last executing test programs: 43.501933481s ago: executing program 3 (id=1860): socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 43.423402687s ago: executing program 3 (id=1861): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x2) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b99", 0x2e) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'ovf\x00', 0x2, 0x3, 0x181a}, {@broadcast, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000d811}, 0x4000080) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xe7c}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x75}, 0x40000020) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) 43.309432405s ago: executing program 3 (id=1862): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) 42.233246687s ago: executing program 3 (id=1868): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 41.865986938s ago: executing program 3 (id=1874): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000001a80)=""/102, 0x66}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40000000, 0x0) 40.507344774s ago: executing program 3 (id=1878): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) 39.051646455s ago: executing program 32 (id=1878): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) 7.201250285s ago: executing program 5 (id=1998): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETLED(r0, 0x4b32, 0x5) 6.112820738s ago: executing program 0 (id=2000): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee8000004000000", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.112530143s ago: executing program 5 (id=2001): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a047f0200ff000000000000000058000b4824ce945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040000800000000000001000", 0x58}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.075122057s ago: executing program 2 (id=2002): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) 5.979467783s ago: executing program 0 (id=2004): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x3, 0x1, 0x0, '\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000140103801001008008000340000000"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$fb(r3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) writev(r6, &(0x7f0000000040), 0x2) close(r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2e", 0x69}], 0x1}, 0x44000) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ff", 0xf}], 0x1) 4.973317661s ago: executing program 2 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 4.230923979s ago: executing program 0 (id=2008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x2, 0x80000001, {{0x18, 0x4, 0x0, 0x3, 0x60, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xf4, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xfffffff8}, {@multicast1, 0x80000001}, {@broadcast, 0x5}]}, @noop, @ssrr={0x89, 0x3, 0xa6}, @cipso={0x86, 0x22, 0x3, [{0x0, 0x3, 'y'}, {0x0, 0xf, "a948793f9e2b7296cde0fff12c"}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x6, "b6fcecf8"}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x2d, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0xc, 0x5, 0x3, 0x8}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x0, 0x2, 0x6, 0x401, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x7, &(0x7f0000000840)=""/7, 0x40f00, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xe, 0xf, 0x9}, 0x10, 0x17fb1, r1, 0x2, 0x0, &(0x7f0000000b40)=[{0x2, 0x2, 0x2}, {0x1, 0x5, 0x2, 0x1}], 0x10, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 4.224576734s ago: executing program 2 (id=2009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd769, 0x2, 0x49b, 0x7, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.037146704s ago: executing program 0 (id=2012): ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x200000000000009a, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x86c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10) 1.992247362s ago: executing program 4 (id=2013): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4084) 1.99151407s ago: executing program 1 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060108000034e40000000000000000050001000600000005000400180000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f727400"], 0x58}}, 0x2) 1.876806802s ago: executing program 4 (id=2015): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 1.876432701s ago: executing program 1 (id=2016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000400)=0x2401, 0x4) 1.874986553s ago: executing program 2 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) socket(0x10, 0x3, 0x6) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.705712055s ago: executing program 1 (id=2018): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000200), &(0x7f0000000340)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.68466388s ago: executing program 4 (id=2019): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 1.45362986s ago: executing program 5 (id=2020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x24, r7, 0x331, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x65b95e9f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x48014) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd07, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x25}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x64, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb7d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xba2}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.441202132s ago: executing program 1 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x2c}}, 0x4004080) 1.340782512s ago: executing program 2 (id=2022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x2, 0x80000001, {{0x18, 0x4, 0x0, 0x3, 0x60, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xf4, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xfffffff8}, {@multicast1, 0x80000001}, {@broadcast, 0x5}]}, @noop, @ssrr={0x89, 0x3, 0xa6}, @cipso={0x86, 0x22, 0x3, [{0x0, 0x3, 'y'}, {0x0, 0xf, "a948793f9e2b7296cde0fff12c"}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x6, "b6fcecf8"}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x2d, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0xc, 0x5, 0x3, 0x8}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x0, 0x2, 0x6, 0x401, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x7, &(0x7f0000000840)=""/7, 0x40f00, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xe, 0xf, 0x9}, 0x10, 0x17fb1, r1, 0x2, 0x0, &(0x7f0000000b40)=[{0x2, 0x2, 0x2}, {0x1, 0x5, 0x2, 0x1}], 0x10, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 1.303395032s ago: executing program 1 (id=2023): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce07020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.24191864s ago: executing program 4 (id=2024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xa, 0x0, {0x1, 0x0, 0xbdd7, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7fffffff, 0xc0ac}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000100)='./file0\x00', 0x0) 1.086706427s ago: executing program 0 (id=2025): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback}}, 0x401, 0x8000, 0x101, 0x1, 0x70, 0x81, 0x6}, &(0x7f0000000040)=0x9c) 1.040941189s ago: executing program 4 (id=2026): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 975.286338ms ago: executing program 5 (id=2027): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002"], 0x1c}], 0x1}, 0x0) 768.147116ms ago: executing program 2 (id=2028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x200000000008, 0x4, 0x0, 0x209}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x541b, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x3, 0x4a243) close(r4) 719.026768ms ago: executing program 5 (id=2029): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x104, 0xd5, 0x6, 0x7ff10003}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0) 716.236749ms ago: executing program 1 (id=2030): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d0001007564703a"], 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 666.047025ms ago: executing program 4 (id=2031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x5, 0x8, 0xfe, 0x0, 0x8, 0x2, 0x8, 0x72, 0x5, 0xfa, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x2000003, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) 34.581567ms ago: executing program 0 (id=2032): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) socket(0x10, 0x3, 0x6) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 0s ago: executing program 5 (id=2033): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 76.651378][ T5824] cgroup: Unknown subsys name 'net' [ 76.803999][ T5824] cgroup: Unknown subsys name 'cpuset' [ 76.813203][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.207913][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.882118][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.886073][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.898875][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.901634][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.907316][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.921633][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.922382][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.929248][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.945241][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.953564][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.962190][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.971140][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.979356][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.981825][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.988176][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.003152][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.015667][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.031861][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.047582][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.057245][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.064576][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.076905][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.084493][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.108890][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.116732][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.749631][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 81.776193][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 81.915217][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 81.979208][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 82.030019][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 82.138563][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.147315][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.155122][ T5844] bridge_slave_0: entered allmulticast mode [ 82.162861][ T5844] bridge_slave_0: entered promiscuous mode [ 82.212566][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.220247][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.227513][ T5844] bridge_slave_1: entered allmulticast mode [ 82.236301][ T5844] bridge_slave_1: entered promiscuous mode [ 82.267204][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.274739][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.282560][ T5847] bridge_slave_0: entered allmulticast mode [ 82.290237][ T5847] bridge_slave_0: entered promiscuous mode [ 82.335874][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.359805][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.367040][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.375000][ T5835] bridge_slave_0: entered allmulticast mode [ 82.382628][ T5835] bridge_slave_0: entered promiscuous mode [ 82.391596][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.398868][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.406468][ T5847] bridge_slave_1: entered allmulticast mode [ 82.414489][ T5847] bridge_slave_1: entered promiscuous mode [ 82.448406][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.458227][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.465996][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.473404][ T5835] bridge_slave_1: entered allmulticast mode [ 82.482042][ T5835] bridge_slave_1: entered promiscuous mode [ 82.521695][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.529423][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.537131][ T5834] bridge_slave_0: entered allmulticast mode [ 82.544807][ T5834] bridge_slave_0: entered promiscuous mode [ 82.581146][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.593794][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.615018][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.622735][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.630254][ T5834] bridge_slave_1: entered allmulticast mode [ 82.637461][ T5834] bridge_slave_1: entered promiscuous mode [ 82.685604][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.693172][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.700656][ T5843] bridge_slave_0: entered allmulticast mode [ 82.708188][ T5843] bridge_slave_0: entered promiscuous mode [ 82.732098][ T5844] team0: Port device team_slave_0 added [ 82.753672][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.766217][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.788422][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.796798][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.804546][ T5843] bridge_slave_1: entered allmulticast mode [ 82.813748][ T5843] bridge_slave_1: entered promiscuous mode [ 82.823152][ T5844] team0: Port device team_slave_1 added [ 82.832691][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.845946][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.858600][ T5847] team0: Port device team_slave_0 added [ 82.869049][ T5847] team0: Port device team_slave_1 added [ 82.962813][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.972262][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.000344][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.061827][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.072378][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.079696][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.108963][ T5842] Bluetooth: hci0: command tx timeout [ 83.111969][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.138907][ T5835] team0: Port