last executing test programs: 13.209855815s ago: executing program 4 (id=3936): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x16, r1, 0x3}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r1, 0x267a4e37}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 12.105402725s ago: executing program 4 (id=3947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100003053bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e0024000280", @ANYRES32], 0x5c}}, 0x800) 11.932465637s ago: executing program 4 (id=3948): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 11.675643248s ago: executing program 4 (id=3951): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x2, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 7.896723418s ago: executing program 2 (id=3976): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7.646928733s ago: executing program 2 (id=3979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad000000000140000"], 0x7c}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r4, &(0x7f0000000100), 0x9) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.358169497s ago: executing program 2 (id=3983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 7.158075069s ago: executing program 2 (id=3986): unshare(0x26020480) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x14}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 7.157483795s ago: executing program 4 (id=3987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) 6.911785687s ago: executing program 3 (id=3990): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.699271908s ago: executing program 3 (id=3992): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) creat(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x85, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xfff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 5.359839266s ago: executing program 1 (id=3997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x181) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5.32626812s ago: executing program 3 (id=3998): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) 5.241960836s ago: executing program 0 (id=3999): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000dd00", @ANYRES16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ieee802154(0x0, r0) 3.952704806s ago: executing program 1 (id=4000): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e40000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000250500000000000000000000000000000095000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xb1, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.938780251s ago: executing program 1 (id=4001): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/1, 0x1}], 0x1}, 0x10020) close(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 3.906101967s ago: executing program 0 (id=4002): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.637772983s ago: executing program 0 (id=4003): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.378549908s ago: executing program 0 (id=4004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.924872922s ago: executing program 1 (id=4005): syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="0580c20000000180c200000008"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.746652511s ago: executing program 1 (id=4006): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 521.45179ms ago: executing program 3 (id=4007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad000000000140000"], 0x7c}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r4, &(0x7f0000000100), 0x9) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 443.678278ms ago: executing program 4 (id=4008): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 433.559886ms ago: executing program 2 (id=4009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 327.12179ms ago: executing program 1 (id=4010): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 204.670078ms ago: executing program 2 (id=4011): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) 204.487605ms ago: executing program 3 (id=4012): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e40000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000250500000000000000000000000000000095000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xb1, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 160.988881ms ago: executing program 0 (id=4013): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 17.996118ms ago: executing program 3 (id=4014): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x2, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 0s ago: executing program 0 (id=4015): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/1, 0x1}], 0x1}, 0x10020) close(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, 0x0, 0xfdef) kernel console output (not intermixed with test programs): 3] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.570451][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.589337][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.602422][ T3131] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.609570][ T3131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.639540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.646674][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.655936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.663072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.673078][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.680201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.712021][ T43] cfg80211: failed to load regulatory.db [ 91.741127][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.831329][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.869826][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.943251][ T3131] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.950483][ T3131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.011461][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.018650][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.055093][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.133972][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.205028][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.212251][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.235692][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.242906][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.354116][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.544970][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.573073][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.636142][ T5836] veth0_vlan: entered promiscuous mode [ 92.686572][ T5836] veth1_vlan: entered promiscuous mode [ 92.743432][ T5835] veth0_vlan: entered promiscuous mode [ 92.795088][ T5834] veth0_vlan: entered promiscuous mode [ 92.815237][ T5835] veth1_vlan: entered promiscuous mode [ 92.849431][ T5834] veth1_vlan: entered promiscuous mode [ 92.865768][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.893130][ T5836] veth0_macvtap: entered promiscuous mode [ 92.923018][ T5836] veth1_macvtap: entered promiscuous mode [ 92.962015][ T5834] veth0_macvtap: entered promiscuous mode [ 92.985865][ T5834] veth1_macvtap: entered promiscuous mode [ 93.006402][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.018918][ T5835] veth0_macvtap: entered promiscuous mode [ 93.026928][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.052573][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.061957][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.072835][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.081856][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.094875][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.105091][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.118773][ T5835] veth1_macvtap: entered promiscuous mode [ 93.137729][ T5838] Bluetooth: hci0: command tx timeout [ 93.145854][ T5832] veth0_vlan: entered promiscuous mode [ 93.165864][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.190315][ T5832] veth1_vlan: entered promiscuous mode [ 93.200970][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.211431][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.223780][ T5838] Bluetooth: hci3: command tx timeout [ 93.223798][ T5846] Bluetooth: hci1: command tx timeout [ 93.229405][ T5153] Bluetooth: hci2: command tx timeout [ 93.234960][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254143][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.295957][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.303780][ T5838] Bluetooth: hci4: command tx timeout [ 93.331757][ T5832] veth0_macvtap: entered promiscuous mode [ 93.345509][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.391931][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.403893][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.412754][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.422358][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.440032][ T5832] veth1_macvtap: entered promiscuous mode [ 