xd27, 0x0, 0x100, {0x0, 0x0, 0x0, r3, {0x10}, {0x8}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_skbmod={0x44, 0x16, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa2e}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.097811381s ago: executing program 4 (id=3575): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x7e6a, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) 975.873165ms ago: executing program 4 (id=3576): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 156.741096ms ago: executing program 3 (id=3577): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x400, 0x0, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x5, 0x0, 0xffffffff, 0xf, 0x0, 0x6, 0x200, 0x7}}}}]}, 0x58}}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 101.25692ms ago: executing program 2 (id=3578): r0 = syz_io_uring_setup(0x78d1, &(0x7f00000000c0)={0x0, 0x5023, 0xf54eb384850dfacc, 0x1, 0x27}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r0, 0x9d2, 0xa960, 0x21, &(0x7f0000000400)={[0x4395]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x7866, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) waitid(0x1, r5, 0x0, 0x4, 0x0) 0s ago: executing program 6 (id=3579): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xa508}, &(0x7f0000000340)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.5.2297'. [ 607.274559][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.389664][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 607.402906][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.440060][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.464703][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.487222][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.502937][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.512998][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.533797][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 607.579185][ T5879] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.413023][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.819149][ T6024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.831066][T12742] netlink: 'syz.3.2316': attribute type 27 has an invalid length. [ 609.102179][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.109725][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.545894][T12742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.602971][T12742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.892954][T12742] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.908954][T12742] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.918324][T12742] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.937772][T12742] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.035638][T12742] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 610.049039][T12742] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 610.099815][ T5964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 610.361514][T12742] macvtap1: left promiscuous mode [ 610.366752][T12742] macvtap1: left allmulticast mode [ 610.373585][T12742] macvtap2: left promiscuous mode [ 610.378922][T12742] macvtap2: left allmulticast mode [ 610.385197][T12745] syz_tun: entered allmulticast mode [ 610.392737][T12747] syz_tun: left allmulticast mode [ 611.062865][T12748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.071363][T12748] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.083110][T12748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.116213][T12769] bridge_slave_0: left allmulticast mode [ 611.139276][T12769] bridge_slave_0: left promiscuous mode [ 611.148341][T12769] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.185297][T12769] bridge_slave_1: left promiscuous mode [ 611.199326][T12769] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.250249][ T5964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 611.259415][T12769] bond0: (slave bond_slave_0): Releasing backup interface [ 611.285509][T12769] bond_slave_0: left allmulticast mode [ 611.302090][T12769] bond_slave_0: left promiscuous mode [ 611.322473][T12769] bond0: (slave bond_slave_1): Releasing backup interface [ 611.334134][T12769] bond_slave_1: left allmulticast mode [ 611.335465][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 611.335483][ T30] audit: type=1326 audit(1747183339.696:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.352733][T12769] bond_slave_1: left promiscuous mode [ 611.378216][ T30] audit: type=1326 audit(1747183339.736:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.402844][ T30] audit: type=1326 audit(1747183339.736:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.445256][T12769] team0: Port device team_slave_0 removed [ 611.454020][ T30] audit: type=1326 audit(1747183339.736:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.485067][ T30] audit: type=1326 audit(1747183339.736:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.516835][T12769] team0: Port device team_slave_1 removed [ 611.532987][ T30] audit: type=1326 audit(1747183339.736:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.611440][ T30] audit: type=1326 audit(1747183339.736:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.648011][ T5830] syz0: Port: 1 Link DOWN [ 611.662895][ T30] audit: type=1326 audit(1747183339.736:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.690499][ T30] audit: type=1326 audit(1747183339.736:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 611.713234][ T30] audit: type=1326 audit(1747183339.736:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12777 comm="syz.5.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea98e969 code=0x7ffc0000 [ 612.392974][T12805] __nla_validate_parse: 137 callbacks suppressed [ 612.392995][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 612.422809][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 613.601726][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 613.724482][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2349'. [ 613.828865][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 614.646282][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'. [ 614.649144][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'. [ 614.859423][T12869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2363'. [ 614.868438][T12869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2363'. [ 615.435115][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 615.450851][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 615.520509][ T5019] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.993671][T12909] netlink: 'syz.4.2378': attribute type 10 has an invalid length. [ 616.679491][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 618.061981][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 618.301527][T12941] netlink: 'syz.5.2391': attribute type 10 has an invalid length. [ 619.249747][ T6488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 619.305983][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.315149][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.324535][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.333505][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.343984][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.352864][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.362087][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.370973][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.381855][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.390791][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 619.413056][T12938] bridge0: port 3(gretap0) entered blocking state [ 619.421943][T12938] bridge0: port 3(gretap0) entered disabled state [ 619.428634][T12938] gretap0: entered allmulticast mode [ 619.447726][T12938] gretap0: entered promiscuous mode [ 619.466707][T12938] bridge0: port 3(gretap0) entered blocking state [ 619.473318][T12938] bridge0: port 3(gretap0) entered forwarding state [ 619.502018][T12943] gretap0: left allmulticast mode [ 619.507106][T12943] gretap0: left promiscuous mode [ 619.526125][T12943] bridge0: port 3(gretap0) entered disabled state [ 620.320277][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 620.320294][ T30] audit: type=1326 audit(1747183348.686:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12971 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 620.462043][ T6488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 620.618875][ T30] audit: type=1326 audit(1747183348.686:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12971 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 620.678608][ T30] audit: type=1326 audit(1747183348.696:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12971 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 621.558953][ T30] audit: type=1326 audit(1747183348.696:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12971 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 621.621163][ T30] audit: type=1326 audit(1747183348.696:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12971 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 621.720058][T12987] netlink: 'syz.4.2406': attribute type 10 has an invalid length. [ 621.865991][T12992] netlink: 'syz.3.2405': attribute type 3 has an invalid length. [ 622.114234][ T30] audit: type=1326 audit(1747183350.466:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13001 comm="syz.4.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 622.173118][ T30] audit: type=1326 audit(1747183350.466:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13001 comm="syz.4.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 622.251532][ T30] audit: type=1326 audit(1747183350.496:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13001 comm="syz.4.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 622.361141][ T30] audit: type=1326 audit(1747183350.496:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13001 comm="syz.4.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 622.384376][ T30] audit: type=1326 audit(1747183350.496:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13001 comm="syz.4.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 622.469286][ T6024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 623.666216][T13025] netlink: 'syz.4.2418': attribute type 10 has an invalid length. [ 623.990097][ T6024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 624.317336][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.392951][T13047] __nla_validate_parse: 411 callbacks suppressed [ 624.392970][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 625.273714][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2435'. [ 625.679442][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 625.872891][T13076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2440'. [ 625.908953][T13076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2440'. [ 625.938619][T13076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2440'. [ 625.963635][T13076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2440'. [ 627.885630][ T6488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 628.748978][T13108] netlink: 'syz.4.2453': attribute type 10 has an invalid length. [ 628.769099][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 628.769116][ T30] audit: type=1107 audit(1747183357.126:189): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 628.941438][ T30] audit: type=1326 audit(1747183357.306:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.001516][T13115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.025950][ T30] audit: type=1326 audit(1747183357.326:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.086719][ T30] audit: type=1326 audit(1747183357.336:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.120124][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.168970][ T30] audit: type=1326 audit(1747183357.336:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.221150][ T30] audit: type=1326 audit(1747183357.336:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.278488][T13115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.303201][ T30] audit: type=1326 audit(1747183357.336:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.371660][ T30] audit: type=1326 audit(1747183357.336:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.412348][ T30] audit: type=1326 audit(1747183357.336:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1757b8e969 code=0x7ffc0000 [ 629.812413][T13115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.743891][T13130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2460'. [ 630.759585][T13115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.021560][ T6024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 631.035713][T13115] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.106342][T13115] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.152752][T13115] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.193410][T13115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.901634][T13139] netlink: 'syz.3.2465': attribute type 10 has an invalid length. [ 632.004607][T13139] batman_adv: batadv0: Adding interface: team0 [ 632.027684][T13139] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.155746][T13139] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 632.165904][ T6488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 632.642793][T13152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2471'. [ 