device team_slave_0 added [ 83.149345][ T5835] team0: Port device team_slave_1 added [ 83.158474][ T5834] team0: Port device team_slave_0 added [ 83.165588][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.172793][ T5842] Bluetooth: hci2: command tx timeout [ 83.178214][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.180146][ T5853] Bluetooth: hci1: command tx timeout [ 83.205227][ T5848] Bluetooth: hci3: command tx timeout [ 83.210551][ T5842] Bluetooth: hci4: command tx timeout [ 83.217537][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.236093][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.285012][ T5834] team0: Port device team_slave_1 added [ 83.303793][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.311457][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.339504][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.379198][ T5843] team0: Port device team_slave_0 added [ 83.401276][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.408337][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.435771][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.462196][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.469296][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.496159][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.537965][ T5843] team0: Port device team_slave_1 added [ 83.545618][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.553147][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.579737][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.599176][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.606745][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.633909][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.663773][ T5844] hsr_slave_0: entered promiscuous mode [ 83.671070][ T5844] hsr_slave_1: entered promiscuous mode [ 83.705383][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.712817][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.740217][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.765079][ T5847] hsr_slave_0: entered promiscuous mode [ 83.772409][ T5847] hsr_slave_1: entered promiscuous mode [ 83.778564][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.787287][ T5847] Cannot create hsr debugfs directory [ 83.806696][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.813935][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.841083][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.977489][ T5835] hsr_slave_0: entered promiscuous mode [ 83.986545][ T5835] hsr_slave_1: entered promiscuous mode [ 83.993158][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.003625][ T5835] Cannot create hsr debugfs directory [ 84.028247][ T5834] hsr_slave_0: entered promiscuous mode [ 84.034732][ T5834] hsr_slave_1: entered promiscuous mode [ 84.041375][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.049151][ T5834] Cannot create hsr debugfs directory [ 84.174130][ T5843] hsr_slave_0: entered promiscuous mode [ 84.180927][ T5843] hsr_slave_1: entered promiscuous mode [ 84.187471][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.195333][ T5843] Cannot create hsr debugfs directory [ 84.638909][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.653724][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.687508][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.715253][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.797001][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.824943][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.837265][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.852744][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.965709][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.989262][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.004052][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.016578][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.154684][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.170114][ T5853] Bluetooth: hci0: command tx timeout [ 85.193850][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.217517][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.244885][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.252336][ T5853] Bluetooth: hci3: command tx timeout [ 85.258029][ T5853] Bluetooth: hci1: command tx timeout [ 85.260246][ T5842] Bluetooth: hci4: command tx timeout [ 85.263999][ T5853] Bluetooth: hci2: command tx timeout [ 85.308462][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.394521][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.418916][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.459408][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.485265][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.494471][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.506903][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.521964][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.529575][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.565121][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.587162][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.594714][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.619077][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.626372][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.664485][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.672123][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.702791][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.782181][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.799058][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.838067][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.845686][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.907679][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.915003][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.023906][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.114162][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.136526][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.143937][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.218410][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.246773][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.254430][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.326589][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.404931][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.412822][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.457268][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.499661][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.507087][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.585675][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.657623][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.735658][ T5844] veth0_vlan: entered promiscuous mode [ 86.808267][ T5844] veth1_vlan: entered promiscuous mode [ 86.893215][ T5847] veth0_vlan: entered promiscuous mode [ 86.988298][ T5844] veth0_macvtap: entered promiscuous mode [ 87.017658][ T5847] veth1_vlan: entered promiscuous mode [ 87.084893][ T5844] veth1_macvtap: entered promiscuous mode [ 87.194964][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.239720][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.260019][ T5853] Bluetooth: hci0: command tx timeout [ 87.280453][ T5847] veth0_macvtap: entered promiscuous mode [ 87.289442][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.312181][ T5847] veth1_macvtap: entered promiscuous mode [ 87.330556][ T5853] Bluetooth: hci4: command tx timeout [ 87.333776][ T5848] Bluetooth: hci1: command tx timeout [ 87.335994][ T5853] Bluetooth: hci3: command tx timeout [ 87.345512][ T5848] Bluetooth: hci2: command tx timeout [ 87.351716][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.380070][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.388840][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.408996][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.477778][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.557858][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.609247][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.665384][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.675086][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.684483][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.694327][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.784598][ T5843] veth0_vlan: entered promiscuous mode [ 87.836265][ T4054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.846489][ T4054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.854682][ T5843] veth1_vlan: entered promiscuous mode [ 87.874126][ T5835] veth0_vlan: entered promiscuous mode [ 87.908383][ T5835] veth1_vlan: entered promiscuous mode [ 87.987771][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.997286][ T5834] veth0_vlan: entered promiscuous mode [ 88.004265][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.007500][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.021552][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.032687][ T5834] veth1_vlan: entered promiscuous mode [ 88.065037][ T5843] veth0_macvtap: entered promiscuous mode [ 88.111658][ T5843] veth1_macvtap: entered promiscuous mode [ 88.122578][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.159038][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.185641][ T5835] veth0_macvtap: entered promiscuous mode [ 88.199301][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.213976][ T5835] veth1_macvtap: entered promiscuous mode [ 88.279381][ T5834] veth0_macvtap: entered promiscuous mode [ 88.310624][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.334489][ T5834] veth1_macvtap: entered promiscuous mode [ 88.404270][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.427958][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.465792][ T5961] team_slave_0: entered promiscuous mode [ 88.471797][ T5961] team_slave_1: entered promiscuous mode [ 88.500845][ T5961] vlan2: entered promiscuous mode [ 88.510053][ T5961] team0: entered promiscuous mode [ 88.568420][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.583355][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.598465][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.617442][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.667031][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.686304][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.745893][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.751494][ T5961] syz.3.4 (5961) used greatest stack depth: 19520 bytes left [ 88.761756][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.777020][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.787104][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 88.800476][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.838141][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.875827][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.892129][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.901241][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.911059][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.967724][ T5970] Zero length message leads to an empty skb [ 89.066573][ T4054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.101581][ T4054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.235340][ T458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.247054][ T458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.304547][ T458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.330928][ T5848] Bluetooth: hci0: command tx timeout [ 89.345449][ T458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.411253][ T5848] Bluetooth: hci2: command tx timeout [ 89.417097][ T5842] Bluetooth: hci3: command tx timeout [ 89.417121][ T5853] Bluetooth: hci1: command tx timeout [ 89.423456][ T5842] Bluetooth: hci4: command tx timeout [ 89.434865][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.453834][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.606153][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.621859][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.832661][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.856301][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.985785][ T5974] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 90.103792][ T5991] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 90.310486][ T5995] tipc: Started in network mode [ 90.314180][ T5994] netlink: 'syz.0.14': attribute type 64 has an invalid length. [ 90.315631][ T5995] tipc: Node identity 86edb569cba4, cluster identity 4711 [ 90.354320][ T5995] tipc: Enabled bearer , priority 0 [ 90.377995][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 90.392711][ T6000] syzkaller0: entered promiscuous mode [ 90.392780][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 90.419609][ T6000] syzkaller0: entered allmulticast mode [ 90.734056][ T5995] tipc: Resetting bearer [ 90.760316][ T5992] tipc: Resetting bearer [ 90.825435][ T5992] tipc: Disabling bearer [ 90.912833][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 90.944246][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 91.616677][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 91.887000][ T6044] netlink: 'syz.4.32': attribute type 4 has an invalid length. [ 92.059674][ T43] cfg80211: failed to load regulatory.db [ 92.567251][ T6067] netlink: 'syz.2.40': attribute type 27 has an invalid length. [ 92.810567][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.43'. [ 92.964317][ T6075] vlan2: entered promiscuous mode [ 92.969927][ T6075] gretap0: entered promiscuous mode [ 93.006713][ T6081] netlink: 116 bytes leftover after parsing attributes in process `syz.2.45'. [ 93.047782][ T6087] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET) [ 93.167935][ T6091] syzkaller0: entered promiscuous mode [ 93.183265][ T6091] syzkaller0: entered allmulticast mode [ 93.638110][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.54'. [ 93.826386][ T6084] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 94.277924][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 94.346348][ T6119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.534267][ T6119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.637119][ T6119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.665291][ T6130] syzkaller0: entered promiscuous mode [ 94.671288][ T6130] syzkaller0: entered allmulticast mode [ 94.718866][ T6119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.725939][ T6141] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.758996][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 94.781747][ T6141] veth1_to_bond: entered promiscuous mode [ 94.787916][ T6141] veth1_to_bond: entered allmulticast mode [ 94.959702][ T6119] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.004235][ T6119] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.038567][ T6147] ipvlan2: entered promiscuous mode [ 95.125331][ T6119] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.200918][ T6119] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.695839][ T6168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 95.755751][ T6144] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 95.950533][ T6171] vlan2: entered promiscuous mode [ 96.378007][ T6190] tipc: Started in network mode [ 96.390551][ T6190] tipc: Node identity 363437b06936, cluster identity 4711 [ 96.408836][ T6190] tipc: Enabled bearer , priority 0 [ 96.423957][ T6190] syzkaller0: entered promiscuous mode [ 96.439182][ T6190] syzkaller0: entered allmulticast mode [ 96.516331][ T6189] tipc: Resetting bearer [ 96.550895][ T6200] netlink: 'syz.0.90': attribute type 30 has an invalid length. [ 96.593933][ T6189] tipc: Disabling bearer [ 96.687923][ T6175] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 97.539440][ T6245] tipc: Started in network mode [ 97.591912][ T6245] tipc: Node identity 6ecb6fcbe386, cluster identity 4711 [ 97.629780][ T6245] tipc: Enabled bearer , priority 0 [ 97.668607][ T6258] syzkaller0: entered promiscuous mode [ 97.699099][ T6258] syzkaller0: entered allmulticast mode [ 97.779354][ T6244] tipc: Resetting bearer [ 97.849439][ T6244] tipc: Disabling bearer [ 98.370416][ T6263] syzkaller1: entered promiscuous mode [ 98.392893][ T6263] syzkaller1: entered allmulticast mode [ 98.729210][ T6278] team_slave_0: entered promiscuous mode [ 98.735025][ T6278] team_slave_1: entered promiscuous mode [ 98.747182][ T6280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.794765][ T6278] vlan3: entered promiscuous mode [ 98.804499][ T6278] team0: entered promiscuous mode [ 99.000310][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 99.251694][ T6303] netlink: 'syz.3.124': attribute type 13 has an invalid length. [ 99.313328][ T6303] veth0_macvtap: left promiscuous mode [ 99.409424][ T6303] macvtap0: entered allmulticast mode [ 99.457346][ T6303] macvtap0: refused to change device tx_queue_len [ 99.691345][ T6313] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 99.745611][ T6313] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 100.909624][ T6357] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 100.953581][ T6357] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 102.126045][ T6412] team_slave_0: entered promiscuous mode [ 102.139594][ T6412] team_slave_1: entered promiscuous mode [ 102.147068][ T6412] vlan2: entered promiscuous mode [ 102.152618][ T6412] team0: entered promiscuous mode [ 102.532862][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 102.963963][ T6432] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.973329][ T6432] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.982514][ T6432] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.993299][ T6432] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.008020][ T6432] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 103.690103][ T6448] netlink: 'syz.2.178': attribute type 9 has an invalid length. [ 103.839636][ T6450] syzkaller0: entered promiscuous mode [ 103.866744][ T6450] syzkaller0: entered allmulticast mode [ 103.881797][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 104.342824][ T6472] warning: `syz.2.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.376762][ T6471] tipc: Enabled bearer , priority 0 [ 104.448453][ T6471] tipc: Resetting bearer [ 104.502163][ T6470] tipc: Disabling bearer [ 104.746448][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.193'. [ 104.767466][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'. [ 104.859160][ T6489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.955765][ T6496] netlink: 'syz.3.197': attribute type 27 has an invalid length. [ 104.985953][ T6489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.126314][ T6489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.315271][ T6489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.409335][ T6511] vlan2: entered promiscuous mode [ 105.627797][ T6489] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.752259][ T6489] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.837379][ T6489] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.923857][ T6489] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.030024][ T6529] netlink: 'syz.1.211': attribute type 64 has an invalid length. [ 106.034550][ T6523] netlink: 248 bytes leftover after parsing attributes in process `syz.2.209'. [ 106.099530][ T6529] sctp: [Deprecated]: syz.1.211 (pid 6529) Use of int in max_burst socket option deprecated. [ 106.099530][ T6529] Use struct sctp_assoc_value instead [ 106.151277][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 106.275367][ T6533] netlink: 'syz.0.212': attribute type 27 has an invalid length. [ 106.981300][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 106.997797][ T6553] vlan3: entered promiscuous mode [ 107.367499][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.431517][ T6571] batadv_slave_0: entered promiscuous mode [ 108.466214][ T6609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.495037][ T6609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.796879][ T6609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.840337][ T6609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.904732][ T6622] 9pnet_fd: Insufficient options for proto=fd [ 109.115599][ T6609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.195117][ T6609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.436001][ T6609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.476773][ T6609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.749167][ T6609] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.773939][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 109.802132][ T6609] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.869664][ T6609] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.930736][ T6609] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.007153][ T6609] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.017356][ T6609] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.041713][ T6609] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.050350][ T6609] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.217687][ T6667] 9pnet_fd: Insufficient options for proto=fd [ 110.367934][ T6674] syzkaller0: entered promiscuous mode [ 110.381863][ T6674] syzkaller0: entered allmulticast mode [ 110.552154][ T6676] syzkaller0: entered promiscuous mode [ 110.561311][ T6676] syzkaller0: entered allmulticast mode [ 110.862960][ T6692] tipc: Started in network mode [ 110.896411][ T6692] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711 [ 110.961254][ T6692] tipc: Enabling of bearer rejected, failed to enable media [ 111.080989][ T6692] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 111.106134][ T6692] netlink: 168 bytes leftover after parsing attributes in process `syz.2.255'. [ 111.146887][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.278000][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.326341][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.354943][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 111.370228][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 111.431496][ T6707] syzkaller0: entered promiscuous mode [ 111.452775][ T6707] syzkaller0: entered allmulticast mode [ 111.564174][ T6712] 9pnet_fd: Insufficient options for proto=fd [ 112.561621][ T6756] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.684248][ T6763] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 112.685116][ T6760] IPVS: stopping backup sync thread 6763 ... [ 113.205283][ T6778] bond_slave_0: entered promiscuous mode [ 113.211301][ T6778] bond_slave_1: entered promiscuous mode [ 113.223879][ T6778] vlan0: entered promiscuous mode [ 113.230647][ T6778] bond0: entered promiscuous mode [ 113.320612][ T6784] syzkaller0: entered promiscuous mode [ 113.357095][ T6784] syzkaller0: entered allmulticast mode [ 113.608263][ T6800] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.724979][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 114.222813][ T6827] syzkaller0: entered promiscuous mode [ 114.228434][ T6827] syzkaller0: entered allmulticast mode [ 115.344904][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 115.403285][ T6884] netlink: 4660 bytes leftover after parsing attributes in process `syz.4.325'. [ 115.501540][ T24] IPVS: starting estimator thread 0... [ 115.600152][ T6888] IPVS: using max 29 ests per chain, 69600 per kthread [ 116.273954][ T6914] v: renamed from ip6_vti0 (while UP) [ 116.403559][ T6890] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 116.409580][ T6920] tipc: Enabling of bearer rejected, failed to enable media [ 116.775843][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 116.897748][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 117.979547][ T6949] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 118.027997][ T6981] vlan0: entered promiscuous mode [ 118.471915][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'. [ 118.572047][ T7002] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.626355][ T7002] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.905599][ T7002] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.940887][ T7002] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.063965][ T7002] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.108482][ T7002] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.394093][ T7002] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.449937][ T7002] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.525074][ T7040] netlink: 280 bytes leftover after parsing attributes in process `syz.4.379'. [ 119.658283][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 119.773924][ T7053] tipc: Enabled bearer , priority 0 [ 119.825633][ T7053] tipc: Resetting bearer [ 119.870788][ T7052] tipc: Disabling bearer [ 119.903785][ T7002] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.941218][ T7002] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.036626][ T7002] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.058241][ T7002] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.081179][ T7002] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.113753][ T7002] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.203738][ T7002] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.265316][ T7002] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.767273][ T7083] netlink: 'syz.2.394': attribute type 27 has an invalid length. [ 121.061488][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 121.260243][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 121.287147][ T7095] netlink: 26 bytes leftover after parsing attributes in process `syz.4.397'. [ 121.308793][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.397'. [ 121.370987][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.548076][ T7116] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 121.581752][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.607494][ T7119] syzkaller0: entered promiscuous mode [ 121.615697][ T7119] syzkaller0: entered allmulticast mode [ 121.659570][ T7116] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 121.695963][ T7121] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 121.708358][ T7121] bond1 (unregistering): Released all slaves [ 121.823440][ T7123] netlink: 'syz.1.407': attribute type 27 has an invalid length. [ 121.866504][ T7125] bond_slave_0: entered promiscuous mode [ 121.872887][ T7125] bond_slave_1: entered promiscuous mode [ 121.895395][ T7125] vlan3: entered promiscuous mode [ 121.908521][ T7125] bond0: entered promiscuous mode [ 121.972107][ T7127] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 122.016472][ T7127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.110729][ T7134] bond1: (slave veth3): Enslaving as an active interface with a down link [ 122.162387][ T7126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.210329][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 122.423964][ T4054] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.486363][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'. [ 122.847903][ T7155] IPVS: Scheduler module ip_vs_sip not found [ 122.923648][ T7168] syzkaller0: entered promiscuous mode [ 122.932540][ T7168] syzkaller0: entered allmulticast mode [ 123.137764][ T7177] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 123.175214][ T7177] netlink: 224 bytes leftover after parsing attributes in process `syz.2.418'. [ 123.239193][ T7184] vlan0: entered promiscuous mode [ 123.497847][ T1099] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.553584][ T1099] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.640326][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.653704][ T7194] tipc: Enabled bearer , priority 0 [ 123.706028][ T7194] syzkaller0: entered promiscuous mode [ 123.740419][ T7194] syzkaller0: entered allmulticast mode [ 123.866549][ T7194] tipc: Resetting bearer [ 123.896256][ T7192] tipc: Resetting bearer [ 123.995730][ T7192] tipc: Disabling bearer [ 124.045199][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.432'. [ 124.244837][ T7216] syzkaller0: entered promiscuous mode [ 124.273870][ T7216] syzkaller0: entered allmulticast mode [ 124.314210][ T7219] vcan0: tx drop: invalid sa for name 0x0000000000000080 [ 124.465562][ T7220] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.481328][ T7220] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.630387][ T7220] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.654527][ T7220] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.690630][ T7236] IPVS: stopping backup sync thread 7238 ... [ 124.699275][ T7238] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 124.744054][ T7240] netlink: 'syz.4.444': attribute type 9 has an invalid length. [ 