93.503967][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.533630][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.552574][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.573666][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.641379][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.653090][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.663318][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.673113][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.704918][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.713607][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.827026][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.841808][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.870394][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.880172][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.883536][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.935864][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.952830][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.965584][ T5851] veth0_vlan: entered promiscuous mode [ 94.026337][ T5851] veth1_vlan: entered promiscuous mode [ 94.064957][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.083860][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.117363][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.125217][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.212651][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.213121][ T5955] loop0: detected capacity change from 0 to 512 [ 94.242181][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.264771][ T5955] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.294734][ T5955] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 94.353887][ T5851] veth0_macvtap: entered promiscuous mode [ 94.372729][ T5955] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 94.391199][ T5851] veth1_macvtap: entered promiscuous mode [ 94.405599][ T5955] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 94.417862][ T5955] System zones: 0-2, 18-18, 34-34 [ 94.489037][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.514658][ T5955] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.6: iget: bad i_size value: 360287970189639680 [ 94.531547][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.572618][ T5955] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6: couldn't read orphan inode 15 (err -117) [ 94.622174][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.655504][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.672069][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.680948][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.688472][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.873322][ T5964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.233323][ T5838] Bluetooth: hci0: command tx timeout [ 95.376499][ T5838] Bluetooth: hci2: command tx timeout [ 95.379214][ T5153] Bluetooth: hci3: command tx timeout [ 95.387359][ T5846] Bluetooth: hci1: command tx timeout [ 95.388011][ T5153] Bluetooth: hci4: command tx timeout [ 95.494312][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6'. [ 95.504568][ T5968] unsupported nlmsg_type 40 [ 95.893483][ T5975] Zero length message leads to an empty skb [ 96.049333][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.194954][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.237435][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.533621][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.542843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.619275][ T5989] ======================================================= [ 96.619275][ T5989] WARNING: The mand mount option has been deprecated and [ 96.619275][ T5989] and is ignored by this kernel. Remove the mand [ 96.619275][ T5989] option from the mount to silence this warning. [ 96.619275][ T5989] ======================================================= [ 96.709684][ T5989] lo speed is unknown, defaulting to 1000 [ 96.726173][ T5989] lo speed is unknown, defaulting to 1000 [ 96.741003][ T5989] lo speed is unknown, defaulting to 1000 [ 97.307084][ T5993] loop2: detected capacity change from 0 to 512 [ 97.382958][ T5993] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.401661][ T5989] infiniband sz1: set active [ 97.406506][ T5989] infiniband sz1: added lo [ 97.439191][ T5993] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 97.467594][ T5989] RDS/IB: sz1: added [ 97.472090][ T5989] smc: adding ib device sz1 with port count 1 [ 97.481296][ T5989] smc: ib device sz1 port 1 has pnetid [ 97.489952][ T5922] lo speed is unknown, defaulting to 1000 [ 97.503027][ T5989] lo speed is unknown, defaulting to 1000 [ 97.535021][ T5993] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 97.573168][ T5993] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 97.606192][ T5993] System zones: 0-2, 18-18, 34-34 [ 97.688273][ T5993] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.13: iget: bad i_size value: 360287970189639680 [ 97.768420][ T5989] lo speed is unknown, defaulting to 1000 [ 97.783794][ T5922] lo speed is unknown, defaulting to 1000 [ 97.786688][ T5993] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.13: couldn't read orphan inode 15 (err -117) [ 97.807789][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.882712][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.938361][ T6005] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 98.191395][ T5841] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.222429][ T5841] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.269097][ T5841] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.633570][ T5989] lo speed is unknown, defaulting to 1000 [ 98.834851][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.927992][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.931717][ T5991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.978075][ T5841] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.985470][ T5989] lo speed is unknown, defaulting to 1000 [ 99.298593][ T5989] lo speed is unknown, defaulting to 1000 [ 99.635992][ T5841] usb 2-1: USB disconnect, device number 2 [ 100.214718][ T6046] netlink: 788 bytes leftover after parsing attributes in process `syz.4.34'. [ 100.442446][ T6056] udevd[6056]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.566698][ T5989] syz.1.11 (5989) used greatest stack depth: 20136 bytes left [ 100.819460][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 101.644529][ T6085] warning: `syz.3.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.914944][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 102.053048][ T6096] bridge_slave_0: left allmulticast mode [ 102.079174][ T6096] bridge_slave_0: left promiscuous mode [ 102.128841][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.163919][ T6098] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 102.189955][ T6096] bridge_slave_1: left allmulticast mode [ 102.200249][ T6096] bridge_slave_1: left promiscuous mode [ 102.210261][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.275983][ T6096] bond0: (slave bond_slave_0): Releasing backup interface [ 102.317804][ T6100] can: request_module (can-proto-3) failed. [ 102.394857][ T6096] bond0: (slave bond_slave_1): Releasing backup interface [ 102.446658][ T6096] team0: Port device team_slave_0 removed [ 102.483430][ T6096] team0: Port device team_slave_1 removed [ 102.512138][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.539520][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.593402][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.621534][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.670752][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'. [ 102.686912][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'. [ 102.761070][ T5840] lo speed is unknown, defaulting to 1000 [ 102.826624][ T6098] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.835143][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 102.944783][ T6112] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 103.032546][ T6112] gretap0: entered promiscuous mode [ 103.707103][ T6144] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 103.776444][ T30] audit: type=1800 audit(1750121461.489:2): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.73" name="#" dev="tmpfs" ino=103 res=0 errno=0 [ 104.275342][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 104.680198][ T6172] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 104.880334][ T6154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.889573][ T6154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.899818][ T6154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.909134][ T6154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.966595][ T5840] lo speed is unknown, defaulting to 1000 [ 104.975139][ T5840] sz1: Port: 1 Link DOWN [ 105.067674][ T10] lo speed is unknown, defaulting to 1000 [ 105.089434][ T6177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.152295][ T6171] lo speed is unknown, defaulting to 1000 [ 105.654119][ T6192] netlink: 11 bytes leftover after parsing attributes in process `syz.3.90'. [ 105.839959][ T6199] netlink: 64 bytes leftover after parsing attributes in process `syz.1.92'. [ 106.072711][ T6205] syz.1.97 uses obsolete (PF_INET,SOCK_PACKET) [ 106.126282][ T43] IPVS: starting estimator thread 0... [ 106.237576][ T6211] IPVS: using max 26 ests per chain, 62400 per kthread [ 107.167479][ T6236] syzkaller1: entered promiscuous mode [ 107.172998][ T6236] syzkaller1: entered allmulticast mode [ 109.999720][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 111.210056][ T6321] xt_bpf: check failed: parse error [ 111.431198][ T6325] Bluetooth: MGMT ver 1.23 [ 112.010999][ T6299] batadv0: entered promiscuous mode [ 112.016744][ T6299] macsec1: entered allmulticast mode [ 112.024220][ T6299] batadv0: entered allmulticast mode [ 112.034229][ T6299] batadv0: left