632.793148][T13155] bridge0: entered promiscuous mode [ 632.812638][T13155] bridge0: port 3(macsec1) entered blocking state [ 632.855117][T13155] bridge0: port 3(macsec1) entered disabled state [ 632.927882][T13155] macsec1: entered allmulticast mode [ 632.958880][T13155] bridge0: entered allmulticast mode [ 633.141355][T13155] macsec1: left allmulticast mode [ 633.154590][T13155] bridge0: left allmulticast mode [ 633.164287][T13155] bridge0: left promiscuous mode [ 633.470301][ T6488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 633.688191][T13171] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.967134][T13171] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.109322][T13171] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.579416][T13182] netlink: 'syz.1.2479': attribute type 10 has an invalid length. [ 634.736678][T13185] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2482'. [ 634.747727][T13171] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.129782][T13182] batman_adv: batadv0: Adding interface: team0 [ 635.184044][T13182] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.228944][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 635.275717][T13182] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 635.824265][T13171] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.002430][T13171] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.092384][T13171] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.239003][T13206] netlink: 'syz.3.2488': attribute type 27 has an invalid length. [ 637.259950][T13171] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.300205][ T5964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 637.520720][T13210] syz_tun: entered allmulticast mode [ 637.541089][T13203] syz_tun: left allmulticast mode [ 638.451459][ T6487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 639.764981][ T6024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 640.018901][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 640.929098][ T6487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 641.076483][T13245] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2500'. [ 642.760193][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 642.798540][T13254] ip6gretap1: entered allmulticast mode [ 643.090746][ T6487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 643.419435][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 644.249662][T13280] netlink: 'syz.5.2503': attribute type 27 has an invalid length. [ 644.389686][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 644.454474][T13280] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.462204][T13280] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.799022][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.823696][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.018266][T13280] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.028535][T13280] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.059151][T13280] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.070007][T13280] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.222666][T13284] syz_tun: entered allmulticast mode [ 645.231692][T13284] syz_tun: left allmulticast mode [ 645.403591][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'. [ 645.590757][ T30] audit: type=1326 audit(1747183373.956:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 645.659032][ T30] audit: type=1326 audit(1747183373.956:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 645.829035][ T30] audit: type=1326 audit(1747183373.956:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 645.851999][ T30] audit: type=1326 audit(1747183373.956:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 645.874853][ T30] audit: type=1326 audit(1747183373.976:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 645.939113][ T30] audit: type=1326 audit(1747183373.986:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 646.059080][ T30] audit: type=1326 audit(1747183373.986:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 646.179386][ T30] audit: type=1326 audit(1747183373.986:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 646.221541][ T30] audit: type=1326 audit(1747183373.986:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 646.372697][ T30] audit: type=1326 audit(1747183373.986:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3058e969 code=0x7ffc0000 [ 646.649692][T13324] netlink: 'syz.5.2530': attribute type 27 has an invalid length. [ 647.683979][T13324] syz_tun: entered allmulticast mode [ 647.894739][T13323] syz_tun: left allmulticast mode [ 650.359215][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2546'. [ 650.408704][T13369] openvswitch: netlink: Flow key attr not present in new flow. [ 650.614920][T13381] netlink: 'syz.4.2549': attribute type 39 has an invalid length. [ 652.459190][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 653.198229][ T6487] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 655.283479][T13443] 9pnet_fd: Insufficient options for proto=fd [ 657.303410][T13468] ip6gretap1: entered allmulticast mode [ 657.363471][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 657.399155][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2581'. [ 657.697028][T13470] bond1: entered promiscuous mode [ 658.468915][T13470] bond1: entered allmulticast mode [ 658.484229][T13470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.275843][T13597] netlink: 'syz.4.2623': attribute type 1 has an invalid length. [ 669.179981][T13624] fuse: Bad value for 'fd' [ 674.315812][T13689] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 675.649874][T13707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2664'. [ 676.367955][T13722] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 676.448503][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2673'. [ 676.537359][T13724] macvtap1: entered promiscuous mode [ 676.538848][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 676.538863][ T30] audit: type=1326 audit(1747183404.896:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 676.584073][T13724] dummy0: entered promiscuous mode [ 676.616372][T13724] macvtap1: entered allmulticast mode [ 676.618905][ T30] audit: type=1326 audit(1747183404.896:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 676.646660][T13724] dummy0: entered allmulticast mode [ 676.678873][ T30] audit: type=1326 audit(1747183404.896:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 676.729517][T13727] dummy0: left allmulticast mode [ 676.734512][T13727] dummy0: left promiscuous mode [ 676.742747][ T30] audit: type=1326 audit(1747183404.896:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 676.789801][ T30] audit: type=1326 audit(1747183404.896:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 676.830695][ T30] audit: type=1326 audit(1747183404.896:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 676.854592][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 676.870676][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 676.879673][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 676.888315][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.898869][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 677.137772][ T6488] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.298322][ T6488] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.413037][ T30] audit: type=1326 audit(1747183405.776:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 677.421431][ T6488] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.437912][ T30] audit: type=1326 audit(1747183405.796:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 677.477096][ T30] audit: type=1326 audit(1747183405.836:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f4bf8d2d0 code=0x7ffc0000 [ 677.570611][ T30] audit: type=1326 audit(1747183405.886:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4bf8e969 code=0x7ffc0000 [ 677.585782][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 677.626394][ T6488] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.981511][ T6488] bridge_slave_1: left allmulticast mode [ 677.987226][ T6488] bridge_slave_1: left promiscuous mode [ 678.010441][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.109937][ T6488] bridge_slave_0: left allmulticast mode [ 678.122404][ T6488] bridge_slave_0: left promiscuous mode [ 678.128205][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.346106][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 679.098973][ T55] Bluetooth: hci2: command tx timeout [ 679.214804][ T6488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.239726][ T6488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.256363][ T6488] bond0 (unregistering): Released all slaves [ 679.481712][T13763] 9pnet_fd: Insufficient options for proto=fd [ 681.059017][T13731] chnl_net:caif_netlink_parms(): no params data found [ 681.180769][ T55] Bluetooth: hci2: command tx timeout [ 682.083552][ T6488] hsr_slave_0: left promiscuous mode [ 682.093706][ T6488] hsr_slave_1: left promiscuous mode [ 682.119575][ T6488] batman_adv: batadv0: Removing interface: team0 [ 682.139836][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.157517][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.176837][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.196276][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.242196][ T6488] veth1_macvtap: left promiscuous mode [ 682.252299][ T6488] veth0_macvtap: left promiscuous mode [ 682.266298][ T6488] veth1_vlan: left promiscuous mode [ 682.279194][ T6488] veth0_vlan: left promiscuous mode [ 682.951328][ T6488] team0 (unregistering): Port device team_slave_1 removed [ 682.998942][ T6488] team0 (unregistering): Port device team_slave_0 removed [ 683.259227][ T55] Bluetooth: hci2: command tx timeout [ 683.544711][T13818] bridge0: entered promiscuous mode [ 683.553716][T13818] bridge0: port 1(macsec1) entered blocking state [ 683.560741][T13818] bridge0: port 1(macsec1) entered disabled state [ 683.573119][T13818] macsec1: entered allmulticast mode [ 683.578446][T13818] bridge0: entered allmulticast mode [ 683.606421][T13818] macsec1: left allmulticast mode [ 683.619474][T13818] bridge0: left allmulticast mode [ 683.637666][T13818] bridge0: left promiscuous mode [ 683.801498][T13731] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.808719][T13731] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.828334][T13731] bridge_slave_0: entered allmulticast mode [ 683.837394][T13731] bridge_slave_0: entered promiscuous mode [ 683.849195][T13731] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.856368][T13731] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.864688][T13731] bridge_slave_1: entered allmulticast mode [ 683.872610][T13731] bridge_slave_1: entered promiscuous mode [ 683.966934][T13731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.995194][T13731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.157663][T13731] team0: Port device team_slave_0 added [ 684.200158][T13731] team0: Port device team_slave_1 added [ 684.414087][T13731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.453715][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.467894][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'. [ 684.481275][T13731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.649686][T13731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.656668][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.770093][T13731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.037468][ T30] kauditd_printk_skb: 316 callbacks suppressed [ 685.037489][ T30] audit: type=1326 audit(1747183413.386:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.159186][ T30] audit: type=1326 audit(1747183413.386:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.258977][ T30] audit: type=1326 audit(1747183413.386:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.284748][ T30] audit: type=1326 audit(1747183413.386:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.318960][ T30] audit: type=1326 audit(1747183413.386:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.362608][ T55] Bluetooth: hci2: command tx timeout [ 685.395291][ T30] audit: type=1326 audit(1747183413.386:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.461867][T13731] hsr_slave_0: entered promiscuous mode [ 685.468669][T13731] hsr_slave_1: entered promiscuous mode [ 685.497555][ T30] audit: type=1326 audit(1747183413.386:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.530018][T13731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.537615][T13731] Cannot create hsr debugfs directory [ 685.575741][ T30] audit: type=1326 audit(1747183413.386:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.636451][ T30] audit: type=1326 audit(1747183413.386:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13854 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 685.751652][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.442058][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 686.830960][T13894] batman_adv: batadv0: Removing interface: team0 [ 686.875653][T13894] bond0: (slave batadv0): Releasing backup interface [ 686.898989][T13894] bridge_slave_0: left allmulticast mode [ 686.911539][T13894] bridge_slave_0: left promiscuous mode [ 686.934696][T13894] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.948876][T13894] bridge_slave_1: left allmulticast mode [ 686.958833][T13894] bridge_slave_1: left promiscuous