124.808398][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 124.852194][ T7220] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.880586][ T7220] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.090200][ T7220] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.125461][ T7220] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.337721][ T7220] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.380510][ T7220] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.453167][ T7220] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.474114][ T7220] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.538984][ T7220] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.567830][ T7220] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.577375][ T7268] tipc: Enabled bearer , priority 0 [ 125.618402][ T7277] bond_slave_0: entered promiscuous mode [ 125.624220][ T7277] bond_slave_1: entered promiscuous mode [ 125.630685][ T7277] vlan0: entered promiscuous mode [ 125.636189][ T7277] bond0: entered promiscuous mode [ 125.673708][ T7220] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.682886][ T7220] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.734533][ T7268] tipc: Resetting bearer [ 125.847422][ T7267] tipc: Disabling bearer [ 125.872234][ T7285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.460'. [ 126.738803][ T7319] netlink: 'syz.2.470': attribute type 27 has an invalid length. [ 127.099530][ T7326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.165519][ T7337] veth0_to_team: entered promiscuous mode [ 127.220312][ T7337] veth0_to_team: entered allmulticast mode [ 127.251158][ C1] Illegal XDP return value 16128 on prog (id 101) dev lo, expect packet loss! [ 127.410128][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.591201][ T7347] syzkaller0: entered promiscuous mode [ 127.596826][ T7347] syzkaller0: entered allmulticast mode [ 128.409599][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.490'. [ 128.433890][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.490'. [ 129.091588][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 129.628585][ T7422] netlink: 844 bytes leftover after parsing attributes in process `syz.1.503'. [ 130.247959][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 130.549530][ T7448] 9pnet: Could not find request transport: fd0x0000000000000004 [ 130.609717][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 131.056567][ T7475] tipc: Enabled bearer , priority 0 [ 131.089062][ T7475] syzkaller0: entered promiscuous mode [ 131.107140][ T7475] syzkaller0: entered allmulticast mode [ 131.183259][ T7475] tipc: Resetting bearer [ 131.213336][ T7472] tipc: Resetting bearer [ 131.265375][ T7472] tipc: Disabling bearer [ 131.614989][ T5842] Bluetooth: hci4: link tx timeout [ 131.622411][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.633085][ T5842] Bluetooth: hci4: link tx timeout [ 131.639195][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.810327][ T7501] 9pnet: Could not find request transport: fd0x0000000000000004 [ 132.016580][ T7516] Bluetooth: MGMT ver 1.23 [ 132.049042][ T7515] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 132.318902][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056126c00: rx timeout, send abort [ 132.490925][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 132.743709][ T7542] 9pnet: Could not find request transport: fd0x0000000000000004 [ 132.828536][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056126c00: abort rx timeout. Force session deactivation [ 132.892931][ T7553] delete_channel: no stack [ 133.015960][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.022683][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.655058][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 134.130881][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 134.169781][ T7585] 9pnet_fd: Insufficient options for proto=fd [ 134.281094][ T7589] netlink: 'syz.2.551': attribute type 27 has an invalid length. [ 134.480291][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 134.554654][ T7599] syz.1.556 (7599) used obsolete PPPIOCDETACH ioctl [ 134.610387][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 135.134257][ T7618] 9pnet_fd: Insufficient options for proto=fd [ 135.196581][ T7617] vlan0: entered promiscuous mode [ 135.290772][ T7620] netlink: 'syz.4.565': attribute type 7 has an invalid length. [ 135.307327][ T7620] netlink: 'syz.4.565': attribute type 8 has an invalid length. [ 135.319452][ T7620] netlink: 224 bytes leftover after parsing attributes in process `syz.4.565'. [ 135.570020][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.887901][ T7644] tipc: Enabled bearer , priority 0 [ 135.949739][ T7641] syzkaller0: entered promiscuous mode [ 135.956002][ T7641] syzkaller0: entered allmulticast mode [ 136.004770][ T7641] tipc: Resetting bearer [ 136.014670][ T7639] tipc: Resetting bearer [ 136.041623][ T7639] tipc: Disabling bearer [ 136.176045][ T7652] 9pnet_fd: Insufficient options for proto=fd [ 136.673277][ T7660] vlan0: entered promiscuous mode [ 136.742524][ T7672] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 136.764808][ T7670] IPVS: stopping backup sync thread 7672 ... [ 137.152529][ T7687] 9pnet_fd: Insufficient options for proto=fd [ 138.175504][ T7720] netlink: 'syz.2.603': attribute type 27 has an invalid length. [ 138.753940][ T7740] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 139.260663][ T7768] tipc: Enabled bearer , priority 0 [ 139.311193][ T7768] syzkaller0: entered promiscuous mode [ 139.317214][ T7768] syzkaller0: entered allmulticast mode [ 139.371343][ T7768] tipc: Resetting bearer [ 139.382156][ T7767] tipc: Resetting bearer [ 139.429152][ T7767] tipc: Disabling bearer [ 139.458915][ T7762] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 139.684461][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 140.150627][ T7795] netlink: 52 bytes leftover after parsing attributes in process `syz.0.633'. [ 141.210654][ T7817] tipc: Enabling of bearer rejected, failed to enable media [ 141.276935][ T7819] bridge0: entered promiscuous mode [ 141.313956][ T7819] bridge0: port 3(macvlan2) entered blocking state [ 141.329200][ T7819] bridge0: port 3(macvlan2) entered disabled state [ 141.347787][ T7819] macvlan2: entered allmulticast mode [ 141.365885][ T7819] bridge0: entered allmulticast mode [ 141.388773][ T7819] macvlan2: left allmulticast mode [ 141.395047][ T7819] bridge0: left allmulticast mode [ 141.408356][ T7819] bridge0: left promiscuous mode [ 141.468124][ T7825] netlink: 76 bytes leftover after parsing attributes in process `syz.0.645'. [ 142.109373][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 142.142901][ T7844] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 142.167441][ T7848] tipc: Started in network mode [ 142.173326][ T7848] tipc: Node identity 86413d9eb5d7, cluster identity 4711 [ 142.193784][ T7848] tipc: Enabled bearer , priority 0 [ 142.244622][ T7848] tipc: Resetting bearer [ 142.288751][ T7838] syzkaller0: entered promiscuous mode [ 142.298555][ T7838] syzkaller0: entered allmulticast mode [ 142.325517][ T7837] tipc: Resetting bearer [ 142.405722][ T7837] tipc: Disabling bearer [ 142.460132][ T7860] delete_channel: no stack [ 142.967189][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'. [ 143.639669][ T7898] IPVS: stopping backup sync thread 7899 ... [ 143.639734][ T7899] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 143.840491][ T7906] netlink: 4660 bytes leftover after parsing attributes in process `syz.4.672'. [ 144.239084][ T7919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 144.589529][ T7934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'. [ 144.642212][ T7934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'. [ 145.077634][ T7947] IPVS: stopping backup sync thread 7952 ... [ 145.087526][ T7952] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 145.804686][ T7969] bond_slave_0: entered promiscuous mode [ 145.812661][ T7969] bond_slave_1: entered promiscuous mode [ 145.818971][ T7969] vxlan0: entered promiscuous mode [ 145.837091][ T7969] vlan2: entered promiscuous mode [ 145.856284][ T7969] bond0: entered promiscuous mode [ 147.035288][ T8010] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 147.425630][ T8023] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 147.439169][ T8022] IPVS: stopping backup sync thread 8023 ... [ 148.293027][ T8041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 148.742340][ T8052] netlink: 'syz.3.725': attribute type 27 has an invalid length. [ 149.102202][ T8056] IPVS: stopping backup sync thread 8057 ... [ 149.109438][ T8057] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 149.471236][ T8065] block nbd2: NBD_DISCONNECT [ 149.706716][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 149.708280][ T8070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.733'. [ 149.744010][ T8072] geneve0: entered allmulticast mode [ 150.156669][ T8080] netlink: 'syz.2.737': attribute type 27 has an invalid length. [ 150.260137][ T8088] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 150.260438][ T8086] IPVS: stopping backup sync thread 8088 ... [ 150.766815][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 150.788710][ T8109] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 150.797730][ T8109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.253973][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 151.267354][ T8125] netlink: 'syz.1.753': attribute type 27 has an invalid length. [ 151.583251][ T8137] IPVS: stopping backup sync thread 8139 ... [ 151.583254][ T8139] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 151.628535][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 152.210063][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.461611][ T8169] vlan0: entered promiscuous mode [ 153.054531][ T8192] tipc: Enabled bearer , priority 0 [ 153.065152][ T8192] syzkaller0: entered promiscuous mode [ 153.073834][ T8192] syzkaller0: entered allmulticast mode [ 153.098345][ T8191] tipc: Resetting bearer [ 153.117686][ T8191] tipc: Disabling bearer [ 153.284980][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 153.672378][ T8208] vlan3: entered promiscuous mode [ 154.029470][ T8226] netlink: 76 bytes leftover after parsing attributes in process `syz.2.793'. [ 154.093368][ T8224] tipc: Enabled bearer , priority 0 [ 154.114414][ T8227] syzkaller0: entered promiscuous mode [ 154.154067][ T8227] syzkaller0: entered allmulticast mode [ 154.290076][ T8221] tipc: Resetting bearer [ 154.345424][ T8221] tipc: Disabling bearer [ 154.612364][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 154.897142][ T8254] netlink: 'syz.0.803': attribute type 21 has an invalid length. [ 154.912925][ T8254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.803'. [ 154.961337][ T8254] tipc: Enabled bearer , priority 0 [ 154.974761][ T8254] syzkaller0: entered promiscuous mode [ 154.984742][ T8254] syzkaller0: entered allmulticast mode [ 155.100937][ T8258] tipc: Resetting bearer [ 155.146648][ T8252] tipc: Resetting bearer [ 155.173499][ T8252] tipc: Disabling bearer [ 155.554273][ T8270] tipc: Enabled bearer , priority 0 [ 155.581563][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 155.594887][ T8270] syzkaller0: entered promiscuous mode [ 155.632441][ T8270] syzkaller0: entered allmulticast mode [ 155.785079][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 156.333672][ T8268] tipc: Resetting bearer [ 156.445170][ T8268] tipc: Disabling bearer [ 157.135848][ T8313] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 157.168339][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 157.701573][ T8333] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 158.040344][ T8353] netlink: 'syz.3.838': attribute type 10 has an invalid length. [ 158.060903][ T8333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.166391][ T8338] bond1: (slave veth5): Enslaving as an active interface with a down link [ 158.204668][ T8343] vlan0: entered allmulticast mode [ 158.214512][ T8343] macvtap0: entered allmulticast mode [ 158.221155][ T8343] veth0_macvtap: entered allmulticast mode [ 158.231953][ T8343] bond1: (slave vlan0): making interface the new active one [ 158.243056][ T8343] vlan0: entered promiscuous mode [ 158.248557][ T8343] macvtap0: entered promiscuous mode [ 158.255881][ T8343] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 158.288854][ T8361] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 158.306912][ T8359] IPVS: stopping backup sync thread 8361 ... [ 158.341054][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.107928][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 159.127997][ T8390] IPVS: stopping backup sync thread 8391 ... [ 159.134647][ T8391] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 159.540355][ T8409] netlink: 'syz.3.860': attribute type 4 has an invalid length. [ 159.663089][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 159.720321][ T8417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.728276][ T8417] IPv6: NLM_F_CREATE should be set when creating new route [ 159.734578][ T8410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.737948][ T8413] netlink: 'syz.4.861': attribute type 5 has an invalid length. [ 159.969717][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 160.056496][ T8410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.135335][ T8433] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 160.162143][ T8432] IPVS: stopping backup sync thread 8433 ... [ 160.240669][ T8410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.405440][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 160.433168][ T8410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.481808][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.871'. [ 160.494122][ T8442] nbd: must specify a size in bytes for the device [ 160.691670][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 160.887634][ T8410] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.946786][ T8410] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.993131][ T8410] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.027226][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 161.029272][ T8410] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.217239][ T8465] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 161.220319][ T8464] IPVS: stopping backup sync thread 8465 ... [ 161.260622][ T8467] netlink: 