allmulticast mode [ 112.045517][ T6299] batadv0: left promiscuous mode [ 112.086337][ T6308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.968823][ T6352] lo speed is unknown, defaulting to 1000 [ 113.282748][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 113.681669][ T6390] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 113.850092][ T6398] trusted_key: syz.2.167 sent an empty control message without MSG_MORE. [ 114.151204][ T6411] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.663420][ T5921] IPVS: starting estimator thread 0... [ 115.669928][ T6465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.197'. [ 115.777285][ T6466] IPVS: using max 29 ests per chain, 69600 per kthread [ 116.053938][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 116.134504][ T6478] batadv0: entered promiscuous mode [ 116.148155][ T6478] macvtap1: entered promiscuous mode [ 116.154821][ T6478] macvtap1: entered allmulticast mode [ 116.161301][ T6478] batadv0: entered allmulticast mode [ 116.168988][ T6478] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 116.193385][ T6484] batadv0: left allmulticast mode [ 116.204942][ T6484] batadv0: left promiscuous mode [ 116.794831][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.215'. [ 117.083618][ T6515] lo speed is unknown, defaulting to 1000 [ 118.216998][ T6554] lo speed is unknown, defaulting to 1000 [ 118.524960][ T6572] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 118.595419][ T6575] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.604920][ T6575] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.614483][ T6575] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.623373][ T6575] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.654775][ T6575] team0: Port device vxlan0 added [ 118.725530][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'. [ 118.803240][ T6577] bridge0: entered promiscuous mode [ 118.820165][ T6577] bridge0: left promiscuous mode [ 119.135330][ T6587] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 119.231950][ T6587] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.456013][ T6593] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 119.465599][ T6593] netlink: 'syz.0.241': attribute type 4 has an invalid length. [ 119.477913][ T6593] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.241'. [ 119.938395][ T6601] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 119.945241][ T6574] infiniband syz0: set active [ 119.953851][ T6574] infiniband syz0: added bond_slave_1 [ 119.965088][ T6574] syz0: rxe_create_cq: returned err = -12 [ 119.972170][ T6574] infiniband syz0: Couldn't create ib_mad CQ [ 119.981361][ T6574] infiniband syz0: Couldn't open port 1 [ 120.049101][ T6574] RDS/IB: syz0: added [ 120.072224][ T6574] smc: adding ib device syz0 with port count 1 [ 120.078547][ T6574] smc: ib device syz0 port 1 has pnetid [ 120.238916][ T6605] lo speed is unknown, defaulting to 1000 [ 120.764714][ T6617] syzkaller0: entered promiscuous mode [ 120.797465][ T6617] syzkaller0: entered allmulticast mode [ 120.806897][ T6615] netlink: 'syz.0.249': attribute type 5 has an invalid length. [ 120.835296][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.249'. [ 121.001102][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 121.264996][ T6631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 121.284165][ T6633] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 121.429068][ T6637] af_packet: tpacket_rcv: packet too big, clamped from 4284 to 3952. macoff=96 [ 122.888264][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.262'. [ 123.140227][ T5153] Bluetooth: hci0: command tx timeout [ 123.463359][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 123.492463][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 123.529849][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 123.564498][ T6677] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 125.530279][ T6733] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 125.630038][ T6734] geneve0: entered allmulticast mode [ 125.775916][ T6734] vxcan3: entered allmulticast mode [ 126.365469][ T6757] IPVS: stopping backup sync thread 6633 ... [ 126.382957][ T6758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.300'. [ 126.608738][ T6762] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 126.688426][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 126.813092][ T6773] netlink: 224 bytes leftover after parsing attributes in process `syz.4.307'. [ 127.033048][ T6762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.065468][ T6762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.089100][ T6762] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 127.138207][ T6762] bond0 (unregistering): Released all slaves [ 127.307862][ T6770] lo speed is unknown, defaulting to 1000 [ 128.088321][ T6781] lo speed is unknown, defaulting to 1000 [ 128.125061][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 128.138732][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.254567][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 128.290038][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.678226][ T6817] netlink: 56 bytes leftover after parsing attributes in process `syz.0.321'. [ 128.846630][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 129.609049][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.617358][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.896013][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.108773][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.634272][ T6832] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.643432][ T6832] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.680215][ T6832] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.697279][ T6832] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.898108][ T6832] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.907265][ T6832] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.916148][ T6832] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.925365][ T6832] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.964827][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.987403][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.008456][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.023462][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.883681][ T6895] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 131.939818][ T6895] netlink: 'syz.4.340': attribute type 39 has an invalid length. [ 132.102034][ T6904] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.664297][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.677267][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.677990][ T6921] netlink: 92 bytes leftover after parsing attributes in process `syz.2.350'. [ 132.805203][ T6926] tipc: Can't bind to reserved service type 0 [ 132.961568][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.353'. [ 133.858652][ T6959] lo speed is unknown, defaulting to 1000 [ 134.680577][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.688358][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.520711][ T6969] geneve0: left allmulticast mode [ 135.531268][ T6969] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.540656][ T6969] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.551148][ T6969] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.560464][ T6969] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.659167][ T6996] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 135.688802][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 135.716201][ T6996] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 136.240739][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 136.537239][ T7027] netlink: 76 bytes leftover after parsing attributes in process `syz.1.395'. [ 136.733077][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 137.648730][ T7054] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 137.755198][ T7054] bond1: entered promiscuous mode [ 137.777702][ T7054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.919882][ T7056] bond1: (slave bridge1): making interface the new active one [ 137.946599][ T7056] bridge1: entered promiscuous mode [ 138.008510][ T7056] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 139.447260][ T7099] netlink: 'syz.3.422': attribute type 10 has an invalid length. [ 139.548603][ T7099] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.811990][ T7107] lo speed is unknown, defaulting to 1000 [ 140.140651][ T7123] tipc: Started in network mode [ 140.145568][ T7123] tipc: Node identity c, cluster identity 4711 [ 140.164604][ T7123] tipc: Node number set to 12 [ 140.419313][ T7129] Cannot find set identified by id 0 to match [ 140.930706][ T7151] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 140.946028][ T7151] netlink: 224 bytes leftover after parsing attributes in process `syz.4.436'. [ 141.393402][ T7145] lo speed is unknown, defaulting to 1000 [ 141.504264][ T7172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.445'. [ 142.042286][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 143.126076][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.459'. [ 143.302489][ T7213] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 143.321630][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 143.325091][ T7213] netlink: 144 bytes leftover after parsing attributes in process `syz.0.460'. [ 143.342986][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.460'. [ 