mode [ 686.974470][T13894] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.997380][T13894] bond0: (slave bond_slave_0): Releasing backup interface [ 687.046005][T13894] bond0: (slave bond_slave_1): Releasing backup interface [ 687.059673][T13894] team0: Port device team_slave_0 removed [ 687.089512][T13894] team0: Port device team_slave_1 removed [ 687.095699][T13894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.133137][T13894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.156017][ T30] audit: type=1326 audit(1747183415.516:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 687.721076][T13731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 687.743915][T13731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.786716][T13731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 687.814668][T13731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 688.030507][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2727'. [ 688.134337][T13731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.218389][T13731] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.227563][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 688.264444][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 688.283787][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.291000][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.307295][T13947] netlink: 'syz.2.2731': attribute type 3 has an invalid length. [ 688.321644][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.328895][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.507275][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 688.517001][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 688.845883][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 688.862442][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 689.308270][T13731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.609235][ T5830] IPVS: starting estimator thread 0... [ 689.726927][T13992] IPVS: using max 30 ests per chain, 72000 per kthread [ 690.118519][T14008] netlink: 'syz.1.2745': attribute type 27 has an invalid length. [ 690.167164][T14011] syz_tun: entered allmulticast mode [ 690.188239][T14011] syz_tun: left allmulticast mode [ 690.241279][T14008] vlan2: left allmulticast mode [ 690.246200][T14008] hsr_slave_1: left allmulticast mode [ 690.279750][T14008] ip6gre1: left allmulticast mode [ 690.319300][T14008] ip6gretap1: left allmulticast mode [ 690.370407][T14008] bond1: left promiscuous mode [ 690.375323][T14008] bond1: left allmulticast mode [ 690.508539][T13731] veth0_vlan: entered promiscuous mode [ 690.751653][T13731] veth1_vlan: entered promiscuous mode [ 690.815202][T13731] veth0_macvtap: entered promiscuous mode [ 690.906973][T13731] veth1_macvtap: entered promiscuous mode [ 690.995620][T13731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.035823][T13731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.079360][T13731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.088117][T13731] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.140023][T13731] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.166315][T13731] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.248038][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 691.509535][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.517419][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.582076][T14055] syz_tun: entered allmulticast mode [ 691.616704][T14053] syz_tun: left allmulticast mode [ 691.642532][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.675170][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.211112][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 693.502328][T14097] syz_tun: entered allmulticast mode [ 693.519146][T14095] syz_tun: left allmulticast mode [ 693.680254][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2774'. [ 693.712318][T14106] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2774'. [ 694.216363][ T55] block nbd4: Receive control failed (result -107) [ 694.258316][T14115] syz.4.2777: attempt to access beyond end of device [ 694.258316][T14115] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 694.317970][T14122] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 694.338153][T14115] getblk(): invalid block size 512 requested [ 694.377948][T14115] logical block size: 1024 [ 694.414802][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.4.2777 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 694.414837][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.414860][T14115] Call Trace: [ 694.414872][T14115] [ 694.414886][T14115] dump_stack_lvl+0x189/0x250 [ 694.414947][T14115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.414979][T14115] ? __pfx__printk+0x10/0x10 [ 694.415023][T14115] ? fs_reclaim_acquire+0x7d/0x100 [ 694.415055][T14115] bdev_getblk+0x59e/0x670 [ 694.415095][T14115] __bread_gfp+0x89/0x3c0 [ 694.415121][T14115] udf_read_tagged+0xad/0xe00 [ 694.415167][T14115] udf_check_anchor_block+0x99/0x550 [ 694.415207][T14115] ? __phys_addr+0xba/0x170 [ 694.415233][T14115] ? udf_get_last_block+0x286/0x360 [ 694.415265][T14115] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 694.415308][T14115] ? __bread_gfp+0x340/0x3c0 [ 694.415333][T14115] udf_load_vrs+0x6e3/0xf20 [ 694.415386][T14115] ? __pfx_udf_load_vrs+0x10/0x10 [ 694.415417][T14115] ? udf_get_last_session+0x100/0x200 [ 694.415445][T14115] ? __pfx_udf_get_last_session+0x10/0x10 [ 694.415488][T14115] udf_fill_super+0x5ad/0x17a0 [ 694.415533][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 694.415564][T14115] ? set_blocksize+0x21e/0x500 [ 694.415602][T14115] ? sb_set_blocksize+0x104/0x180 [ 694.415644][T14115] ? setup_bdev_super+0x4c1/0x5b0 [ 694.415680][T14115] get_tree_bdev_flags+0x40e/0x4d0 [ 694.415713][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 694.415747][T14115] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 694.415777][T14115] ? cap_capable+0x11f/0x460 [ 694.415805][T14115] ? safesetid_security_capable+0xa9/0x1a0 [ 694.415839][T14115] vfs_get_tree+0x8f/0x2b0 [ 694.415875][T14115] do_new_mount+0x24a/0xa40 [ 694.415922][T14115] __se_sys_mount+0x317/0x410 [ 694.415951][T14115] ? __pfx___se_sys_mount+0x10/0x10 [ 694.415979][T14115] ? do_syscall_64+0xba/0x210 [ 694.416006][T14115] ? __x64_sys_mount+0x20/0xc0 [ 694.416031][T14115] do_syscall_64+0xf6/0x210 [ 694.416062][T14115] ? clear_bhb_loop+0x60/0xb0 [ 694.416090][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.416123][T14115] RIP: 0033:0x7f9cd418e969 [ 694.416143][T14115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.416172][T14115] RSP: 002b:00007f9cd501d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 694.416213][T14115] RAX: ffffffffffffffda RBX: 00007f9cd43b5fa0 RCX: 00007f9cd418e969 [ 694.416230][T14115] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 694.416246][T14115] RBP: 00007f9cd4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 694.416260][T14115] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 694.416274][T14115] R13: 0000000000000000 R14: 00007f9cd43b5fa0 R15: 00007fff59d94638 [ 694.416309][T14115] [ 694.704344][T14118] nbd4: detected capacity change from 0 to 12 [ 694.711572][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 694.721258][T14115] getblk(): invalid block size 512 requested [ 694.727340][T14115] logical block size: 1024 [ 694.731938][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.4.2777 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 694.731969][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.731997][T14115] Call Trace: [ 694.732006][T14115] [ 694.732014][T14115] dump_stack_lvl+0x189/0x250 [ 694.732055][T14115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.732087][T14115] ? __pfx__printk+0x10/0x10 [ 694.732128][T14115] ? fs_reclaim_acquire+0x7d/0x100 [ 694.732158][T14115] bdev_getblk+0x59e/0x670 [ 694.732196][T14115] __bread_gfp+0x89/0x3c0 [ 694.732222][T14115] udf_read_tagged+0xad/0xe00 [ 694.732285][T14115] udf_check_anchor_block+0x99/0x550 [ 694.732324][T14115] ? __phys_addr+0xba/0x170 [ 694.732351][T14115] ? udf_get_last_block+0x286/0x360 [ 694.732384][T14115] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 694.732434][T14115] udf_load_vrs+0x96d/0xf20 [ 694.732500][T14115] ? __pfx_udf_load_vrs+0x10/0x10 [ 694.732531][T14115] ? udf_get_last_session+0x100/0x200 [ 694.732575][T14115] udf_fill_super+0x5ad/0x17a0 [ 694.732626][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 694.732656][T14115] ? set_blocksize+0x21e/0x500 [ 694.732694][T14115] ? sb_set_blocksize+0x104/0x180 [ 694.732725][T14115] ? setup_bdev_super+0x4c1/0x5b0 [ 694.732761][T14115] get_tree_bdev_flags+0x40e/0x4d0 [ 694.732793][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 694.732825][T14115] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 694.732855][T14115] ? cap_capable+0x11f/0x460 [ 694.732879][T14115] ? safesetid_security_capable+0xa9/0x1a0 [ 694.732912][T14115] vfs_get_tree+0x8f/0x2b0 [ 694.732947][T14115] do_new_mount+0x24a/0xa40 [ 694.732996][T14115] __se_sys_mount+0x317/0x410 [ 694.733025][T14115] ? __pfx___se_sys_mount+0x10/0x10 [ 694.733051][T14115] ? do_syscall_64+0xba/0x210 [ 694.733078][T14115] ? __x64_sys_mount+0x20/0xc0 [ 694.733100][T14115] do_syscall_64+0xf6/0x210 [ 694.733129][T14115] ? clear_bhb_loop+0x60/0xb0 [ 694.733157][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.733178][T14115] RIP: 0033:0x7f9cd418e969 [ 694.733197][T14115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.733216][T14115] RSP: 002b:00007f9cd501d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 694.733240][T14115] RAX: ffffffffffffffda RBX: 00007f9cd43b5fa0 RCX: 00007f9cd418e969 [ 694.733257][T14115] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 694.733272][T14115] RBP: 00007f9cd4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 694.733286][T14115] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 694.733299][T14115] R13: 0000000000000000 R14: 00007f9cd43b5fa0 R15: 00007fff59d94638 [ 694.733333][T14115] [ 694.765928][T14122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 694.767527][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 694.916293][T14127] bond1: (slave ip6gretap2): making interface the new active one [ 694.920707][T14115] getblk(): invalid block size 512 requested [ 694.920723][T14115] logical block size: 1024 [ 694.920738][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.4.2777 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 694.920762][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.920774][T14115] Call Trace: [ 694.920783][T14115] [ 694.920791][T14115] dump_stack_lvl+0x189/0x250 [ 694.920829][T14115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.920856][T14115] ? __pfx__printk+0x10/0x10 [ 694.920896][T14115] ? fs_reclaim_acquire+0x7d/0x100 [ 694.920924][T14115] bdev_getblk+0x59e/0x670 [ 694.920959][T14115] __bread_gfp+0x89/0x3c0 [ 694.920982][T14115] udf_read_tagged+0xad/0xe00 [ 694.921022][T14115] udf_check_anchor_block+0x99/0x550 [ 694.921056][T14115] ? __phys_addr+0xba/0x170 [ 694.921078][T14115] ? udf_get_last_block+0x286/0x360 [ 694.921111][T14115] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 694.921161][T14115] udf_load_vrs+0x96d/0xf20 [ 694.921211][T14115] ? __pfx_udf_load_vrs+0x10/0x10 [ 694.921239][T14115] ? udf_get_last_session+0x100/0x200 [ 694.921282][T14115] udf_fill_super+0x5ad/0x17a0 [ 694.921333][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 694.921362][T14115] ? set_blocksize+0x21e/0x500 [ 694.921398][T14115] ? sb_set_blocksize+0x104/0x180 [ 694.921428][T14115] ? setup_bdev_super+0x4c1/0x5b0 [ 694.921464][T14115] get_tree_bdev_flags+0x40e/0x4d0 [ 694.921496][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 694.921528][T14115] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 694.921568][T14115] ? cap_capable+0x11f/0x460 [ 694.921590][T14115] ? safesetid_security_capable+0xa9/0x1a0 [ 694.921622][T14115] vfs_get_tree+0x8f/0x2b0 [ 694.921653][T14115] do_new_mount+0x24a/0xa40 [ 694.921710][T14115] __se_sys_mount+0x317/0x410 [ 694.921738][T14115] ? __pfx___se_sys_mount+0x10/0x10 [ 694.921764][T14115] ? do_syscall_64+0xba/0x210 [ 694.921791][T14115] ? __x64_sys_mount+0x20/0xc0 [ 694.921814][T14115] do_syscall_64+0xf6/0x210 [ 694.921842][T14115] ? clear_bhb_loop+0x60/0xb0 [ 694.921870][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.921889][T14115] RIP: 0033:0x7f9cd418e969 [ 694.921909][T14115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.921929][T14115] RSP: 002b:00007f9cd501d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 694.921951][T14115] RAX: ffffffffffffffda RBX: 00007f9cd43b5fa0 RCX: 00007f9cd418e969 [ 694.921967][T14115] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 694.921982][T14115] RBP: 00007f9cd4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 694.921996][T14115] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 694.922009][T14115] R13: 0000000000000000 R14: 00007f9cd43b5fa0 R15: 00007fff59d94638 [ 694.922044][T14115] [ 694.922053][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 694.978626][T14127] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 694.984131][T14115] getblk(): invalid block size 512 requested [ 695.031206][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'. [ 695.034259][T14115] logical block size: 1024 [ 695.072137][T13743] Buffer I/O error on dev nbd4, logical block 0, async page read [ 695.081966][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.4.2777 