56 bytes leftover after parsing attributes in process `syz.4.879'. [ 161.444576][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 161.518177][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 161.665376][ T8484] netlink: 'syz.1.889': attribute type 27 has an invalid length. [ 161.896523][ T8488] netlink: 'syz.4.890': attribute type 12 has an invalid length. [ 161.913285][ T8488] netlink: 'syz.4.890': attribute type 29 has an invalid length. [ 161.953931][ T8488] netlink: 'syz.4.890': attribute type 2 has an invalid length. [ 162.010102][ T8493] netlink: 'syz.4.890': attribute type 12 has an invalid length. [ 162.040035][ T8493] netlink: 'syz.4.890': attribute type 29 has an invalid length. [ 162.067961][ T8493] netlink: 'syz.4.890': attribute type 2 has an invalid length. [ 162.118415][ T8500] IPVS: stopping backup sync thread 8507 ... [ 162.119860][ T8507] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 162.498667][ T8522] syzkaller0: entered promiscuous mode [ 162.533786][ T8522] syzkaller0: entered allmulticast mode [ 163.430830][ T8545] vlan0: entered promiscuous mode [ 163.886268][ T8560] syzkaller0: entered promiscuous mode [ 163.899188][ T8561] netlink: 'syz.0.917': attribute type 27 has an invalid length. [ 163.909143][ T8560] syzkaller0: entered allmulticast mode [ 164.146014][ T8568] __nla_validate_parse: 9 callbacks suppressed [ 164.146032][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 164.261578][ T8570] syzkaller0: entered promiscuous mode [ 164.267755][ T8570] syzkaller0: entered allmulticast mode [ 164.650589][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 164.672554][ T8583] nbd: must specify a size in bytes for the device [ 164.793917][ T8587] netlink: 'syz.4.932': attribute type 27 has an invalid length. [ 165.024168][ T8593] netlink: 76 bytes leftover after parsing attributes in process `syz.3.933'. [ 165.217030][ T8602] binder: 8601:8602 ioctl c0306201 2000000001c0 returned -14 [ 165.364546][ T8610] netlink: 'syz.0.938': attribute type 4 has an invalid length. [ 165.621575][ T8617] bond_slave_0: entered promiscuous mode [ 165.627603][ T8617] bond_slave_1: entered promiscuous mode [ 165.663601][ T8617] vlan2: entered promiscuous mode [ 165.676697][ T8617] bond0: entered promiscuous mode [ 165.879996][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 166.721233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 166.901240][ T8654] validate_nla: 1 callbacks suppressed [ 166.901269][ T8654] netlink: 'syz.2.958': attribute type 27 has an invalid length. [ 167.282747][ T8671] netlink: 4512 bytes leftover after parsing attributes in process `syz.0.966'. [ 167.467873][ T8677] bridge0: entered promiscuous mode [ 167.644227][ T8682] netlink: 'syz.1.971': attribute type 27 has an invalid length. [ 167.926801][ T8692] syzkaller0: entered promiscuous mode [ 167.936220][ T8692] syzkaller0: entered allmulticast mode [ 168.475520][ T8717] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 168.529179][ T8717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.671749][ T8722] bond1: (slave veth5): Enslaving as an active interface with a down link [ 168.739124][ T8717] vlan0: entered allmulticast mode [ 168.753941][ T8717] macvtap0: entered allmulticast mode [ 168.772321][ T8717] veth0_macvtap: entered allmulticast mode [ 168.795912][ T8717] bond1: (slave vlan0): making interface the new active one [ 168.822431][ T8717] vlan0: entered promiscuous mode [ 168.850147][ T8717] macvtap0: entered promiscuous mode [ 168.860030][ T8717] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 168.884712][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.368557][ T8731] vlan2: entered promiscuous mode [ 169.979891][ T8752] netlink: 4504 bytes leftover after parsing attributes in process `syz.1.999'. [ 170.052991][ T4054] vlan0: left promiscuous mode [ 170.080139][ T4054] macvtap0: left promiscuous mode [ 170.579663][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 170.618761][ T8766] bridge0: entered promiscuous mode [ 170.803334][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 170.891407][ T8776] nbd: must specify a size in bytes for the device [ 171.096336][ T8782] netlink: 'syz.0.1009': attribute type 4 has an invalid length. [ 171.136225][ T8785] netlink: 4504 bytes leftover after parsing attributes in process `syz.4.1011'. [ 171.517275][ T8801] tipc: Enabled bearer , priority 0 [ 171.535604][ T8801] tipc: Resetting bearer [ 171.617044][ T8799] tipc: Disabling bearer [ 171.630063][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 171.669491][ T8808] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1018'. [ 171.794386][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 171.845805][ T8812] bridge0: entered promiscuous mode [ 171.906540][ T8817] netlink: 4504 bytes leftover after parsing attributes in process `syz.2.1023'. [ 171.915252][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 172.173008][ T8827] vlan2: entered promiscuous mode [ 172.272894][ T8831] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1025'. [ 172.581592][ T8850] tipc: Enabled bearer , priority 0 [ 172.605180][ T8850] tipc: Resetting bearer [ 172.663330][ T8849] tipc: Disabling bearer [ 172.849872][ T8859] bridge0: entered promiscuous mode [ 173.454715][ T8884] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 173.626010][ T8884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.748043][ T8894] bond2: (slave veth7): Enslaving as an active interface with a down link [ 173.825934][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.837327][ T8898] syzkaller0: entered promiscuous mode [ 173.880892][ T8898] syzkaller0: entered allmulticast mode [ 173.954209][ T8906] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 174.478924][ T8928] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.507441][ T8928] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.594392][ T8928] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.686564][ T8928] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.133909][ T8928] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.173959][ T8928] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.281763][ T8958] netlink: 'syz.4.1066': attribute type 4 has an invalid length. [ 175.365694][ T8928] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.410510][ T8928] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.442632][ T8964] __nla_validate_parse: 10 callbacks suppressed [ 175.442650][ T8964] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1069'. [ 175.494964][ T8963] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1068'. [ 175.596454][ T8928] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.608928][ T8928] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.632540][ T8928] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.641791][ T8928] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.665938][ T8928] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.675101][ T8928] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.703734][ T8928] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.712975][ T8928] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.982405][ T8983] syzkaller0: entered promiscuous mode [ 175.988863][ T8983] syzkaller0: entered allmulticast mode [ 175.989242][ T8980] netlink: 'syz.2.1075': attribute type 27 has an invalid length. [ 176.408060][ T9004] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1085'. [ 176.772875][ T9019] netlink: 'syz.2.1092': attribute type 27 has an invalid length. [ 177.867164][ T9039] vlan1: entered promiscuous mode [ 178.646803][ T9072] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1114'. [ 179.003871][ T9090] netlink: 'syz.2.1121': attribute type 4 has an invalid length. [ 179.234898][ T9098] syzkaller0: entered promiscuous mode [ 179.268249][ T9098] syzkaller0: entered allmulticast mode [ 179.285627][ T9100] netlink: 'syz.3.1128': attribute type 27 has an invalid length. [ 179.525712][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 179.538230][ T9112] IPVS: stopping backup sync thread 9116 ... [ 179.550631][ T9116] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 179.998319][ T458] vlan0: left promiscuous mode [ 180.065205][ T458] macvtap0: left promiscuous mode [ 180.812398][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'. [ 181.054356][ T9157] netlink: 'syz.3.1151': attribute type 4 has an invalid length. [ 181.661584][ T9176] netlink: 'syz.3.1159': attribute type 1 has an invalid length. [ 181.783648][ T9176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.830747][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'. [ 181.917312][ T9178] bond2: (slave veth5): Enslaving as an active interface with a down link [ 181.948058][ T9181] vlan2: entered allmulticast mode [ 181.961527][ T9181] bond2: (slave vlan2): Opening slave failed [ 182.046450][ T9175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.536510][ T9201] netlink: 'syz.2.1164': attribute type 4 has an invalid length. [ 182.567859][ T9203] IPVS: stopping backup sync thread 9204 ... [ 182.576881][ T9204] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 183.273086][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 183.460731][ T9236] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 183.543327][ T9236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.706111][ T9239] bond3: (slave veth9): Enslaving as an active interface with a down link [ 183.744462][ T9246] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 183.755022][ T9245] IPVS: stopping backup sync thread 9246 ... [ 183.760443][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.345722][ T9264] netlink: 4340 bytes leftover after parsing attributes in process `syz.3.1185'. [ 184.544254][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 184.849984][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.865271][ T9284] tipc: Enabling of bearer rejected, failed to enable media [ 184.891232][ T9284] syzkaller0: entered promiscuous mode [ 184.897762][ T9284] syzkaller0: entered allmulticast mode [ 185.192295][ T9289] netlink: 'syz.4.1192': attribute type 27 has an invalid length. [ 185.473287][ T9305] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.1198'. [ 185.749410][ T9312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1201'. [ 186.448008][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 186.481511][ T9325] syzkaller0: entered promiscuous mode [ 186.487988][ T9325] syzkaller0: entered allmulticast mode [ 186.657923][ T9331] tipc: Enabled bearer , priority 0 [ 186.671393][ T9329] netlink: 'syz.2.1208': attribute type 27 has an invalid length. [ 186.694545][ T9331] tipc: Resetting bearer [ 186.725540][ T9333] netlink: 4120 bytes leftover after parsing attributes in process `syz.4.1210'. [ 186.736315][ T9330] tipc: Disabling bearer [ 187.284596][ T9358] netlink: 'syz.0.1222': attribute type 27 has an invalid length. [ 187.683305][ T9375] netlink: 'syz.4.1227': attribute type 4 has an invalid length. [ 187.893184][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 188.392986][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 188.533003][ T9398] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 188.533365][ T9396] IPVS: stopping backup sync thread 9398 ... [ 188.669193][ T9406] netlink: 'syz.1.1238': attribute type 4 has an invalid length. [ 189.146874][ T9418] tipc: Enabling of bearer rejected, failed to enable media [ 189.168916][ T9418] syzkaller0: entered promiscuous mode [ 189.182310][ T9418] syzkaller0: entered allmulticast mode [ 189.540884][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1248'. [ 189.815303][ T9439] netlink: 4112 bytes leftover after parsing attributes in process `syz.4.1252'. [ 190.657221][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1262'. [ 190.678788][ T9469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1263'. [ 190.924996][ T9478] netlink: 4112 bytes leftover after parsing attributes in process `syz.2.1265'. [ 190.931154][ T9482] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1268'. [ 191.184518][ T9487] nbd: must specify a size in bytes for the device [ 191.511641][ T9498] __nla_validate_parse: 1 callbacks suppressed [ 191.511659][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1276'. [ 191.779906][ T9507] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1279'. [ 192.044068][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'. [ 192.090096][ T9518] nbd: must specify a size in bytes for the device [ 192.571222][ T9537] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.707597][ T9537] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.867175][ T9537] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.977202][ T9537] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.112807][ T9537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.177438][ T9537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.226316][ T9537] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.327716][ T9537] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.030299][ T9582] IPVS: stopping backup sync thread 9583 ... [ 194.039227][ T9583] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 194.343445][ T9595] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1316'. [ 194.463049][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.473570][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.607833][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 194.835382][ T9616] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 194.854053][ T9612] IPVS: stopping backup sync thread 9616 ... [ 194.909193][ T9613] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.180259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 195.360800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 195.813610][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 195.851892][ T9643] netlink: 'syz.4.1335': attribute type 4 has an invalid length. [ 196.028407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 196.037889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 196.148100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 196.241351][ T9652] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1339'. [ 196.681750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 197.138327][ T9657] netlink: 'syz.3.1341': attribute type 27 has an invalid length. [ 197.289978][ T30] audit: type=1326 audit(1754412149.828:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.434164][ T30] audit: type=1326 audit(1754412149.878:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.651650][ T30] audit: type=1326 audit(1754412150.198:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.698323][ T30] audit: type=1326 audit(1754412150.198:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.726400][ T9670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.760112][ T30] audit: type=1326 audit(1754412150.198:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.784165][ T30] audit: type=1326 audit(1754412150.198:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.810100][ T30] audit: type=1326 audit(1754412150.198:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.836704][ T30] audit: type=1326 audit(1754412150.198:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.864810][ T30] audit: type=1326 audit(1754412150.198:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 197.893316][ T30] audit: type=1326 audit(1754412150.198:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6338eb69 code=0x7fc00000 [ 198.091552][ T9670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.246449][ T9670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.402506][ T9670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.435826][ T9686] netlink: 'syz.0.1354': attribute type 27 has an invalid length. [ 198.791944][ T9670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.877554][ T9670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.889462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 198.967601][ T9670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.063548][ T9670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.282102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 199.512420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.324993][ T9742] netlink: 'syz.4.1374': attribute type 27 has an invalid length. [ 201.015127][ T9759] team_slave_0: entered promiscuous mode [ 201.021599][ T9759] team_slave_1: entered promiscuous mode [ 201.072478][ T9759] vlan2: entered promiscuous mode [ 201.100194][ T9759] team0: entered promiscuous mode [ 201.149191][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 201.183599][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 202.221043][ T9784] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 202.299296][ T9784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.345591][ T9791] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1393'. [ 202.369315][ T9789] bond3: (slave veth7): Enslaving as an active interface with a down link [ 202.394977][ T9784] vlan2: entered allmulticast mode [ 202.417380][ T9783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.533387][ T9796] vlan3: entered promiscuous mode [ 203.078381][ T9821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1406'. [ 203.845866][ T9861] netlink: 'syz.1.1417': attribute type 4 has an invalid length. [ 204.042181][ T9867] netlink: 'syz.2.1422': attribute type 1 has an invalid length. [ 204.184591][ T9867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.339039][ T9871] bond1: (slave veth5): Enslaving as an active interface with a down link [ 204.393679][ T9875] vlan3: entered allmulticast mode [ 204.403267][ T9875] macvtap0: entered allmulticast mode [ 204.415371][ T9875] veth0_macvtap: entered allmulticast mode [ 204.434614][ T9875] bond1: (slave vlan3): making interface the new active one [ 204.455066][ T9875] vlan3: entered promiscuous mode [ 204.474975][ T9875] macvtap0: entered promiscuous mode [ 204.499101][ T9875] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 204.556123][ T9866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.842951][ T9895] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.256491][ T9899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1431'. [ 205.822666][ T9906] netlink: 'syz.3.1433': attribute type 4 has an invalid length. [ 205.938433][ T9911] netlink: 1048 bytes leftover after parsing attributes in process `syz.1.1436'. [ 206.775348][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 206.775393][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 206.784733][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 206.958881][ T9948] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 206.971952][ T9947] IPVS: stopping backup sync thread 9948 ... [ 208.214402][ T9970] team_slave_0: entered promiscuous mode [ 208.220584][ T9970] team_slave_1: entered promiscuous mode [ 208.307484][ T9970] vlan1: entered promiscuous mode [ 208.360231][ T9970] team0: entered promiscuous mode [ 208.552047][ T9983] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 208.600272][ T9982] IPVS: stopping backup sync thread 9983 ... [ 208.648860][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 209.706657][T10007] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1473'. [ 210.732750][T10010] syzkaller0: entered promiscuous mode [ 210.772915][T10010] syzkaller0: entered allmulticast mode [ 211.144571][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1478'. [ 211.173044][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1478'. [ 211.234154][T10026] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 211.234179][T10023] IPVS: stopping backup sync thread 10026 ... [ 211.257146][T10025] capability: warning: `syz.4.1480' uses deprecated v2 capabilities in a way that may be insecure [ 211.483444][ T5896] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 211.497385][ T5896] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 211.508738][ T5896] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 211.556455][ T5896] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 211.707138][T10040] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1486'. [ 211.739373][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 212.554950][T10057] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 214.239689][T10081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.255194][T10084] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1501'. [ 214.278436][T10081] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1498'. [ 214.457821][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 214.709870][ T1099] Bluetooth: hci5: Frame reassembly failed (-84) [ 214.729247][ T1099] Bluetooth: hci5: Frame reassembly failed (-84) [ 214.756013][T10099] Bluetooth: hci5: Frame reassembly failed (-84) [ 215.042802][T10104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1508'. [ 215.557870][T10114] netlink: 792 bytes leftover after parsing attributes in process `syz.2.1512'. [ 216.676965][T10125] block device autoloading is deprecated and will be removed. [ 216.694135][T10125] syz.1.1515: attempt to access beyond end of device [ 216.694135][T10125] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 216.744797][T10128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1516'. [ 216.754878][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 216.795282][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 216.805777][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.593476][T10146] vlan4: entered promiscuous mode [ 218.005683][T10150] syzkaller0: entered promiscuous mode [ 218.033694][T10150] syzkaller0: entered allmulticast mode [ 218.304379][T10154] netlink: 792 bytes leftover after parsing attributes in process `syz.0.1528'. [ 218.587609][T10161] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 218.675371][T10168] IPVS: stopping backup sync thread 10169 ... [ 218.688131][T10169] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 218.701426][ T458] vlan3: left promiscuous mode [ 218.708807][ T458] macvtap0: left promiscuous mode [ 221.152366][T10202] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 221.164289][T10201] IPVS: stopping backup sync thread 10202 ... [ 222.880814][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 223.806603][T10236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1555'. [ 226.832159][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.724252][T10268] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1568'. [ 227.918384][ T24] usb 4-1: device descriptor read/all, error -71 [ 227.977301][T10276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1569'. [ 228.013507][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.852737][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 229.404694][T10301] tipc: Enabled bearer , priority 0 [ 229.428802][T10301] syzkaller0: entered promiscuous mode [ 229.443544][T10301] syzkaller0: entered allmulticast mode [ 229.507347][T10301] tipc: Resetting bearer [ 229.518815][T10300] tipc: Resetting bearer [ 229.531170][T10308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1582'. [ 229.584126][T10300] tipc: Disabling bearer [ 230.953900][T10334] syz.2.1593: attempt to access beyond end of device [ 230.953900][T10334] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 231.507476][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1600'. [ 231.693189][T10357] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 233.377977][T10373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1607'. [ 233.459344][T10375] syz.2.1608: attempt to access beyond end of device [ 233.459344][T10375] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 234.901102][T10396] IPVS: stopping backup sync thread 10402 ... [ 234.920334][T10402] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 235.261469][T10415] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1618'. [ 235.875555][T10424] syz.2.1622: attempt to access beyond end of device [ 235.875555][T10424] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 237.774528][T10444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1632'. [ 238.099713][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1635'. [ 238.133187][T10458] netlink: 800 bytes leftover after parsing attributes in process `syz.4.1636'. [ 238.930374][T10466] netlink: 'syz.1.1639': attribute type 4 has an invalid length. [ 239.311523][T10483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'. [ 241.200880][T10509] syzkaller0: entered promiscuous mode [ 241.225065][T10509] syzkaller0: entered allmulticast mode [ 243.180220][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.790309][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 243.812167][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.829136][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.860439][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.876315][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 243.881429][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.926733][ T24] usb 2-1: config 0 descriptor?? [ 243.942758][ T24] hub 2-1:0.0: USB hub found [ 243.980041][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 244.142354][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.179569][T10571] block device autoloading is deprecated and will be removed. [ 244.189013][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.201423][ T24] hub 2-1:0.0: 1 port detected [ 244.208073][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.260375][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.272678][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.284376][ T43] usb 1-1: config 0 descriptor?? [ 244.727571][ T43] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 244.806904][ T5168] hub 2-1:0.0: activate --> -90 [ 245.016125][ T5168] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 245.321802][ T43] usb 2-1: USB disconnect, device number 2 [ 245.386191][ C1] plantronics 0003:047F:FFFF.0002: hid_field_extract() called with n (132) > 32! (syz-executor) [ 245.588867][ T5895] usb 1-1: USB disconnect, device number 2 [ 245.646895][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1688'. [ 246.023806][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.032425][T10612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.102307][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.111006][T10612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.298681][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 247.024247][T10619] syzkaller0: entered promiscuous mode [ 247.030141][T10619] syzkaller0: entered allmulticast mode [ 248.070394][T10638] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1701'. [ 248.771341][T10651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1705'. [ 248.882402][T10652] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 248.906874][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1704'. [ 251.004462][T10682] loop8: detected capacity change from 0 to 8 [ 251.075601][T10682] Dev loop8: unable to read RDB block 8 [ 251.090436][T10682] loop8: unable to read partition table [ 251.111036][T10682] loop8: partition table beyond EOD, truncated [ 251.126437][T10682] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 251.208817][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1719'. [ 251.219088][T10688] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1719'. [ 253.556637][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1733'. [ 255.545127][T10761] vlan1: entered promiscuous mode [ 255.895246][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.904731][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.507995][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.294577][T10779] tipc: Enabled bearer , priority 0 [ 259.347721][T10779] syzkaller0: entered promiscuous mode [ 259.408352][T10779] syzkaller0: entered allmulticast mode [ 259.447439][T10787] tipc: Resetting bearer [ 259.462822][T10778] tipc: Resetting bearer [ 259.515282][T10778] tipc: Disabling bearer [ 259.814860][T10798] netlink: 'syz.0.1755': attribute type 4 has an invalid length. [ 261.108554][T10808] vlan1: entered promiscuous mode [ 261.254759][T10814] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1763'. [ 262.180684][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 262.218591][T10848] macvtap1: entered promiscuous mode [ 262.227115][T10848] macvtap1: entered allmulticast mode [ 262.235615][T10848] bond0: entered allmulticast mode [ 262.244157][T10848] bond_slave_0: entered allmulticast mode [ 262.253128][T10848] bond_slave_1: entered allmulticast mode [ 262.253807][T10852] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1776'. [ 262.261368][T10848] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 262.307893][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1777'. [ 