143.632558][ T7142] mpoa:mpoad_close: () going down [ 143.767407][ T7220] can: request_module (can-proto-3) failed. [ 143.784238][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.464'. [ 143.898436][ T7229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.958983][ T7226] vlan2: entered promiscuous mode [ 143.972378][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 143.981462][ T7226] batadv0: entered promiscuous mode [ 144.059549][ T7231] macvtap1: entered promiscuous mode [ 144.065567][ T7231] team0: entered promiscuous mode [ 144.083297][ T7231] team_slave_0: entered promiscuous mode [ 144.092484][ T7231] team_slave_1: entered promiscuous mode [ 144.101357][ T7231] vxlan0: entered promiscuous mode [ 144.106835][ T7231] macvtap1: entered allmulticast mode [ 144.112862][ T7231] team0: entered allmulticast mode [ 144.119837][ T7231] team_slave_0: entered allmulticast mode [ 144.125602][ T7231] team_slave_1: entered allmulticast mode [ 144.131394][ T7231] vxlan0: entered allmulticast mode [ 144.137041][ T7231] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 144.148286][ T7232] team0: left allmulticast mode [ 144.153175][ T7232] team_slave_0: left allmulticast mode [ 144.187201][ T7232] team_slave_1: left allmulticast mode [ 144.192704][ T7232] vxlan0: left allmulticast mode [ 144.226812][ T7232] team0: left promiscuous mode [ 144.236230][ T7236] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 144.267225][ T7232] team_slave_0: left promiscuous mode [ 144.273114][ T7232] team_slave_1: left promiscuous mode [ 144.297486][ T7232] vxlan0: left promiscuous mode [ 144.883383][ T7244] lo speed is unknown, defaulting to 1000 [ 145.537682][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 145.682842][ T7252] mpoa:mpoad_close: () going down [ 145.955385][ T7256] lo speed is unknown, defaulting to 1000 [ 146.683024][ T7276] lo speed is unknown, defaulting to 1000 [ 146.849010][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.490'. [ 147.319542][ T7303] Bluetooth: MGMT ver 1.23 [ 147.434634][ T7279] lo speed is unknown, defaulting to 1000 [ 147.486436][ T7305] netlink: 248 bytes leftover after parsing attributes in process `syz.0.493'. [ 147.956906][ T7301] lo speed is unknown, defaulting to 1000 [ 149.242933][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.505'. [ 149.261503][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.505'. [ 149.275200][ T7337] netlink: 'syz.0.505': attribute type 4 has an invalid length. [ 151.186058][ T7358] netlink: 'syz.2.514': attribute type 4 has an invalid length. [ 151.489077][ T7365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.517'. [ 152.233393][ T7389] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 152.308064][ T7389] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.380260][ T7390] lo speed is unknown, defaulting to 1000 [ 152.456071][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 153.740579][ T7404] lo speed is unknown, defaulting to 1000 [ 153.986963][ T7420] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 154.020140][ T7420] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 154.323027][ T7431] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 154.334754][ T7431] netlink: 208 bytes leftover after parsing attributes in process `syz.3.539'. [ 154.833714][ T5153] block nbd0: Receive control failed (result -32) [ 154.860013][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 155.157818][ T7442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 156.208565][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 156.503443][ T7476] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 156.528114][ T7476] netlink: 208 bytes leftover after parsing attributes in process `syz.0.557'. [ 157.015068][ T7490] siw: device registration error -23 [ 157.423335][ T7505] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 157.538096][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 157.544201][ T5153] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 157.622759][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 158.641550][ T7490] lo speed is unknown, defaulting to 1000 [ 158.648235][ T7503] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 158.668408][ T7503] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 158.915137][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 158.963820][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 159.186190][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 159.201000][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 159.429419][ T7544] smc: net device bond0 applied user defined pnetid SYZ2 [ 159.539477][ T7549] lo speed is unknown, defaulting to 1000 [ 159.573366][ T7545] netlink: 2 bytes leftover after parsing attributes in process `syz.2.586'. [ 159.586682][ T7545] batadv_slave_1: entered promiscuous mode [ 159.597422][ T7550] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 159.605089][ T7550] netlink: 208 bytes leftover after parsing attributes in process `syz.1.587'. [ 159.614114][ T5153] block nbd1: Receive control failed (result -32) [ 161.748687][ T5153] block nbd2: Receive control failed (result -32) [ 162.313449][ T7592] bridge_slave_0: left allmulticast mode [ 162.348230][ T7592] bridge_slave_0: left promiscuous mode [ 162.394162][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.410930][ T7592] bridge_slave_1: left allmulticast mode [ 162.426630][ T7592] bridge_slave_1: left promiscuous mode [ 162.445698][ T7603] netlink: 'syz.2.609': attribute type 7 has an invalid length. [ 162.464404][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.485735][ T7592] bond0: (slave bond_slave_0): Releasing backup interface [ 162.504274][ T7592] bond0: (slave bond_slave_1): Releasing backup interface [ 162.534747][ T7592] team0: Port device team_slave_0 removed [ 162.592382][ T7592] team0: Port device team_slave_1 removed [ 162.607249][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.615067][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.626708][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.636130][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.665106][ T7592] bond0: (slave wlan1): Releasing backup interface [ 162.853223][ T7592] syz.3.604 (7592) used greatest stack depth: 19992 bytes left [ 163.213777][ T7617] lo speed is unknown, defaulting to 1000 [ 163.226515][ T7620] pim6reg1: entered allmulticast mode [ 163.330728][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.412082][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.035385][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 164.168384][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 164.237384][ T7648] bridge_slave_1: left allmulticast mode [ 164.257869][ T7648] bridge_slave_1: left promiscuous mode [ 164.264635][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.371830][ T7648] bridge_slave_0: left allmulticast mode [ 164.411395][ T7648] bridge_slave_0: left promiscuous mode [ 164.427835][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.242551][ T7676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.260941][ T7676] bridge0: port 3(bond1) entered blocking state [ 165.272310][ T7676] bridge0: port 3(bond1) entered disabled state [ 165.289228][ T7676] bond1: entered allmulticast mode [ 165.325604][ T7676] bond1: entered promiscuous mode [ 165.345070][ T7676] bridge0: port 3(bond1) entered blocking state [ 165.351791][ T7676] bridge0: port 3(bond1) entered forwarding state [ 165.425590][ T12] bridge0: port 3(bond1) entered disabled state [ 165.632877][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 165.650997][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 165.797364][ T7692] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.806353][ T7692] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.815254][ T7692] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.824136][ T7692] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.837084][ T7696] netlink: 2 bytes leftover after parsing attributes in process `syz.3.644'. [ 165.865860][ T7696] batadv_slave_1: entered promiscuous mode [ 165.926850][ T7694] lo speed is unknown, defaulting to 1000 [ 166.989890][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 167.307779][ T7731] lo speed is unknown, defaulting to 1000 [ 167.970831][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 168.042625][ T7758] bridge_slave_1: left allmulticast mode [ 168.072772][ T7758] bridge_slave_1: left promiscuous mode [ 168.097471][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.180560][ T7758] bridge_slave_0: left allmulticast mode [ 168.186420][ T7758] bridge_slave_0: left promiscuous mode [ 168.204336][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.551427][ T7837] lo speed is unknown, defaulting to 1000 [ 174.469509][ T7886] batadv_slave_1: left promiscuous mode [ 174.907189][ T7886] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.916102][ T7886] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.933379][ T7886] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.942929][ T7886] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.459125][ T7962] netlink: 'syz.4.753': attribute type 5 has an invalid length. [ 176.467004][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.753'. [ 176.653329][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 176.719998][ T7971] bridge0: entered promiscuous mode [ 176.748909][ T7971] bridge0: left promiscuous mode [ 176.774490][ T7975] netlink: 788 bytes leftover