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 695.081997][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 695.082010][T14115] Call Trace: [ 695.082018][T14115] [ 695.082026][T14115] dump_stack_lvl+0x189/0x250 [ 695.082065][T14115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.082094][T14115] ? __pfx__printk+0x10/0x10 [ 695.082133][T14115] ? fs_reclaim_acquire+0x7d/0x100 [ 695.082161][T14115] bdev_getblk+0x59e/0x670 [ 695.082196][T14115] __bread_gfp+0x89/0x3c0 [ 695.082219][T14115] udf_read_tagged+0xad/0xe00 [ 695.082260][T14115] udf_check_anchor_block+0x99/0x550 [ 695.082302][T14115] ? __phys_addr+0xba/0x170 [ 695.082327][T14115] ? udf_get_last_block+0x286/0x360 [ 695.082356][T14115] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 695.082400][T14115] udf_load_vrs+0xa83/0xf20 [ 695.082446][T14115] ? __pfx_udf_load_vrs+0x10/0x10 [ 695.082473][T14115] ? udf_get_last_session+0x100/0x200 [ 695.082514][T14115] udf_fill_super+0x5ad/0x17a0 [ 695.082554][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 695.082582][T14115] ? set_blocksize+0x21e/0x500 [ 695.082617][T14115] ? sb_set_blocksize+0x104/0x180 [ 695.082645][T14115] ? setup_bdev_super+0x4c1/0x5b0 [ 695.082678][T14115] get_tree_bdev_flags+0x40e/0x4d0 [ 695.082708][T14115] ? __pfx_udf_fill_super+0x10/0x10 [ 695.082738][T14115] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 695.082765][T14115] ? cap_capable+0x11f/0x460 [ 695.082787][T14115] ? safesetid_security_capable+0xa9/0x1a0 [ 695.082818][T14115] vfs_get_tree+0x8f/0x2b0 [ 695.082850][T14115] do_new_mount+0x24a/0xa40 [ 695.082892][T14115] __se_sys_mount+0x317/0x410 [ 695.082919][T14115] ? __pfx___se_sys_mount+0x10/0x10 [ 695.082943][T14115] ? do_syscall_64+0xba/0x210 [ 695.082969][T14115] ? __x64_sys_mount+0x20/0xc0 [ 695.082991][T14115] do_syscall_64+0xf6/0x210 [ 695.083034][T14115] ? clear_bhb_loop+0x60/0xb0 [ 695.083062][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.083083][T14115] RIP: 0033:0x7f9cd418e969 [ 695.083103][T14115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.083123][T14115] RSP: 002b:00007f9cd501d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 695.083146][T14115] RAX: ffffffffffffffda RBX: 00007f9cd43b5fa0 RCX: 00007f9cd418e969 [ 695.083162][T14115] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 695.083178][T14115] RBP: 00007f9cd4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 695.083192][T14115] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 695.083205][T14115] R13: 0000000000000000 R14: 00007f9cd43b5fa0 R15: 00007fff59d94638 [ 695.083242][T14115] [ 695.083252][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 695.111046][T13743] Buffer I/O error on dev nbd4, logical block 1, async page read [ 695.140267][T14127] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 695.294765][T13743] Buffer I/O error on dev nbd4, logical block 2, async page read [ 695.300536][T14127] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 695.515680][T13743] Buffer I/O error on dev nbd4, logical block 3, async page read [ 695.778238][T13743] Buffer I/O error on dev nbd4, logical block 4, async page read [ 695.788076][T13743] Buffer I/O error on dev nbd4, logical block 5, async page read [ 695.796084][T13743] Buffer I/O error on dev nbd4, logical block 6, async page read [ 695.803973][T13743] Buffer I/O error on dev nbd4, logical block 7, async page read [ 695.814974][T13743] Buffer I/O error on dev nbd4, logical block 0, async page read [ 695.822959][T13743] Buffer I/O error on dev nbd4, logical block 1, async page read [ 695.839104][ T5879] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 695.974151][T13743] ldm_validate_partition_table(): Disk read failed. [ 695.976552][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 695.981839][T13743] block nbd4: Dead connection, failed to find a fallback [ 696.014580][T13743] block nbd4: shutting down sockets [ 696.021313][T14115] I/O error, dev nbd4, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.032654][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=5, location=5 [ 696.039045][ T5879] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 696.048667][T13743] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.059987][T14115] I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.069953][T13743] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.080605][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=4, location=4 [ 696.090300][T13743] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.100054][T13743] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.126403][T14115] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.135497][T14156] syz_tun: entered allmulticast mode [ 696.136574][T14156] syz_tun: left allmulticast mode [ 696.149407][T13743] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.180467][T13743] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.194383][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=3, location=3 [ 696.212008][T13743] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 696.225146][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 696.245752][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 696.257158][T13743] Dev nbd4: unable to read RDB block 0 [ 696.266816][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 696.286303][T13743] nbd4: unable to read partition table [ 696.299093][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=2, location=2 [ 696.308577][T13743] nbd4: partition table beyond EOD, truncated [ 696.334826][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 696.347660][T13743] ldm_validate_partition_table(): Disk read failed. [ 696.363457][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 696.380805][T13743] Dev nbd4: unable to read RDB block 0 [ 696.387449][T13743] nbd4: unable to read partition table [ 696.395756][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 696.406267][T13743] nbd4: partition table beyond EOD, truncated [ 696.416732][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 696.443992][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 696.457272][T14115] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 696.481049][T14115] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 696.700898][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.444601][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.771743][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.782086][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 698.258980][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 700.409186][ T30] kauditd_printk_skb: 246 callbacks suppressed [ 700.409202][ T30] audit: type=1326 audit(1747183428.776:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.529872][ T30] audit: type=1326 audit(1747183428.796:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.551823][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 700.566705][ T30] audit: type=1326 audit(1747183428.796:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.594320][ T30] audit: type=1326 audit(1747183428.806:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.626229][ T30] audit: type=1326 audit(1747183428.806:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.666670][ T30] audit: type=1326 audit(1747183428.806:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.694854][ T30] audit: type=1326 audit(1747183428.926:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.727059][ T30] audit: type=1326 audit(1747183428.926:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 700.781866][ T30] audit: type=1326 audit(1747183428.956:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1fd9c1225 code=0x7ffc0000 [ 700.853975][ T30] audit: type=1326 audit(1747183429.056:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb1fd98e969 code=0x7ffc0000 [ 701.799359][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 701.818982][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 701.862337][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 702.050800][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 703.049590][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 703.746743][T14244] ALSA: mixer_oss: invalid OSS volume '' [ 705.062268][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 707.470253][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 708.841407][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 708.895094][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.904514][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.915106][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 708.924021][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.934799][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 710.281921][T14304] syz_tun: entered allmulticast mode [ 710.288171][T14299] syz_tun: left allmulticast mode [ 710.698933][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 710.762597][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 711.030404][ T55] Bluetooth: hci4: command tx timeout [ 712.502641][T14286] chnl_net:caif_netlink_parms(): no params data found [ 712.650010][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 712.784829][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.793576][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.803977][T14286] bridge_slave_0: entered allmulticast mode [ 712.813341][T14286] bridge_slave_0: entered promiscuous mode [ 712.825991][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.835172][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.842740][T14286] bridge_slave_1: entered allmulticast mode [ 712.850993][T14286] bridge_slave_1: entered promiscuous mode [ 712.917428][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.942641][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.007703][T14286] team0: Port device team_slave_0 added [ 713.028385][T14286] team0: Port device team_slave_1 added [ 713.098960][ T55] Bluetooth: hci4: command tx timeout [ 713.121334][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.128527][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.155836][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.169604][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.176742][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.208336][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.364342][T14286] hsr_slave_0: entered promiscuous mode [ 713.390385][T14286] hsr_slave_1: entered promiscuous mode [ 713.396829][T14286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.425397][T14286] Cannot create hsr debugfs directory [ 713.770605][T14363] batman_adv: batadv0: Adding interface: dummy0 [ 713.776931][T14363] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.802560][T14363] batman_adv: batadv0: Interface activated: dummy0 [ 713.848912][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 713.917039][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.926169][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.935181][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.944126][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.953044][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.962082][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.971137][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.980239][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.989134][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 713.998472][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 714.007956][T14365] macvtap1: left promiscuous mode [ 714.313567][T14371] batman_adv: batadv0: Interface deactivated: dummy0 [ 714.329835][T14371] batman_adv: batadv0: Removing interface: dummy0 [ 714.350514][T14371] bridge_slave_0: left allmulticast mode [ 714.357164][T14371] bridge_slave_0: left promiscuous mode [ 714.364105][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.396206][T14371] bridge_slave_1: left allmulticast mode [ 714.425282][T14371] bridge_slave_1: left promiscuous mode [ 714.433384][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.471806][T14371] bond0: (slave bond_slave_0): Releasing backup interface [ 714.491688][T14371] bond0: (slave bond_slave_1): Releasing backup interface [ 714.515695][T14371] team0: Port device team_slave_0 removed [ 714.530576][T14371] team0: Port device team_slave_1 removed [ 714.537539][T14371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.547355][T14371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.571243][T14371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.588651][T14371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.052869][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 715.069152][T14286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.102557][T14286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.119935][T14286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.141539][T14286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 715.179765][ T55] Bluetooth: hci4: command tx timeout [ 715.566520][T14286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.621313][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 716.903876][T14410] netlink: 'syz.5.2864': attribute type 10 has an invalid length. [ 716.903922][T14286] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.288954][ T55] Bluetooth: hci4: command tx timeout [ 717.523999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.531198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.711760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.718999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.720679][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 