262.564827][T10865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.617376][T10865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.645920][T10865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.006743][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 264.026879][T10881] macvtap1: entered promiscuous mode [ 264.038951][T10881] macvtap1: entered allmulticast mode [ 264.060199][T10886] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1791'. [ 264.065150][T10881] bond0: entered allmulticast mode [ 264.085648][T10881] bond_slave_0: entered allmulticast mode [ 264.093222][T10881] bond_slave_1: entered allmulticast mode [ 264.144457][T10881] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 264.271400][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 264.607076][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 264.626980][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 264.650237][T10917] macvtap0: entered promiscuous mode [ 264.659648][T10917] macvtap0: entered allmulticast mode [ 264.666244][T10917] bond0: entered allmulticast mode [ 264.673697][T10917] bond_slave_0: entered allmulticast mode [ 264.689386][T10917] bond_slave_1: entered allmulticast mode [ 264.818474][T10921] Bluetooth: hci5: Frame reassembly failed (-84) [ 264.883646][T10675] Bluetooth: hci5: Frame reassembly failed (-84) [ 266.031267][T10917] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 266.169570][T10930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'. [ 266.850755][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.855430][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 266.928964][T10956] macvtap1: entered promiscuous mode [ 266.964889][T10956] macvtap1: entered allmulticast mode [ 266.987867][T10956] bond0: entered allmulticast mode [ 266.993377][T10956] bond_slave_0: entered allmulticast mode [ 266.999551][T10956] bond_slave_1: entered allmulticast mode [ 267.009372][T10956] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 268.187651][T10970] syzkaller0: entered promiscuous mode [ 268.193507][T10970] syzkaller0: entered allmulticast mode [ 268.273177][T10973] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1823'. [ 268.972679][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 269.042044][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1829'. [ 269.048344][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 269.077824][T10987] macvtap2: entered promiscuous mode [ 269.086769][T10987] macvtap2: entered allmulticast mode [ 269.099185][T10987] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 269.758179][T11000] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1834'. [ 269.924785][T11009] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1837'. [ 270.070667][T11015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1841'. [ 270.269656][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 270.436237][T11017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.494025][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1845'. [ 271.110349][ T5168] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 271.336237][ T5168] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.780305][ T5168] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 271.821803][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.858820][ T5168] usb 5-1: config 0 descriptor?? [ 271.869278][ T5168] pwc: Askey VC010 type 2 USB webcam detected. [ 272.285080][ T5168] pwc: recv_control_msg error -32 req 02 val 2b00 [ 272.309364][ T5168] pwc: recv_control_msg error -32 req 02 val 2700 [ 272.318353][ T5168] pwc: recv_control_msg error -32 req 02 val 2c00 [ 272.331323][ T5168] pwc: recv_control_msg error -32 req 04 val 1000 [ 272.343493][ T5168] pwc: recv_control_msg error -32 req 04 val 1300 [ 272.420798][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1860'. [ 272.562229][ T5168] pwc: recv_control_msg error -32 req 02 val 2000 [ 272.572611][ T5168] pwc: recv_control_msg error -32 req 02 val 2100 [ 272.783297][ T5168] pwc: recv_control_msg error -71 req 02 val 2500 [ 272.796606][ T5168] pwc: recv_control_msg error -71 req 02 val 2400 [ 272.854951][ T5168] pwc: recv_control_msg error -71 req 02 val 2600 [ 272.868226][ T5168] pwc: recv_control_msg error -71 req 02 val 2900 [ 272.889145][ T5168] pwc: recv_control_msg error -71 req 02 val 2800 [ 273.489293][ T5168] pwc: recv_control_msg error -71 req 04 val 1100 [ 273.497153][ T5168] pwc: recv_control_msg error -71 req 04 val 1200 [ 273.508332][ T5168] pwc: Registered as video103. [ 273.516515][ T5168] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 273.533898][ T5168] usb 5-1: USB disconnect, device number 2 [ 273.778116][T11087] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 273.778325][T11085] IPVS: stopping backup sync thread 11087 ... [ 273.797724][T11086] ======================================================= [ 273.797724][T11086] WARNING: The mand mount option has been deprecated and [ 273.797724][T11086] and is ignored by this kernel. Remove the mand [ 273.797724][T11086] option from the mount to silence this warning. [ 273.797724][T11086] ======================================================= [ 275.144074][T11096] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1873'. [ 275.401812][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.140506][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.210035][T11109] netlink: 'syz.2.1877': attribute type 21 has an invalid length. [ 276.625437][T11109] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 276.633637][T11109] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1877'. [ 276.671656][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.723948][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.846553][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.925839][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.176394][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.268514][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.345737][T11123] IPVS: stopping backup sync thread 11127 ... [ 277.791805][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.827577][T11132] tipc: Enabled bearer , priority 0 [ 277.836633][T11132] tipc: Resetting bearer [ 277.852796][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.862359][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.872602][T11124] tipc: Disabling bearer [ 277.880961][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.894443][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.923687][T11133] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1886'. [ 278.038383][ T36] bridge_slave_1: left allmulticast mode [ 278.067760][ T36] bridge_slave_1: left promiscuous mode [ 278.082883][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.098162][ T36] bridge_slave_0: left allmulticast mode [ 278.126582][ T36] bridge_slave_0: left promiscuous mode [ 278.140993][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.995105][ T5853] Bluetooth: hci2: command tx timeout [ 280.749599][ T36] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 280.770923][ T36] vxlan0 (unregistering): left promiscuous mode [ 281.153393][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.164212][ T36] bond_slave_0: left promiscuous mode [ 281.190920][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.215311][ T36] bond_slave_1: left promiscuous mode [ 281.234059][ T36] bond0 (unregistering): Released all slaves [ 281.629096][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 281.694063][ T36] bond1 (unregistering): Released all slaves [ 281.981425][ T36] bond2 (unregistering): (slave veth5): Releasing active interface [ 281.992090][ T36] bond2 (unregistering): Released all slaves [ 282.060301][ T5853] Bluetooth: hci2: command tx timeout [ 282.155869][ T36] bond3 (unregistering): (slave veth7): Releasing active interface [ 282.166863][ T36] bond3 (unregistering): Released all slaves [ 282.521654][ T36] tipc: Left network mode [ 283.229059][ T36] hsr_slave_0: left promiscuous mode [ 283.276614][ T36] hsr_slave_1: left promiscuous mode [ 283.300471][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.333993][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.359128][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.380676][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.574964][ T36] veth1_macvtap: left promiscuous mode [ 283.583857][ T36] veth1_vlan: left promiscuous mode [ 283.596508][ T36] veth0_vlan: left promiscuous mode [ 284.197793][ T5853] Bluetooth: hci2: command tx timeout [ 284.912719][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 285.901151][ T36] team_slave_1 (unregistering): left promiscuous mode [ 285.916981][ T36] team0 (unregistering): Port device team_slave_1 removed [ 285.969448][ T36] team_slave_0 (unregistering): left promiscuous mode [ 285.983495][ T36] team0 (unregistering): Port device team_slave_0 removed [ 286.212447][ T5853] Bluetooth: hci2: command tx timeout [ 286.574198][T11128] chnl_net:caif_netlink_parms(): no params data found [ 286.992763][T11128] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.012582][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.049161][T11128] bridge_slave_0: entered allmulticast mode [ 287.057527][T11128] bridge_slave_0: entered promiscuous mode [ 287.071199][T11128] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.098185][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.107514][T11244] netlink: 'syz.2.1914': attribute type 27 has an invalid length. [ 287.121233][T11128] bridge_slave_1: entered allmulticast mode [ 287.163483][T11128] bridge_slave_1: entered promiscuous mode [ 288.011503][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 288.125751][T11128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.210069][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 288.222838][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.252723][T11257] syz.1.1917: attempt to access beyond end of device [ 288.252723][T11257] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 289.642197][T11128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.710682][ T5920] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 289.730969][ T5920] usb 3-1: config 7 has no interface number 0 [ 289.737493][ T5920] usb 3-1: config 7 interface 59 has no altsetting 0 [ 289.755758][ T5920] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 289.770179][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.783032][ T5920] usb 3-1: Product: syz [ 289.787697][ T5920] usb 3-1: Manufacturer: syz [ 289.792980][ T5920] usb 3-1: SerialNumber: syz [ 289.985933][T11128] team0: Port device team_slave_0 added [ 290.048972][T11128] team0: Port device team_slave_1 added [ 290.179112][ T5920] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 290.253734][T11128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.253939][ T5920] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 290.273580][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.320756][T11128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.379194][T11128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.380500][ T5920] usb 3-1: USB disconnect, device number 2 [ 290.420087][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.461061][ T5920] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 290.481094][T11128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.510431][ T5920] kobil_sct 3-1:7.59: device disconnected [ 290.557428][T11266] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 290.559668][T11265] IPVS: stopping backup sync thread 11266 ... [ 290.576534][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 290.596311][T11128] hsr_slave_0: entered promiscuous mode [ 290.603878][T11128] hsr_slave_1: entered promiscuous mode [ 290.740051][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 290.757055][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 290.778440][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 291.426313][ T9] usb 2-1: Product: syz [ 291.436478][ T9] usb 2-1: Manufacturer: syz [ 291.443408][ T9] usb 2-1: SerialNumber: syz [ 291.480039][ T9] usb 2-1: config 0 descriptor?? [ 291.686211][T11276] tipc: Enabled bearer , priority 0 [ 291.696128][T11275] syzkaller0: entered promiscuous mode [ 291.705004][T11275] syzkaller0: entered allmulticast mode [ 291.780826][ T5937] usb 2-1: USB disconnect, device number 3 [ 291.937316][T11272] tipc: Resetting bearer [ 292.088179][T11272] tipc: Disabling bearer [ 292.456306][T11128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.548340][T11128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.586960][T11128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.617120][T11286] bridge_slave_0: left allmulticast mode [ 292.625936][T11286] bridge_slave_0: left promiscuous mode [ 292.636753][T11286] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.653480][T11286] bridge_slave_1: left allmulticast mode [ 292.659270][T11286] bridge_slave_1: left promiscuous mode [ 292.666102][T11286] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.679461][T11286] bond0: (slave bond_slave_0): Releasing backup interface [ 292.693130][T11286] bond_slave_0: left allmulticast mode [ 292.705289][T11286] bond_slave_0: left promiscuous mode [ 292.724640][T11286] bond0: (slave bond_slave_1): Releasing backup interface [ 292.735754][T11286] bond_slave_1: left allmulticast mode [ 292.742643][T11286] bond_slave_1: left promiscuous mode [ 292.755041][T11286] team_slave_0: left promiscuous mode [ 292.775128][T11286] team0: Port device team_slave_0 removed [ 292.783818][T11286] team_slave_1: left promiscuous mode [ 292.794239][T11286] team0: Port device team_slave_1 removed [ 292.802116][T11286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.813247][T11286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.821864][T11286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.843917][T11286] bond1: (slave veth5): Releasing active interface [ 292.852612][T11286] bond1: (slave veth5): the permanent HWaddr of slave - 76:b3:a5:49:65:3d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 292.886976][T11286] vlan0: entered promiscuous mode [ 292.893322][T11286] macvtap0: entered promiscuous mode [ 292.907435][T11286] bond1: (slave vlan0): Releasing active interface [ 292.916442][T11286] vlan0: left promiscuous mode [ 292.922116][T11286] macvtap0: left promiscuous mode [ 292.935210][T11128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.097085][T11306] blktrace: Concurrent