after parsing attributes in process `syz.2.757'. [ 176.834855][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 177.029853][ T7980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 177.098538][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 177.133547][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 177.251826][ T7990] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 177.299180][ T7990] gretap0: entered promiscuous mode [ 177.335826][ T7990] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 177.360820][ T7990] Cannot create hsr debugfs directory [ 177.370999][ T7990] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 177.382002][ T7990] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 177.721449][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.729144][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.865111][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.886014][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.971782][ T8009] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.980971][ T8009] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.990743][ T8009] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.000070][ T8009] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.125014][ T8009] macvtap1: left promiscuous mode [ 178.131099][ T8026] netlink: 788 bytes leftover after parsing attributes in process `syz.3.775'. [ 178.140488][ T8009] macvtap1: left allmulticast mode [ 178.140539][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.773'. [ 178.159590][ T8009] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.168593][ T8009] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.177542][ T8009] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.186428][ T8009] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.701838][ T8043] team0: Port device team_slave_0 removed [ 178.745374][ T8043] team0: Port device team_slave_1 removed [ 178.760903][ T8048] netlink: 'syz.0.781': attribute type 10 has an invalid length. [ 178.796167][ T8043] team0: Port device vxlan0 removed [ 179.030100][ T8057] lo speed is unknown, defaulting to 1000 [ 179.347710][ T8070] netlink: 788 bytes leftover after parsing attributes in process `syz.1.790'. [ 179.978903][ T8089] bond0: (slave bond_slave_0): Releasing backup interface [ 179.989391][ T8092] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 180.027882][ T8089] bond0: (slave bond_slave_1): Releasing backup interface [ 180.095239][ T8089] team0: Port device team_slave_0 removed [ 180.124571][ T8089] team0: Port device team_slave_1 removed [ 180.183320][ T8092] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.199444][ T8098] geneve0: entered allmulticast mode [ 180.245541][ T8098] vxcan3: entered allmulticast mode [ 180.470712][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'. [ 181.097626][ T8130] bond0: (slave wlan1): Releasing backup interface [ 181.130177][ T8130] bond1: (slave bridge1): Releasing backup interface [ 181.137526][ T8130] bridge1: left promiscuous mode [ 181.426311][ T8142] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 181.442559][ T8142] gretap0: entered promiscuous mode [ 181.459283][ T8142] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 181.470265][ T8142] Cannot create hsr debugfs directory [ 181.477457][ T8142] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 181.507322][ T8142] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 182.425156][ T8184] lo speed is unknown, defaulting to 1000 [ 183.403903][ T8197] lo speed is unknown, defaulting to 1000 [ 183.943801][ T8228] netlink: 'syz.1.852': attribute type 39 has an invalid length. [ 186.619728][ T8282] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 186.634066][ T8282] __nla_validate_parse: 2 callbacks suppressed [ 186.634083][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.878'. [ 187.111502][ T8298] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 187.164020][ T8298] bond2: entered promiscuous mode [ 187.170242][ T8298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.213270][ T8305] bond2: (slave bridge1): making interface the new active one [ 187.252954][ T8305] bridge1: entered promiscuous mode [ 187.259271][ T8305] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 187.530468][ T8321] netlink: 'syz.4.893': attribute type 10 has an invalid length. [ 188.626693][ T8361] Cannot find set identified by id 0 to match [ 190.386046][ T8435] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.434088][ T8435] lo speed is unknown, defaulting to 1000 [ 190.637272][ T8452] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 190.754740][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 191.694914][ T8470] lo speed is unknown, defaulting to 1000 [ 194.103281][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.218077][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 194.292785][ T8542] bridge0: entered promiscuous mode [ 194.327757][ T8542] bridge0: left promiscuous mode [ 198.284400][ T8672] lo speed is unknown, defaulting to 1000 [ 198.733730][ T8681] syzkaller0: entered promiscuous mode [ 198.741373][ T8681] syzkaller0: entered allmulticast mode [ 202.139563][ T8780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 202.659601][ T8803] geneve0: entered allmulticast mode [ 203.174462][ T8832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 205.244332][ T8941] smc: net device bond0 erased user defined pnetid SYZ2 [ 205.253443][ T8941] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 205.608599][ T8941] bond0 (unregistering): Released all slaves [ 206.369748][ T8989] geneve0: entered allmulticast mode [ 206.680199][ T9] IPVS: starting estimator thread 0... [ 206.808012][ T9010] IPVS: using max 28 ests per chain, 67200 per kthread [ 206.941221][ T9004] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 206.977081][ T9004] bond0 (unregistering): Released all slaves [ 207.090896][ T9000] lo speed is unknown, defaulting to 1000 [ 207.537509][ T9030] geneve0: entered allmulticast mode [ 208.165499][ T9054] lo speed is unknown, defaulting to 1000 [ 210.234218][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 211.055051][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 211.537689][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 211.537848][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 211.546187][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 211.645167][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 211.667645][ T9165] netlink: 'syz.0.1235': attribute type 39 has an invalid length. [ 213.245921][ T9244] netlink: 'syz.2.1271': attribute type 39 has an invalid length. [ 213.410842][ T9250] lo speed is unknown, defaulting to 1000 [ 213.744037][ T9265] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1279'. [ 214.782743][ T9301] geneve0: entered allmulticast mode [ 215.125640][ T9314] netlink: 'syz.1.1299': attribute type 39 has an invalid length. [ 215.682743][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.711797][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.723867][ T9323] bond0 (unregistering): Released all slaves [ 215.765428][ T9339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 215.964856][ T9347] lo speed is unknown, defaulting to 1000 [ 216.078039][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 216.473675][ T9] IPVS: starting estimator thread 0... [ 216.577339][ T9365] IPVS: using max 26 ests per chain, 62400 per kthread [ 216.626780][ T9373] netlink: 'syz.2.1324': attribute type 39 has an invalid length. [ 216.799793][ T9383] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 217.364411][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'. [ 217.582810][ T9415] lo speed is unknown, defaulting to 1000 [ 218.086313][ T9417] lo speed is unknown, defaulting to 1000 [ 218.115886][ T9428] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 218.697405][ T9445] netlink: 'syz.1.1348': attribute type 39 has an invalid length. [ 219.103582][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 220.187454][ T9494] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 221.106927][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 221.315101][ T9540] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 221.458557][ T9544] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 221.486990][ T9544] bond0 (unregistering): Released all slaves [ 222.298158][ T9581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 222.701948][ T9598] lo speed is unknown, defaulting to 1000 [ 223.227669][ T9615] lo speed is unknown, defaulting to 1000 [ 223.441762][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'. [ 224.147273][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 225.048077][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 225.836321][ T9700] netlink: 'syz.0.1449': attribute type 39 has an invalid length. [ 226.214585][ T9717] lo speed is unknown, defaulting to 1000 [ 226.953487][ T9749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 227.304817][ T9762] lo speed is unknown, defaulting to 1000 [ 228.015030][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 228.895828][ T9819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 229.394865][ T9836] netlink: 'syz.4.1500': attribute type 39 has an invalid length. [ 229.729818][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 229.890581][ T9854] lo speed is unknown, defaulting to 1000 [ 229.921781][ T9858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 230.818101][ T9887] lo speed is