719.900598][T14286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 720.053272][T14286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.431196][T14446] __nla_validate_parse: 274 callbacks suppressed [ 721.431217][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2872'. [ 721.754994][T14286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.850492][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 721.896040][T14286] veth0_vlan: entered promiscuous mode [ 721.916622][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 721.939957][T14457] netlink: 'syz.5.2875': attribute type 10 has an invalid length. [ 721.955905][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 721.983446][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 721.992707][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 722.002367][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 722.012671][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 722.022341][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 722.031680][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 722.042851][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 722.095995][T14460] syz_tun: entered allmulticast mode [ 722.106376][T14286] veth1_vlan: entered promiscuous mode [ 722.125439][T14458] syz_tun: left allmulticast mode [ 722.233975][T14286] veth0_macvtap: entered promiscuous mode [ 722.277333][T14286] veth1_macvtap: entered promiscuous mode [ 722.347413][T14286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.452187][T14286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.501397][T14286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.525409][T14286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.555360][T14286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.576663][T14286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.598929][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 722.867874][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.893939][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.926545][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.191706][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 723.552104][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 723.564900][ T5019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.577996][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.589961][ T9] usb 5-1: config 0 descriptor?? [ 723.595565][ T5019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.399980][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 725.353357][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 725.369070][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 725.418277][ T9] usb 5-1: USB disconnect, device number 14 [ 725.860636][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 726.580319][T14546] __nla_validate_parse: 116 callbacks suppressed [ 726.580339][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 726.699014][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 727.150224][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 728.449786][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 728.912296][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2922'. [ 729.741965][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 730.300087][T14604] tipc: Started in network mode [ 730.322476][T14604] tipc: Node identity 68a, cluster identity 257 [ 730.364912][T14604] tipc: Node number set to 1674 [ 730.412198][T14607] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 730.478361][T14607] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 731.729398][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 732.424996][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 734.325977][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 734.597792][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 734.938435][T14666] syz_tun: entered allmulticast mode [ 735.302144][T14665] xt_connbytes: Forcing CT accounting to be enabled [ 735.309088][T14665] Cannot find add_set index 0 as target [ 735.331105][T14659] syz_tun: left allmulticast mode [ 735.351455][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'. [ 737.179840][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 737.420874][T14697] netlink: 'syz.5.2962': attribute type 158 has an invalid length. [ 737.481830][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2962'. [ 738.478230][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2966'. [ 738.681949][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2965'. [ 739.289856][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 740.192079][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2979'. [ 740.411490][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2980'. [ 740.540391][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 741.541623][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.679017][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.688161][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.711801][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.730364][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.914761][T14772] fuse: root generation should be zero [ 741.921588][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 742.011703][T14778] binder: 14771:14778 ioctl c018620c 2000000000c0 returned -22 [ 742.345363][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'. [ 742.371073][T14788] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 742.381707][T14788] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 742.691601][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2994'. [ 742.975551][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'. [ 743.585537][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 743.748425][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 743.819058][ T5833] Bluetooth: hci0: command tx timeout [ 743.856265][T14824] macvtap1: entered promiscuous mode [ 743.862918][T14824] team0: entered promiscuous mode [ 743.868566][T14824] macvtap1: entered allmulticast mode [ 743.875180][T14824] team0: entered allmulticast mode [ 743.881304][T14824] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 744.124134][T14765] chnl_net:caif_netlink_parms(): no params data found [ 744.760958][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 744.966692][T14856] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3009'. [ 745.181280][T14765] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.196311][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.204179][T14765] bridge_slave_0: entered allmulticast mode [ 745.216251][T14765] bridge_slave_0: entered promiscuous mode [ 745.226573][T14765] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.237025][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.246025][T14765] bridge_slave_1: entered allmulticast mode [ 745.257025][T14765] bridge_slave_1: entered promiscuous mode [ 745.462457][T14765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.484957][T14765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.723308][T14865] xt_connbytes: Forcing CT accounting to be enabled [ 745.731234][T14865] Cannot find add_set index 0 as target [ 745.961825][ T5833] Bluetooth: hci0: command tx timeout [ 746.014815][T14855] bond0: entered promiscuous mode [ 746.967270][T14765] team0: Port device team_slave_0 added [ 747.012282][T14871] fuse: Bad value for 'fd' [ 747.029805][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3014'. [ 747.030522][T14765] team0: Port device team_slave_1 added [ 747.108833][T14870] team_slave_0: entered promiscuous mode [ 747.114857][T14870] team_slave_1: entered promiscuous mode [ 747.125565][T14870] macvtap1: entered promiscuous mode [ 747.131080][T14870] team0: entered promiscuous mode [ 747.136835][T14870] macvtap1: entered allmulticast mode [ 747.147956][T14870] team0: entered allmulticast mode [ 747.155755][T14870] team_slave_0: entered allmulticast mode [ 747.166308][T14870] team_slave_1: entered allmulticast mode [ 747.175207][T14870] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 747.192718][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.235008][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 747.477224][T14765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.489430][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.576075][T14765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.609514][T14765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.616608][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.644839][T14765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.989049][ T5833] Bluetooth: hci0: command tx timeout [ 748.124173][ T5833] Bluetooth: unknown link type 108 [ 748.126158][T14765] hsr_slave_0: entered promiscuous mode [ 748.129609][ T5833] Bluetooth: hci2: connection err: -111 [ 748.136353][T14765] hsr_slave_1: entered promiscuous mode [ 748.780036][T14765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.798905][T14765] Cannot create hsr debugfs directory [ 749.113794][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 749.129641][T14904] tipc: Can't bind to reserved service type 2 [ 750.239990][T14917] Cannot find add_set index 0 as target [ 750.699005][ T5833] Bluetooth: hci0: command tx timeout [ 750.910697][T14765] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.070825][T14765] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.216328][T14765] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.291419][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 752.101358][T14765] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.214585][T14939] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.3032'. [ 752.217848][T14941] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 752.252926][T14941] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 752.485621][T14765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 752.508519][T14765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 752.516466][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 752.535083][T14765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 752.555489][T14765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 752.703830][T14765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.747388][T14765] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.768004][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.775271][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.824593][ T5019] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.831827][ T5019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.653919][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 754.116330][T14765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.419937][T14765] veth0_vlan: entered promiscuous mode [ 754.432207][T14765] veth1_vlan: entered promiscuous mode [ 754.867696][T14964] Cannot find add_set index 0 as target [ 755.331929][T14765] veth0_macvtap: entered promiscuous mode [ 755.406542][T14765] veth1_macvtap: entered promiscuous mode [ 755.673145][T14765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.686166][T14765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.698008][T14765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.775841][T14765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.804306][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3041'. [ 755.806517][T14765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.829902][T14765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.847329][T14973] macvtap2: entered promiscuous mode [ 755.853493][T14973] macvtap2: entered allmulticast mode [ 755.860500][T14973] bond0: entered allmulticast mode [ 755.866090][T14973] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 755.892661][T14966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.953788][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 755.963010][T14979] netlink: 'syz.1.3035': attribute type 5 has an invalid length. [ 755.972585][T14979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3035'. [ 755.989456][T14966] bond0: (slave rose0): Enslaving as an active interface with an up link [ 756.024180][T14981] ======================================================= [ 756.024180][T14981] WARNING: The mand mount option has been deprecated and [ 756.024180][T14981] and is ignored by this kernel. Remove the mand [ 756.024180][T14981] option from the mount to silence this warning. [ 756.024180][T14981] ======================================================= [ 756.088854][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 756.105933][T14975] bond0: left allmulticast mode [ 756.116604][T14981] 9pnet_virtio: no channels available for device syz [ 756.161837][T14979] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 756.193748][T14979] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 756.213473][T14979] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 756.243004][T14979] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 756.273751][T14979] geneve2: entered promiscuous mode [ 756.341813][T14979] geneve2: entered allmulticast mode [ 756.377918][T14765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.414598][T14765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.438449][T14765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.463085][T14765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.805067][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.823461][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.935558][ T6487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.957431][ T6487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.027967][T15000] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 757.051938][T15000] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 757.401823][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 757.775015][T15016] xt_connbytes: Forcing CT accounting to be enabled [ 757.782518][T15016] Cannot find add_set index 0 as target [ 758.699009][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 759.991011][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 760.160223][T15060] Cannot find add_set index 0 as target [ 760.480567][T15070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3061'. [ 761.365422][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 763.569900][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 764.188977][T15124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3077'. [ 764.623948][T15141] sctp: [Deprecated]: syz.5.3087 (pid 15141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 764.623948][T15141] Use struct sctp_sack_info instead [ 764.710150][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 764.767219][T15145] sctp: [Deprecated]: syz.5.3087 (pid 15145) Use of int in max_burst socket option deprecated. [ 764.767219][T15145] Use struct sctp_assoc_value instead [ 764.922586][T15145] macvtap1: left allmulticast mode [ 765.213550][T15161] 9pnet_virtio: no channels available for device ./file0/file0 [ 765.594324][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3093'. [ 765.885211][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 767.794342][T15209] tipc: Started in network mode [ 767.799609][T15209] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 767.824179][T15209] tipc: Enabling of bearer rejected, failed to enable media [ 768.054557][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 768.151536][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 769.180577][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 769.190576][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 769.202359][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 769.299074][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 769.324885][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 769.347615][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 770.426705][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3124'. [ 770.999221][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 771.956763][ T5833] Bluetooth: hci1: command tx timeout [ 772.821009][T10015] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 773.930581][T15287] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 773.939998][T15287] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 773.949875][T15287] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 774.008876][ T5833] Bluetooth: hci1: command tx timeout [ 774.284520][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 775.287260][T15232] chnl_net:caif_netlink_parms(): no params data found [ 775.308618][T15303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3144'. [ 775.384734][T15303] x_tables: ip_tables: udp match: only valid for protocol 17 [ 776.058796][ T5833] Bluetooth: hci1: command tx timeout [ 776.540637][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.574271][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 776.618545][T15232] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.626709][T15232] bridge_slave_0: entered allmulticast mode [ 776.636950][T15232] bridge_slave_0: entered promiscuous mode [ 776.650812][T15232] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.658339][T15232] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.667721][T15232] bridge_slave_1: entered allmulticast mode [ 776.682695][T15232] bridge_slave_1: entered promiscuous mode [ 776.692176][T15327] netlink: 'syz.4.3151': attribute type 7 has an invalid length. [ 778.155725][ T5833] Bluetooth: hci1: command tx timeout [ 778.466994][T15327] : entered promiscuous mode [ 779.131415][T15232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.491711][ T6487] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 779.990472][T15232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.448224][T15232] team0: Port device team_slave_0 added [ 780.557003][T15232] team0: Port device team_slave_1 added [ 780.791195][T15232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.825446][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.885947][T15232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.932847][T15232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.974807][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.023938][T15232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.320591][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 782.131090][T15232] hsr_slave_0: entered promiscuous mode [ 782.160958][T15232] hsr_slave_1: entered promiscuous mode [ 782.298257][T15232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.341427][T15232] Cannot create hsr debugfs directory [ 782.560001][ T6024] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 783.214401][T15232] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 783.263211][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.275343][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.286190][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.295163][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.304656][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.314143][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.323831][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.332925][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.342607][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.351576][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 783.385090][T15405] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 783.395879][T15405] macvtap1: left promiscuous mode [ 783.401531][T15405] team0: left promiscuous mode [ 783.506467][T15232] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 784.422568][T15232] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 784.512085][T15232] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 784.710626][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 784.877333][T15232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 785.014395][T15232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 785.042345][T15232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 786.230526][T15232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 786.749149][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 786.814879][ T6024] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 787.513887][T15232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.784613][T15463] hugetlbfs: syz.3.3196 (15463): Using mlock ulimits for SHM_HUGETLB is obsolete [ 788.159129][T10015] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 788.425113][T15232] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.595105][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.602376][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.652778][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.660010][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.748322][T15485] __nla_validate_parse: 133 callbacks suppressed [ 789.748339][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3202'. [ 789.899548][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 791.151703][T10015] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 791.284077][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3213'. [ 791.350815][T15516] macvtap2: entered promiscuous mode [ 791.356238][T15516] team0: entered promiscuous mode [ 791.394384][T15516] macvtap2: entered allmulticast mode [ 791.408258][T15516] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 791.435464][T15518] team0: left promiscuous mode [ 792.116628][T15232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.445296][T15232] veth0_vlan: entered promiscuous mode [ 792.453584][ T55] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 792.650617][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 793.232695][T15232] veth1_vlan: entered promiscuous mode [ 793.463852][T15232] veth0_macvtap: entered promiscuous mode [ 793.480239][T15232] veth1_macvtap: entered promiscuous mode [ 793.501606][T15232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.521172][T15232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.262678][T15232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.328835][T15232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.355866][T15232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.399227][T15232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.424293][T15232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.471875][T15232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.505332][T15232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.530419][T15232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.604546][T15232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.633132][T10015] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 794.656558][T15232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.671298][T15232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.688916][T15232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.929063][T15554] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.938735][T15554] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.664816][T10015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.693412][T10015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.799704][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 795.807760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.345084][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.459801][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 796.469399][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 796.478823][ T55] Bluetooth: hci4: hardware error 0x00 [ 796.577690][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 798.041496][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 798.538862][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 800.486817][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 800.744566][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 802.063629][T10015] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 803.340594][T15656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 803.370645][T10015] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 803.417094][T15660] overlayfs: missing 'lowerdir' [ 803.524855][T15660] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 803.843921][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 804.177476][T15676] 9pnet_virtio: no channels available for device syz [ 804.730511][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 805.366130][T15688] xt_connbytes: Forcing CT accounting to be enabled [ 805.373104][T15688] --map-set only usable from mangle table [ 805.499823][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 805.776395][T15701] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3280'. [ 806.585111][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 807.375979][T15738] --map-set only usable from mangle table [ 807.508711][ C0] hrtimer: interrupt took 65700 ns [ 808.590212][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 808.624405][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.019770][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 811.251690][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 811.260868][T15784] hsr0: entered promiscuous mode [ 811.265832][T15784] hsr0: entered allmulticast mode [ 811.888952][T15784] hsr_slave_0: entered allmulticast mode [ 811.894621][T15784] hsr_slave_1: entered allmulticast mode [ 813.067767][T15801] --map-set only usable from mangle table [ 813.482546][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 814.479341][T15815] overlayfs: failed to clone lowerpath [ 814.518049][T15815] overlayfs: failed to clone upperpath [ 815.411564][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 815.495274][T15822] netlink: 'syz.4.3321': attribute type 27 has an invalid length. [ 815.855372][T15822] bond0: left promiscuous mode [ 815.988880][ T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 816.159150][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 816.312191][ T47] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 816.728900][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 816.891580][ T47] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 816.901304][ T47] usb 5-1: Product: syz [ 816.905642][ T47] usb 5-1: Manufacturer: syz [ 816.910340][ T47] usb 5-1: SerialNumber: syz [ 816.949823][ T47] usb 5-1: config 0 descriptor?? [ 817.138965][T15822] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.228974][T15822] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.237905][T15822] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.277310][T15822] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.416560][T15822] team0: left allmulticast mode [ 817.424304][T15822] team0: left promiscuous mode [ 817.435148][T15822] macvtap1: left promiscuous mode [ 817.444503][T15822] macvtap1: left allmulticast mode [ 