blktraces are not allowed on sg0 [ 293.662237][T11128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.746725][T11311] syzkaller0: entered promiscuous mode [ 293.766870][T11311] syzkaller0: entered allmulticast mode [ 293.906406][T11128] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.681380][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.688728][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.879632][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.888230][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.910536][T11327] tipc: Enabled bearer , priority 0 [ 294.931499][T11322] syzkaller0: entered promiscuous mode [ 294.937508][T11322] syzkaller0: entered allmulticast mode [ 294.993882][T11321] tipc: Resetting bearer [ 295.012742][T11321] tipc: Disabling bearer [ 295.288284][T11128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.542004][T11128] veth0_vlan: entered promiscuous mode [ 295.556295][T11128] veth1_vlan: entered promiscuous mode [ 295.586714][T11128] veth0_macvtap: entered promiscuous mode [ 295.596893][T11128] veth1_macvtap: entered promiscuous mode [ 295.623626][T11128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.643143][T11128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.662670][T11128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.672742][T11128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.684784][T11128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.694090][T11128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.806948][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.834108][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.912322][T11152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.922451][T11152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.974076][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1944'. [ 296.937999][T11370] blktrace: Concurrent blktraces are not allowed on sg0 [ 297.776001][T11375] syzkaller0: entered promiscuous mode [ 297.784617][T11375] syzkaller0: entered allmulticast mode [ 297.829186][T11377] tipc: Started in network mode [ 297.845510][T11377] tipc: Node identity 26924320e3d5, cluster identity 4711 [ 297.874969][T11377] tipc: Enabled bearer , priority 0 [ 298.031597][T11379] syzkaller0: entered promiscuous mode [ 298.040702][T11379] syzkaller0: entered allmulticast mode [ 298.940884][ T5895] tipc: Node number set to 3309781792 [ 299.032657][T11376] tipc: Resetting bearer [ 299.170924][T11376] tipc: Disabling bearer [ 301.714856][T11437] syz.2.1967: attempt to access beyond end of device [ 301.714856][T11437] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 303.411351][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'. [ 305.248027][T11466] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 305.338557][T11466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.592764][T11472] bond2: (slave veth7): Enslaving as an active interface with a down link [ 305.612684][T11465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.844452][T11501] tipc: Enabled bearer , priority 0 [ 306.936676][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1986'. [ 306.961037][T11492] tipc: Disabling bearer [ 307.780061][T11507] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 307.791652][T11507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1990'. [ 307.802466][T11507] dummy0: entered promiscuous mode [ 307.813294][T11507] bridge0: port 3(dummy0) entered blocking state [ 307.826492][T11507] bridge0: port 3(dummy0) entered disabled state [ 307.836473][T11507] dummy0: entered allmulticast mode [ 307.880981][T11507] bridge0: port 3(dummy0) entered blocking state [ 307.887735][T11507] bridge0: port 3(dummy0) entered forwarding state [ 308.404422][T11518] tipc: Enabling of bearer rejected, failed to enable media [ 308.452166][T11513] syzkaller0: entered promiscuous mode [ 308.458179][T11513] syzkaller0: entered allmulticast mode [ 309.715175][T11536] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 309.823217][T11536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.877779][T11538] bond1: (slave veth5): Enslaving as an active interface with a down link [ 309.917752][T11535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.870076][T11553] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2004'. [ 310.879823][T11553] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2004'. [ 311.193117][T11557] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2004'. [ 311.202749][T11557] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2004'. [ 312.018734][T11567] tipc: Enabling of bearer rejected, failed to enable media [ 312.163523][T11572] syzkaller0: entered promiscuous mode [ 313.671843][T11572] syzkaller0: entered allmulticast mode [ 313.937525][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2014'. [ 314.609817][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2020'. [ 315.096651][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2027'. [ 315.625031][T11634] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 315.677697][T11635] IPVS: stopping backup sync thread 11634 ... [ 315.855561][T11631] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2029'. [ 316.111331][T11638] ------------[ cut here ]------------ [ 316.117157][T11638] WARNING: CPU: 0 PID: 11638 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 316.127472][T11638] Modules linked in: [ 316.131864][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.4.2031 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 316.142816][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.153431][T11638] RIP: 0010:folio_memcg+0x1a8/0x310 [ 316.158805][T11638] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 316.179185][T11638] RSP: 0018:ffffc90003a17250 EFLAGS: 00010287 [ 316.186712][T11638] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 316.192112][ T5937] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 316.195554][T11638] RDX: ffffc9000cb92000 RSI: 0000000000006d20 RDI: 0000000000006d21 [ 316.211426][T11638] RBP: 0000000000000000 R08: ffffea0000c6aa87 R09: 1ffffd400018d550 [ 316.219534][T11638] R10: dffffc0000000000 R11: fffff9400018d551 R12: ffffea0000c6aab0 [ 316.227723][T11638] R13: dffffc0000000000 R14: ffff88802f9cac00 R15: 0000000000000002 [ 316.235828][T11638] FS: 00007f32d0bf66c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 316.244999][T11638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.251895][T11638] CR2: 0000000000000000 CR3: 0000000034410000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.260007][T11638] Call Trace: [ 316.263562][T11638] [ 316.266612][T11638] workingset_activation+0x5f/0x4a0 [ 316.271984][T11638] ? folio_mark_accessed+0x361/0x4a0 [ 316.277480][T11638] folio_mark_accessed+0x3b5/0x4a0 [ 316.282925][T11638] kvm_release_page_dirty+0xa2/0xf0 [ 316.288894][T11638] kvm_tdp_page_fault+0x2dd/0x370 [ 316.294752][T11638] kvm_mmu_do_page_fault+0x2c5/0x640 [ 316.300519][T11638] ? vmx_vcpu_run+0xd8b/0x25d0 [ 316.305696][T11638] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 316.311950][T11638] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 316.317637][T11638] kvm_mmu_page_fault+0x22f/0xb70 [ 316.323189][T11638] ? __pfx_handle_ept_violation+0x10/0x10 [ 316.329132][T11638] vmx_handle_exit+0x1090/0x18a0 [ 316.334440][T11638] ? vcpu_run+0x361c/0x6f70 [ 316.339300][T11638] vcpu_run+0x432e/0x6f70 [ 316.343910][T11638] ? vcpu_run+0x361c/0x6f70 [ 316.348689][T11638] ? __pfx_vcpu_run+0x10/0x10 [ 316.353737][T11638] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 316.359682][T11638] ? rcu_is_watching+0x15/0xb0 [ 316.364557][T11638] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 316.370766][T11638] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 316.376788][T11638] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 316.382948][T11638] ? rcu_is_watching+0x15/0xb0 [ 316.388351][T11638] ? look_up_lock_class+0x74/0x170 [ 316.394661][T11638] ? register_lock_class+0x51/0x320 [ 316.400500][T11638] ? __lock_acquire+0xab9/0xd20 [ 316.405679][T11638] kvm_vcpu_ioctl+0x95c/0xe90 [ 316.410543][T11638] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 316.415885][T11638] ? __lock_acquire+0xab9/0xd20 [ 316.421175][T11638] ? __asan_memset+0x22/0x50 [ 316.425908][T11638] ? smack_file_ioctl+0x302/0x340 [ 316.431315][T11638] ? __pfx_smack_file_ioctl+0x10/0x10 [ 316.437431][T11638] ? __fget_files+0x2a/0x420 [ 316.442462][T11638] ? __fget_files+0x3a0/0x420 [ 316.447355][T11638] ? __fget_files+0x2a/0x420 [ 316.452466][T11638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 316.457708][T11638] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 316.463010][T11638] __se_sys_ioctl+0xfc/0x170 [ 316.467648][T11638] do_syscall_64+0xfa/0x3b0 [ 316.472648][T11638] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.478715][T11638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.485587][T11638] ? clear_bhb_loop+0x60/0xb0 [ 316.490981][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.497363][T11638] RIP: 0033:0x7f32d2d8eb69 [ 316.502602][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.523959][T11638] RSP: 002b:00007f32d0bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.532814][T11638] RAX: ffffffffffffffda RBX: 00007f32d2fb5fa0 RCX: 00007f32d2d8eb69 [ 316.541075][T11638] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 316.549629][T11638] RBP: 00007f32d2e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 316.557895][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.566581][T11638] R13: 0000000000000000 R14: 00007f32d2fb5fa0 R15: 00007ffd2a6ee3e8 [ 316.574880][T11638] [ 316.577930][T11638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 316.585237][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.4.2031 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 316.595341][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.606066][T11638] Call Trace: [ 316.609447][T11638] [ 316.612477][T11638] dump_stack_lvl+0x99/0x250 [ 316.617345][T11638] ? __asan_memcpy+0x40/0x70 [ 316.622067][T11638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.627367][T11638] ? __pfx__printk+0x10/0x10 [ 316.632247][T11638] panic+0x2db/0x790 [ 316.636756][T11638] ? __pfx_panic+0x10/0x10 [ 316.641308][T11638] __warn+0x31b/0x4b0 [ 316.645493][T11638] ? folio_memcg+0x1a8/0x310 [ 316.650370][T11638] ? folio_memcg+0x1a8/0x310 [ 316.655490][T11638] report_bug+0x2be/0x4f0 [ 316.660187][T11638] ? folio_memcg+0x1a8/0x310 [ 316.665337][T11638] ? folio_memcg+0x1a8/0x310 [ 316.670067][T11638] ? folio_memcg+0x1aa/0x310 [ 316.675372][T11638] handle_bug+0x84/0x160 [ 316.679939][T11638] exc_invalid_op+0x1a/0x50 [ 316.684764][T11638] asm_exc_invalid_op+0x1a/0x20 [ 316.689817][T11638] RIP: 0010:folio_memcg+0x1a8/0x310 [ 316.695616][T11638] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 316.716252][T11638] RSP: 0018:ffffc90003a17250 EFLAGS: 00010287 [ 316.722446][T11638] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 316.731497][T11638] RDX: ffffc9000cb92000 RSI: 0000000000006d20 RDI: 0000000000006d21 [ 316.740459][T11638] RBP: 0000000000000000 R08: ffffea0000c6aa87 R09: 1ffffd400018d550 [ 316.748801][T11638] R10: dffffc0000000000 R11: fffff9400018d551 R12: ffffea0000c6aab0 [ 316.757325][T11638] R13: dffffc0000000000 R14: ffff88802f9cac00 R15: 0000000000000002 [ 316.765607][T11638] ? folio_memcg+0x1a7/0x310 [ 316.770238][T11638] workingset_activation+0x5f/0x4a0 [ 316.775624][T11638] ? folio_mark_accessed+0x361/0x4a0 [ 316.781735][T11638] folio_mark_accessed+0x3b5/0x4a0 [ 316.787134][T11638] kvm_release_page_dirty+0xa2/0xf0 [ 316.792973][T11638] kvm_tdp_page_fault+0x2dd/0x370 [ 316.798423][T11638] kvm_mmu_do_page_fault+0x2c5/0x640 [ 316.804140][T11638] ? vmx_vcpu_run+0xd8b/0x25d0 [ 316.808925][T11638] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 316.814950][T11638] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 316.820774][T11638] kvm_mmu_page_fault+0x22f/0xb70 [ 316.825990][T11638] ? __pfx_handle_ept_violation+0x10/0x10 [ 316.831882][T11638] vmx_handle_exit+0x1090/0x18a0 [ 316.837207][T11638] ? vcpu_run+0x361c/0x6f70 [ 316.841748][T11638] vcpu_run+0x432e/0x6f70 [ 316.846133][T11638] ? vcpu_run+0x361c/0x6f70 [ 316.850982][T11638] ? __pfx_vcpu_run+0x10/0x10 [ 316.855785][T11638] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 316.861531][T11638] ? rcu_is_watching+0x15/0xb0 [ 316.866390][T11638] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 316.872144][T11638] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 316.878122][T11638] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 316.884444][T11638] ? rcu_is_watching+0x15/0xb0 [ 316.889832][T11638] ? look_up_lock_class+0x74/0x170 [ 316.895144][T11638] ? register_lock_class+0x51/0x320 [ 316.900570][T11638] ? __lock_acquire+0xab9/0xd20 [ 316.905667][T11638] kvm_vcpu_ioctl+0x95c/0xe90 [ 316.910558][T11638] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 316.915883][T11638] ? __lock_acquire+0xab9/0xd20 [ 316.920936][T11638] ? __asan_memset+0x22/0x50 [ 316.925543][T11638] ? smack_file_ioctl+0x302/0x340 [ 316.930618][T11638] ? __pfx_smack_file_ioctl+0x10/0x10 [ 316.936288][T11638] ? __fget_files+0x2a/0x420 [ 316.941516][T11638] ? __fget_files+0x3a0/0x420 [ 316.946292][T11638] ? __fget_files+0x2a/0x420 [ 316.950980][T11638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 316.956341][T11638] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 316.961836][T11638] __se_sys_ioctl+0xfc/0x170 [ 316.966652][T11638] do_syscall_64+0xfa/0x3b0 [ 316.971458][T11638] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.977269][T11638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.983534][T11638] ? clear_bhb_loop+0x60/0xb0 [ 316.988703][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.995067][T11638] RIP: 0033:0x7f32d2d8eb69 [ 316.999676][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.038848][T11638] RSP: 002b:00007f32d0bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.047666][T11638] RAX: ffffffffffffffda RBX: 00007f32d2fb5fa0 RCX: 00007f32d2d8eb69 [ 317.055929][T11638] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 317.064355][T11638] RBP: 00007f32d2e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 317.072685][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.083813][T11638] R13: 0000000000000000 R14: 00007f32d2fb5fa0 R15: 00007ffd2a6ee3e8 [ 317.092013][T11638] [ 317.095385][T11638] Kernel Offset: disabled [ 317.099994][T11638] Rebooting in 86400 seconds..