unknown, defaulting to 1000 [ 231.548079][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 231.790588][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 232.668729][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1545'. [ 232.886563][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 233.144252][ T9962] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 233.176916][ T9962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'. [ 233.211061][ T9962] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 233.329144][ T9975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 233.915750][ T9998] lo speed is unknown, defaulting to 1000 [ 234.286104][T10002] lo speed is unknown, defaulting to 1000 [ 234.483609][T10009] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 234.781862][T10017] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 235.064810][T10021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 235.456181][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 236.005099][T10049] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 236.632628][T10075] netlink: 'syz.4.1587': attribute type 39 has an invalid length. [ 237.251393][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 237.603266][T10100] lo speed is unknown, defaulting to 1000 [ 238.215757][T10128] netlink: 'syz.2.1609': attribute type 1 has an invalid length. [ 238.261815][T10128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1609'. [ 238.283532][T10128] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 238.375525][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'. [ 238.953988][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 239.125844][T10166] netlink: 'syz.3.1624': attribute type 1 has an invalid length. [ 239.140970][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1624'. [ 239.153404][T10165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 239.776420][T10190] lo speed is unknown, defaulting to 1000 [ 241.302753][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'. [ 241.460750][T10253] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 241.470046][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 241.684809][T10262] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 242.061344][T10275] lo speed is unknown, defaulting to 1000 [ 242.534012][T10297] netlink: 'syz.1.1675': attribute type 39 has an invalid length. [ 242.653229][T10299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 243.676193][T10336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 244.256952][T10357] lo speed is unknown, defaulting to 1000 [ 244.268482][T10359] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 244.736414][T10377] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 244.838644][T10377] bond0: entered promiscuous mode [ 244.869982][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.949625][T10387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 244.955427][T10379] bond0: (slave bridge2): making interface the new active one [ 244.978233][T10379] bridge2: entered promiscuous mode [ 244.984463][T10379] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 245.300013][T10394] lo speed is unknown, defaulting to 1000 [ 246.549940][T10431] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 247.622893][T10444] lo speed is unknown, defaulting to 1000 [ 249.299792][T10511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 249.657553][T10530] netlink: 'syz.1.1749': attribute type 39 has an invalid length. [ 250.579329][T10559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 250.815849][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1768'. [ 251.118397][T10588] netlink: 'syz.4.1774': attribute type 39 has an invalid length. [ 251.188933][T10592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 251.447947][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1782'. [ 251.546502][T10611] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 251.564661][T10611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1784'. [ 251.592746][T10611] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 251.788596][T10620] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 252.053847][T10635] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 252.597312][T10662] netlink: 'syz.0.1804': attribute type 39 has an invalid length. [ 252.761247][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 252.797421][T10676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input31 [ 253.131532][T10692] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 253.140200][T10692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'. [ 253.163353][T10692] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 253.474052][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1825'. [ 253.595894][T10714] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input32 [ 253.600023][T10712] lo speed is unknown, defaulting to 1000 [ 254.165433][T10731] netlink: 'syz.1.1834': attribute type 39 has an invalid length. [ 255.008422][T10768] netlink: 'syz.0.1849': attribute type 39 has an invalid length. [ 255.194294][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1852'. [ 255.541278][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.083880][T10802] lo speed is unknown, defaulting to 1000 [ 256.223662][T10817] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 256.566518][T10830] lo speed is unknown, defaulting to 1000 [ 256.907225][T10835] netlink: 'syz.0.1878': attribute type 1 has an invalid length. [ 256.914991][T10835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1878'. [ 256.926527][T10837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input33 [ 256.949805][T10835] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 257.906991][T10855] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 258.232297][T10855] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 258.243727][T10855] bridge2: left promiscuous mode [ 258.259249][T10855] bond0 (unregistering): Released all slaves [ 258.361448][T10870] netlink: 'syz.0.1891': attribute type 39 has an invalid length. [ 258.823843][T10883] lo speed is unknown, defaulting to 1000 [ 259.320719][T10900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1904'. [ 259.664844][T10918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input34 [ 259.691080][T10920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1910'. [ 259.938366][T10928] lo speed is unknown, defaulting to 1000 [ 259.980985][T10932] netlink: 'syz.0.1915': attribute type 39 has an invalid length. [ 260.683628][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1923'. [ 260.918812][T10953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input35 [ 261.255163][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1929'. [ 261.442913][T10969] lo speed is unknown, defaulting to 1000 [ 261.484246][T10975] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 261.570846][T10978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1935'. [ 263.019034][T11037] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36 [ 263.414242][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1969'. [ 263.903161][T11075] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input37 [ 264.050250][ T5983] udevd[5983]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 264.245656][T11092] lo speed is unknown, defaulting to 1000 [ 264.291073][T11095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 264.731897][T11109] netlink: 'syz.2.1991': attribute type 39 has an invalid length. [ 264.921940][T11115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input38 [ 265.337054][T11134] lo speed is unknown, defaulting to 1000 [ 265.691400][T11144] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 266.217286][T11162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input39 [ 266.295168][T11171] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 267.260008][T11208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input40 [ 268.664491][T11281] lo speed is unknown, defaulting to 1000 [ 269.384867][T11309] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 269.515564][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2080'. [ 270.040730][T11339] netlink: 'syz.1.2091': attribute type 1 has an invalid length. [ 270.271683][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2094'. [ 271.079775][T11375] lo speed is unknown, defaulting to 1000 [ 271.755487][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2113'. [ 272.677802][T11438] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 272.862936][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2129'. [ 272.988666][T11450] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 273.152765][T11450] bond0: entered promiscuous mode [ 273.158304][T11450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.403267][T11472] netlink: 'syz.3.2139': attribute type 39 has an invalid length. [ 273.923883][T11493] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 273.963483][T11493] bond2: entered promiscuous mode [ 273.969177][T11493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.258115][T11511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input41 [ 274.675866][T11530] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 275.329626][T11572] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 275.522749][T11581] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 275.580261][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2184'. [ 275.785913][T11589] lo speed is unknown, defaulting to 1000 [ 