817.457249][T15822] macvtap2: left promiscuous mode [ 817.465449][T15822] macvtap2: left allmulticast mode [ 817.599287][ T9] usb 5-1: USB disconnect, device number 15 [ 817.852152][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 818.020450][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 820.251704][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 821.655637][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 822.129812][T15908] --map-set only usable from mangle table [ 822.833718][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 823.988951][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 824.860501][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 826.787523][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 828.637311][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 828.989703][T15983] xt_connbytes: Forcing CT accounting to be enabled [ 828.996381][T15983] Cannot find add_set index 0 as target [ 830.066623][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 831.268575][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3375'. [ 831.466389][T16006] macvtap2: entered promiscuous mode [ 831.554551][T16006] bond0: entered promiscuous mode [ 831.567696][T16006] bond_slave_0: entered promiscuous mode [ 831.577984][T16006] bond_slave_1: entered promiscuous mode [ 831.586106][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 831.609218][T16006] macvtap2: entered allmulticast mode [ 831.640600][T16006] bond0: entered allmulticast mode [ 831.667469][T16006] bond_slave_0: entered allmulticast mode [ 831.689161][T16006] bond_slave_1: entered allmulticast mode [ 831.770512][T16006] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 831.831496][T16005] bond0: left allmulticast mode [ 831.869308][T16005] bond_slave_0: left allmulticast mode [ 831.874835][T16005] bond_slave_1: left allmulticast mode [ 831.998952][T16005] bond0: left promiscuous mode [ 832.020600][T16005] bond_slave_0: left promiscuous mode [ 832.026190][T16005] bond_slave_1: left promiscuous mode [ 832.454676][T16024] No control pipe specified [ 833.017713][ T5833] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 833.193517][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.389568][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 833.560215][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.695213][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.812223][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.478776][ T5830] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 834.499212][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 834.526873][ T5833] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 834.537614][T16055] No control pipe specified [ 834.608948][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3394'. [ 835.443510][ T5830] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 835.504175][ T36] bridge_slave_1: left allmulticast mode [ 835.508303][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.521693][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 835.532718][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 835.544810][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 835.558585][ T5830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 835.568545][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.612417][ T36] bridge_slave_1: left promiscuous mode [ 835.614752][ T5830] usb 4-1: config 0 descriptor?? [ 835.646225][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.727063][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 835.737106][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.757520][ T36] bridge_slave_0: left allmulticast mode [ 835.772761][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 835.788386][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 835.798197][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 835.806877][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 835.864006][ T36] bridge_slave_0: left promiscuous mode [ 835.896271][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.100448][ T5830] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 836.131863][ T5830] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 836.156798][ T5830] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 836.894340][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 837.057613][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.077470][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.091356][ T36] bond0 (unregistering): Released all slaves [ 837.114860][ T36] bond1 (unregistering): Released all slaves [ 837.173878][T16084] @: renamed from vlan0 (while UP) [ 837.243165][ T9] usb 4-1: USB disconnect, device number 16 [ 837.925947][ T5833] Bluetooth: hci1: command tx timeout [ 838.393063][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 838.605052][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 839.988790][ T5833] Bluetooth: hci1: command tx timeout [ 840.241109][T16108] siw: device registration error -23 [ 840.409330][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 840.504923][T16157] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 840.543092][T16157] team_slave_0: left promiscuous mode [ 840.551216][T16157] team_slave_1: left promiscuous mode [ 840.562089][T16157] batman_adv: batadv0: Adding interface: team0 [ 840.568526][T16157] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.598345][T16157] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 841.762928][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 842.104301][ T5833] Bluetooth: hci1: command tx timeout [ 842.313043][T16065] chnl_net:caif_netlink_parms(): no params data found [ 843.983215][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 844.042754][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 844.138878][ T5833] Bluetooth: hci1: command tx timeout [ 844.165416][T16195] geneve2: entered promiscuous mode [ 844.213435][T16195] geneve2: entered allmulticast mode [ 844.222634][T16065] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.242287][T16065] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.258970][T16065] bridge_slave_0: entered allmulticast mode [ 844.266949][T16065] bridge_slave_0: entered promiscuous mode [ 844.308609][T16065] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.328558][T16065] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.337854][T16065] bridge_slave_1: entered allmulticast mode [ 844.369853][T16065] bridge_slave_1: entered promiscuous mode [ 844.683698][ T36] hsr_slave_0: left promiscuous mode [ 844.867105][ T36] hsr_slave_1: left promiscuous mode [ 845.001195][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.149870][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.219060][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 845.347352][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.485480][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.182646][ T36] veth1_macvtap: left promiscuous mode [ 846.407270][ T36] veth0_macvtap: left promiscuous mode [ 847.063749][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 847.070768][ T55] Bluetooth: hci3: command 0x1003 tx timeout [ 847.145130][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 848.949083][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 850.113119][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 850.315436][ T36] team0 (unregistering): Port device team_slave_1 removed [ 850.397449][ T36] team0 (unregistering): Port device team_slave_0 removed [ 851.809219][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 852.910718][T16065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.956740][T16065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.464190][ T1152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 853.925708][T16065] team0: Port device team_slave_0 added [ 854.000837][T16275] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3449'. [ 854.245489][T16065] team0: Port device team_slave_1 added [ 854.493796][T16065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.529453][T16065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.558725][T16065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.687944][T16065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.753702][T16065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.918071][T16065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.946790][ T1152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 855.348089][T16299] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3456'. [ 855.350746][T16298] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3455'. [ 855.564156][T16065] hsr_slave_0: entered promiscuous mode [ 855.589294][T16065] hsr_slave_1: entered promiscuous mode [ 855.595808][T16065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 855.778768][T16065] Cannot create hsr debugfs directory [ 856.338889][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 856.944867][ T36] bond0 (unregistering): left allmulticast mode [ 856.976745][ T36] bond0 (unregistering): Released all slaves [ 857.420067][T16315] netlink: 'syz.3.3460': attribute type 72 has an invalid length. [ 857.571501][T16315] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.3460'. [ 857.641539][ T1152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 858.199225][T16329] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3462'. [ 859.264183][T16341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3467'. [ 859.454718][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 861.177449][T16065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 861.651611][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 862.104825][T16065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 862.129442][T16368] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3471'. [ 862.237521][T16065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 863.479436][T16065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 863.600646][ T36] hsr_slave_0: left promiscuous mode [ 863.609042][ T36] hsr_slave_1: left promiscuous mode [ 863.648845][ T36] veth1_macvtap: left promiscuous mode [ 863.654462][ T36] veth0_macvtap: left promiscuous mode [ 863.708819][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 864.842001][ T5964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 865.084644][ T12] smc: removing ib device syz0 [ 865.483760][T14477] infiniband syz1: ib_query_port failed (-19) [ 866.907736][T16065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.931185][T16065] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.958481][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 866.976120][T15804] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.983370][T15804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.130936][T15804] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.138140][T15804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.167839][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 867.847635][T16413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3484'. [ 868.430036][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'. [ 869.034010][ T1152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 870.023269][T16065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.070259][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.229851][T15804] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 871.370486][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 871.600385][T16065] veth0_vlan: entered promiscuous mode [ 871.623188][T16065] veth1_vlan: entered promiscuous mode [ 871.701354][T16065] veth0_macvtap: entered promiscuous mode [ 871.732246][T16065] veth1_macvtap: entered promiscuous mode [ 872.430120][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.440667][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.455124][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.467379][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.490889][T16065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.523404][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.554335][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.574774][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.598293][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.622400][T16065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.671372][ T1152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 872.921960][T16463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.958792][T16463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.967566][T16463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.008754][T16463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.028307][T16463] geneve2: entered promiscuous mode [ 873.034021][T16463] geneve2: entered allmulticast mode [ 873.059603][T16065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.068359][T16065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.098952][T16065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.118775][T16065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.728395][ T36] IPVS: stop unused estimator thread 0... [ 873.924814][ T6488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.052885][ T6488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.150712][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 874.175057][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.241088][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.433342][ T5833] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 875.534892][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 876.773517][T16502] netlink: 'syz.2.3498': attribute type 1 has an invalid length. [ 877.007129][T16502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 877.038914][T16500] bond1: (slave ip6gretap1): making interface the new active one [ 877.047312][T16500] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.055676][T16500] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.983673][T16500] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 878.028962][ T2149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 878.231206][ T2149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 878.297662][T16521] netlink: 'syz.2.3505': attribute type 1 has an invalid length. [ 878.393246][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 878.501984][T16521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 878.931664][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 878.941071][T16521] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 879.031610][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 879.177264][ T5833] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 879.276069][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 880.069194][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 880.129245][ T5019] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 880.556932][ T2149] IPVS: starting estimator thread 0... [ 880.578985][ T1152] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 880.579001][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 880.692579][T16553] IPVS: using max 32 ests per chain, 76800 per kthread [ 881.186000][T14477] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 881.480810][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 881.809827][ T5019] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.157122][T16574] netlink: 'syz.4.3516': attribute type 1 has an invalid length. [ 882.305098][T16574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 882.323064][T16578] bond1: (slave ip6gretap1): making interface the new active one [ 882.343027][T16578] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.402360][T16578] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.433506][T16578] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 882.509147][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3518'. [ 882.520646][ T5830] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.649794][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.719216][ T5833] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 882.731007][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 882.999132][ T2149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 885.789246][ T1152] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 885.789266][ T1152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 886.087611][T16639] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 886.160540][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 886.344107][T16639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 886.493222][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 887.498849][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 887.660522][ T6488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 888.093424][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 889.393771][T16677] syz.6.3543 (16677): drop_caches: 2 [ 889.396157][T16674] syz.6.3543 (16674): drop_caches: 2 [ 889.417988][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 889.982827][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 890.480238][ T5019] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 890.806660][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 890.863534][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3549'. [ 891.576177][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 892.037533][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 892.269530][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 892.458861][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.019193][ T1152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 893.329740][ T5019] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.556199][T10015] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.898225][T16732] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 893.930292][T16732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 894.254368][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 894.699565][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.726844][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3564'. [ 895.560934][ T5833] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 896.331507][ T36] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 896.331528][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 896.491004][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3574'. [ 896.731679][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 896.904969][ T6488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 897.799107][T16796] page: refcount:3 mapcount:0 mapping:ffff888148ca6ff8 index:0x2 pfn:0x652ee [ 897.808044][T16796] memcg:ffff88805b93a000 [ 897.812431][T16796] aops:def_blk_aops ino:fa00000 [ 897.817333][T16796] flags: 0xfff00000000039(locked|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 897.826963][T16796] raw: 00fff00000000039 ffffea000194bbc8 ffff88805c8cb868 ffff888148ca6ff8 [ 897.835783][T16796] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88805b93a000 [ 897.844443][T16796] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 897.852741][T16796] page_owner tracks the page as allocated [ 897.858903][T16796] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 16795, tgid 16795 (syz.6.3579), ts 897635365805, free_ts 897534497194 [ 897.880343][T16796] post_alloc_hook+0x1d8/0x230 [ 897.885169][T16796] get_page_from_freelist+0x21c7/0x22a0 [ 897.890807][T16796] __alloc_frozen_pages_noprof+0x181/0x370 [ 897.896778][T16796] alloc_pages_mpol+0x232/0x4a0 [ 897.902140][T16796] alloc_pages_noprof+0xa9/0x190 [ 897.907166][T16796] folio_alloc_noprof+0x1e/0x30 [ 897.912096][T16796] filemap_alloc_folio_noprof+0xdf/0x470 [ 897.917822][T16796] page_cache_ra_order+0x5e5/0xc70 [ 897.923061][T16796] do_sync_mmap_readahead+0x4b5/0x5f0 [ 897.928483][T16796] filemap_fault+0x62a/0x1200 [ 897.933236][T16796] __do_fault+0x138/0x390 [ 897.937594][T16796] __handle_mm_fault+0x17f9/0x5380 [ 897.942789][T16796] handle_mm_fault+0x2d5/0x7f0 [ 897.947584][T16796] do_user_addr_fault+0xa81/0x1390 [ 897.952769][T16796] exc_page_fault+0x68/0x110 [ 897.957412][T16796] asm_exc_page_fault+0x26/0x30 [ 897.962899][T16796] page last free pid 16791 tgid 16791 stack trace: [ 897.969486][T16796] __free_frozen_pages+0xb05/0xcd0 [ 897.974956][T16796] __slab_free+0x326/0x400 [ 897.979482][T16796] qlist_free_all+0x9a/0x140 [ 897.984117][T16796] kasan_quarantine_reduce+0x148/0x160 [ 897.989702][T16796] __kasan_slab_alloc+0x22/0x80 [ 897.994626][T16796] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 898.000320][T16796] ptlock_alloc+0x20/0x70 [ 898.004993][T16796] pte_alloc_one+0x6d/0x160 [ 898.009561][T16796] __handle_mm_fault+0x27e8/0x5380 [ 898.014820][T16796] handle_mm_fault+0x2d5/0x7f0 [ 898.019661][T16796] do_user_addr_fault+0xa81/0x1390 [ 898.024821][T16796] exc_page_fault+0x68/0x110 [ 898.029472][T16796] asm_exc_page_fault+0x26/0x30 [ 898.034528][T16796] ------------[ cut here ]------------ [ 898.040064][T16796] kernel BUG at mm/filemap.c:3433! [ 898.045234][T16796] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 898.051474][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.6.3579 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 898.063534][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 898.073593][T16796] RIP: 0010:filemap_fault+0x1181/0x1200 [ 898.079142][T16796] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b9 64 28 00 e9 81 fc ff ff e8 cf 91 c8 ff 48 89 df 48 c7 c6 80 09 74 8b e8 50 a6 0d 00 90 <0f> 0b e8 b8 91 c8 ff 48 8b 3c 24 48 c7 c6 00 10 74 8b e8 38 a6 0d [ 898.098761][T16796] RSP: 0018:ffffc900038073e0 EFLAGS: 00010246 [ 898.104852][T16796] RAX: 4c6d8f911b14e200 RBX: ffffea000194bb80 RCX: 4c6d8f911b14e200 [ 898.112824][T16796] RDX: 0000000000000000 RSI: ffffffff8d9226fd RDI: ffff88803072bc00 [ 898.120795][T16796] RBP: ffffc90003807518 R08: 0000000000000003 R09: 0000000000000004 [ 898.128763][T16796] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: dffffc0000000000 [ 898.136766][T16796] R13: 1ffffd4000329771 R14: ffffea000194bb98 R15: ffffea000194bb88 [ 898.144740][T16796] FS: 00007fa620bed6c0(0000) GS:ffff8881260fb000(0000) knlGS:0000000000000000 [ 898.153699][T16796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.160279][T16796] CR2: 0000200000001aa5 CR3: 0000000059042000 CR4: 00000000003526f0 [ 898.168252][T16796] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.176227][T16796] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 898.184215][T16796] Call Trace: [ 898.187506][T16796] [ 898.190453][T16796] ? __pfx_filemap_fault+0x10/0x10 [ 898.195589][T16796] ? __handle_mm_fault+0x280a/0x5380 [ 898.200887][T16796] __do_fault+0x138/0x390 [ 898.205219][T16796] __handle_mm_fault+0x363e/0x5380 [ 898.210347][T16796] ? __pfx___handle_mm_fault+0x10/0x10 [ 898.215826][T16796] ? find_vma+0xe7/0x160 [ 898.220077][T16796] ? __pfx_find_vma+0x10/0x10 [ 898.224752][T16796] handle_mm_fault+0x2d5/0x7f0 [ 898.229522][T16796] do_user_addr_fault+0x764/0x1390 [ 898.234653][T16796] exc_page_fault+0x68/0x110 [ 898.239243][T16796] asm_exc_page_fault+0x26/0x30 [ 898.244088][T16796] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 898.249828][T16796] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 898.269436][T16796] RSP: 0018:ffffc90003807998 EFLAGS: 00050202 [ 898.275510][T16796] RAX: 00007ffffffff001 RBX: 0000000000000001 RCX: 0000000000000001 [ 898.283481][T16796] RDX: 0000000000000001 RSI: 0000200000001aa5 RDI: ffff88805bc4a7e5 [ 898.291458][T16796] RBP: 000000000000d81b R08: ffff88805bc4a7e5 R09: 1ffff1100b7894fc [ 898.299437][T16796] R10: dffffc0000000000 R11: ffffed100b7894fd R12: 0000000000000000 [ 898.307418][T16796] R13: 0000000000000001 R14: ffff88805bc4a7e5 R15: 0000200000001aa5 [ 898.315403][T16796] _copy_from_user+0x7a/0xb0 [ 898.320053][T16796] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 898.325730][T16796] snd_rawmidi_write+0x5ad/0xbd0 [ 898.330685][T16796] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 898.336147][T16796] ? __pfx_default_wake_function+0x10/0x10 [ 898.341956][T16796] ? __import_iovec+0x40e/0x7f0 [ 898.346821][T16796] ? bpf_lsm_file_permission+0x9/0x20 [ 898.352197][T16796] ? security_file_permission+0x75/0x290 [ 898.357831][T16796] ? rw_verify_area+0x258/0x650 [ 898.362693][T16796] vfs_writev+0x4a5/0x9a0 [ 898.367019][T16796] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 898.372481][T16796] ? __pfx_vfs_writev+0x10/0x10 [ 898.377358][T16796] ? __fget_files+0x2a/0x420 [ 898.381952][T16796] ? __fget_files+0x3a0/0x420 [ 898.386626][T16796] ? __fget_files+0x2a/0x420 [ 898.391216][T16796] do_writev+0x14d/0x2d0 [ 898.395458][T16796] ? __pfx_do_writev+0x10/0x10 [ 898.400229][T16796] ? do_syscall_64+0xba/0x210 [ 898.404924][T16796] do_syscall_64+0xf6/0x210 [ 898.409429][T16796] ? clear_bhb_loop+0x60/0xb0 [ 898.414104][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.419995][T16796] RIP: 0033:0x7fa61fd8e969 [ 898.424416][T16796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.444032][T16796] RSP: 002b:00007fa620bed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 898.452457][T16796] RAX: ffffffffffffffda RBX: 00007fa61ffb5fa0 RCX: 00007fa61fd8e969 [ 898.460447][T16796] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 898.468419][T16796] RBP: 00007fa61fe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 898.476385][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.484355][T16796] R13: 0000000000000000 R14: 00007fa61ffb5fa0 R15: 00007ffd22d724b8 [ 898.492330][T16796] [ 898.495357][T16796] Modules linked in: [ 898.501721][T16796] ---[ end trace 0000000000000000 ]--- [ 898.507213][T16796] RIP: 0010:filemap_fault+0x1181/0x1200 [ 898.512808][T16796] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b9 64 28 00 e9 81 fc ff ff e8 cf 91 c8 ff 48 89 df 48 c7 c6 80 09 74 8b e8 50 a6 0d 00 90 <0f> 0b e8 b8 91 c8 ff 48 8b 3c 24 48 c7 c6 00 10 74 8b e8 38 a6 0d [ 898.532732][T16796] RSP: 0018:ffffc900038073e0 EFLAGS: 00010246 [ 898.538962][T16796] RAX: 4c6d8f911b14e200 RBX: ffffea000194bb80 RCX: 4c6d8f911b14e200 [ 898.546960][T16796] RDX: 0000000000000000 RSI: ffffffff8d9226fd RDI: ffff88803072bc00 [ 898.554975][T16796] RBP: ffffc90003807518 R08: 0000000000000003 R09: 0000000000000004 [ 898.563015][T16796] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: dffffc0000000000 [ 898.571024][T16796] R13: 1ffffd4000329771 R14: ffffea000194bb98 R15: ffffea000194bb88 [ 898.579395][T16796] FS: 00007fa620bed6c0(0000) GS:ffff8881260fb000(0000) knlGS:0000000000000000 [ 898.588525][T16796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.595165][T16796] CR2: 0000200000001aa5 CR3: 0000000059042000 CR4: 00000000003526f0 [ 898.603196][T16796] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.611212][T16796] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 898.619424][T16796] Kernel panic - not syncing: Fatal exception [ 898.625809][T16796] Kernel Offset: disabled [ 898.630131][T16796] Rebooting in 86400 seconds..