276.189536][T11619] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 276.202196][T11620] netlink: 'syz.3.2195': attribute type 39 has an invalid length. [ 276.610597][T11633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2199'. [ 276.985394][T11651] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 277.160797][T11663] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 277.821119][T11693] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 277.970224][T11702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2228'. [ 278.536067][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2242'. [ 278.901743][T11754] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 278.921213][T11756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2253'. [ 279.021849][T11766] netlink: 'syz.2.2254': attribute type 39 has an invalid length. [ 279.479653][T11796] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 279.570625][T11796] bond0: entered promiscuous mode [ 279.575922][T11796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.189715][T11839] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 280.231250][T11838] lo speed is unknown, defaulting to 1000 [ 280.414490][T11848] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 280.528038][T11858] netlink: 'syz.2.2288': attribute type 39 has an invalid length. [ 280.536253][T11857] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 280.557461][T11857] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2291'. [ 280.569928][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2291'. [ 280.648400][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2292'. [ 281.701075][T11907] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 281.920418][T11920] netlink: 'syz.0.2316': attribute type 39 has an invalid length. [ 282.062022][T11907] bond0 (unregistering): Released all slaves [ 282.945809][T11969] netlink: 'syz.2.2338': attribute type 72 has an invalid length. [ 282.970951][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2338'. [ 283.023605][T11973] lo speed is unknown, defaulting to 1000 [ 283.407620][T11996] netlink: 'syz.4.2346': attribute type 39 has an invalid length. [ 283.944728][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2352'. [ 284.943705][T12063] netlink: 'syz.3.2367': attribute type 1 has an invalid length. [ 285.234125][T12074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2372'. [ 286.052916][T12113] lo speed is unknown, defaulting to 1000 [ 286.103648][T12123] netlink: 'syz.4.2389': attribute type 39 has an invalid length. [ 287.784138][T12186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2418'. [ 288.355805][T12221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2434'. [ 288.684281][T12242] lo speed is unknown, defaulting to 1000 [ 289.040407][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2449'. [ 289.168323][T12260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2452'. [ 289.359668][T12267] lo speed is unknown, defaulting to 1000 [ 290.184235][T12294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2464'. [ 290.495113][T12306] netlink: 'syz.1.2470': attribute type 1 has an invalid length. [ 291.258718][T12337] netlink: 'syz.1.2479': attribute type 39 has an invalid length. [ 291.823884][T12364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2493'. [ 291.862556][T12356] lo speed is unknown, defaulting to 1000 [ 292.790047][T12404] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2510'. [ 293.389667][T12437] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2524'. [ 293.685304][T12445] lo speed is unknown, defaulting to 1000 [ 294.116944][T12465] lo speed is unknown, defaulting to 1000 [ 294.148598][T12467] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2536'. [ 294.666058][T12486] netlink: 'syz.3.2542': attribute type 39 has an invalid length. [ 295.135114][T12501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'. [ 296.083131][T12533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2563'. [ 296.279069][T12541] lo speed is unknown, defaulting to 1000 [ 296.941417][T12566] netlink: 'syz.2.2575': attribute type 3 has an invalid length. [ 297.075093][T12535] mpoa:mpoad_close: () going down [ 297.790942][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2588'. [ 298.011542][T12612] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 298.386988][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2596'. [ 298.772917][T12644] netlink: 'syz.1.2603': attribute type 39 has an invalid length. [ 299.375191][T12677] netlink: 'syz.4.2616': attribute type 39 has an invalid length. [ 300.043245][T12697] bond0 (unregistering): Released all slaves [ 300.305075][T12714] netlink: 'syz.0.2629': attribute type 39 has an invalid length. [ 300.762421][T12732] lo speed is unknown, defaulting to 1000 [ 301.112898][T12751] netlink: 'syz.2.2642': attribute type 39 has an invalid length. [ 301.851934][T12772] lo speed is unknown, defaulting to 1000 [ 302.123168][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2656'. [ 304.412282][T12868] lo speed is unknown, defaulting to 1000 [ 304.844592][T12886] lo speed is unknown, defaulting to 1000 [ 304.874659][ T981] IPVS: starting estimator thread 0... [ 304.997870][T12888] IPVS: using max 28 ests per chain, 67200 per kthread [ 305.799005][T12903] lo speed is unknown, defaulting to 1000 [ 306.762115][T12923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2708'. [ 307.832274][T12951] lo speed is unknown, defaulting to 1000 [ 308.448463][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2722'. [ 308.481119][T12970] netlink: 'syz.2.2731': attribute type 39 has an invalid length. [ 309.194125][T12999] lo speed is unknown, defaulting to 1000 [ 309.882979][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2739'. [ 310.562751][T13040] lo speed is unknown, defaulting to 1000 [ 311.077791][T13047] lo speed is unknown, defaulting to 1000 [ 311.143713][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2754'. [ 313.020613][T13077] lo speed is unknown, defaulting to 1000 [ 313.252164][T13088] netlink: 'syz.1.2767': attribute type 39 has an invalid length. [ 313.563375][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'. [ 314.074327][T13100] lo speed is unknown, defaulting to 1000 [ 314.849808][T13119] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 315.082920][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 315.875937][T13147] lo speed is unknown, defaulting to 1000 [ 316.424606][T13164] lo speed is unknown, defaulting to 1000 [ 316.981213][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.191833][T13180] lo speed is unknown, defaulting to 1000 [ 317.980548][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2810'. [ 318.275031][T13211] bond0: entered promiscuous mode [ 318.284956][T13211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.438398][T13213] bridge0: entered promiscuous mode [ 318.444633][T13213] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 319.276906][T13239] lo speed is unknown, defaulting to 1000 [ 319.795252][T13253] netlink: 'syz.4.2828': attribute type 39 has an invalid length. [ 320.594749][T13283] lo speed is unknown, defaulting to 1000 [ 320.971046][T13284] lo speed is unknown, defaulting to 1000 [ 321.565391][T13317] bond0: entered promiscuous mode [ 321.572490][T13317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.606137][T13319] netlink: 'syz.3.2851': attribute type 39 has an invalid length. [ 321.608181][T13317] bridge3: entered promiscuous mode [ 321.620435][T13317] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 322.772039][T13344] lo speed is unknown, defaulting to 1000 [ 323.649296][T13374] netlink: 'syz.0.2875': attribute type 1 has an invalid length. [ 323.749470][T13374] bond0: entered promiscuous mode [ 323.754877][T13374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.846861][T13376] bridge0: entered promiscuous mode [ 323.888960][T13376] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 324.150243][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.160335][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.172639][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.182323][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.193367][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.354105][T13396] lo speed is unknown, defaulting to 1000 [ 324.508001][T13404] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2884'. [ 324.533035][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2883'. [ 325.089123][T13388] lo speed is unknown, defaulting to 1000 [ 325.586359][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'. [ 325.977476][T13444] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 326.156789][T13444] bond0: entered promiscuous mode [ 326.172515][T13444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.257212][ T5838] Bluetooth: hci4: command tx timeout [ 326.329321][T13447] bridge3: entered promiscuous mode [ 326.335489][T13447] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 326.409771][T13457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2904'. [ 326.551768][T13462] netlink: 'syz.2.2905': attribute type 39 has an invalid length. [ 326.745784][T13388] chnl_net:caif_netlink_parms(): no params data found [ 326.960245][T13485] netlink: 'syz.0.2914': attribute type 1 has an invalid length. [ 326.994155][T13485] bond1: entered promiscuous mode [ 326.999671][T13485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.006915][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.016866][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.024345][T13388] bridge_slave_0: entered allmulticast mode [ 327.031753][T13388] bridge_slave_0: entered promiscuous mode [ 327.054419][T13485] bridge1: entered promiscuous mode [ 327.060195][T13485] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 327.069156][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.076344][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.084044][T13388] bridge_slave_1: entered allmulticast mode [ 327.092227][T13388] bridge_slave_1: entered promiscuous mode [ 327.171941][T13388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.185505][T13388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.245644][T13388] team0: Port device team_slave_0 added [ 327.263340][T13388] team0: Port device team_slave_1 added [ 327.301516][T13388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.308868][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.360433][T13388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.389148][T13388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.396114][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.441630][T13388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.518099][T13388] hsr_slave_0: entered promiscuous mode [ 327.525216][T13388] hsr_slave_1: entered promiscuous mode [ 327.534116][T13388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.542646][T13388] Cannot create hsr debugfs directory [ 327.575721][T13502] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2922'. [ 327.888555][T13513] lo speed is unknown, defaulting to 1000 [ 328.054829][T13519] netlink: 'syz.0.2927': attribute type 1 has an invalid length. [ 328.135170][T13519] bond2: entered promiscuous mode [ 328.143069][T13519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.184295][T13388] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 328.219194][T13521] bridge2: entered promiscuous mode [ 328.225265][T13521] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 328.337206][ T5838] Bluetooth: hci4: command tx timeout [ 328.518185][T13532] netlink: 'syz.1.2930': attribute type 39 has an invalid length. [ 328.524544][T13388] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.538311][T13388] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.559930][T13388] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.571200][T13388] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.721102][T13388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.749615][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.772210][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.779690][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.814399][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.821616][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.183911][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.410258][T13555] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2934'. [ 329.457682][T13554] lo speed is unknown, defaulting to 1000 [ 329.521253][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2936'. [ 329.702495][T13388] veth0_vlan: entered promiscuous mode [ 329.722326][T13388] veth1_vlan: entered promiscuous mode [ 329.765423][T13388] veth0_macvtap: entered promiscuous mode [ 329.794148][T13388] veth1_macvtap: entered promiscuous mode [ 329.856311][T13388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.886977][T13388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.911098][T13388] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.921556][T13388] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.933004][T13388] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.944470][T13388] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.090565][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.112992][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.175860][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.194735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.227318][T13575] netlink: 'syz.1.2943': attribute type 39 has an invalid length. [ 330.417232][ T5838] Bluetooth: hci4: command tx timeout [ 330.884720][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2948'. [ 330.938213][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 331.680644][T13609] lo speed is unknown, defaulting to 1000 [ 331.855129][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.865156][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.873884][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.889990][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.901775][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.999627][T13622] netlink: 'syz.0.2962': attribute type 39 has an invalid length. [ 332.137938][T13618] lo speed is unknown, defaulting to 1000 [ 332.497350][ T5842] Bluetooth: hci4: command tx timeout [ 332.823310][T13632] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2966'. [ 333.464150][T13640] lo speed is unknown, defaulting to 1000 [ 333.911385][T13618] chnl_net:caif_netlink_parms(): no params data found [ 333.937168][ T5842] Bluetooth: hci0: command tx timeout [ 334.125104][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'. [ 334.203705][T13666] netlink: 'syz.2.2977': attribute type 39 has an invalid length. [ 334.245468][T13618] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.262860][T13618] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.274067][T13618] bridge_slave_0: entered allmulticast mode [ 334.282344][T13618] bridge_slave_0: entered promiscuous mode [ 334.304586][T13618] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.316870][T13618] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.325163][T13618] bridge_slave_1: entered allmulticast mode [ 334.333895][T13618] bridge_slave_1: entered promiscuous mode [ 334.401219][T13618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.478709][T13618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.011797][T13618] team0: Port device team_slave_0 added [ 336.027955][ T5842] Bluetooth: hci0: command tx timeout [ 336.067965][T13618] team0: Port device team_slave_1 added [ 336.074434][T13682] lo speed is unknown, defaulting to 1000 [ 336.296391][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2989'. [ 336.325018][T13618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.344766][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.375508][T13618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.527535][T13618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.548101][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.579742][T13618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.759696][T13703] netlink: 'syz.4.2994': attribute type 39 has an invalid length. [ 336.774357][T13618] hsr_slave_0: entered promiscuous mode [ 336.781359][T13618] hsr_slave_1: entered promiscuous mode [ 336.792412][T13618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.800245][T13618] Cannot create hsr debugfs directory [ 337.405854][T13720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3001'. [ 338.046681][T13732] lo speed is unknown, defaulting to 1000 [ 338.048653][T13618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.086818][T13618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.099985][ T5842] Bluetooth: hci0: command tx timeout [ 338.125878][T13618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.173031][T13618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.187271][T13738] netlink: 'syz.0.3007': attribute type 39 has an invalid length. [ 338.490406][T13618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.544223][T13618] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.559036][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.566180][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.582425][T13751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3011'. [ 338.653242][ T3131] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.660416][ T3131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.234812][T13618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.388484][T13618] veth0_vlan: entered promiscuous mode [ 339.429088][T13618] veth1_vlan: entered promiscuous mode [ 339.526543][T13771] lo speed is unknown, defaulting to 1000 [ 339.528528][T13618] veth0_macvtap: entered promiscuous mode [ 339.572274][T13618] veth1_macvtap: entered promiscuous mode [ 339.604109][T13618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.655497][T13618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.695631][T13618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.712152][T13618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.726759][T13618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.750625][T13618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.167756][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.177363][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.177403][ T5842] Bluetooth: hci0: command tx timeout [ 340.326907][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.340161][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.953282][T13800] lo speed is unknown, defaulting to 1000 [ 341.546171][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.554383][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.565050][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.580099][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.602486][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.699328][T13810] lo speed is unknown, defaulting to 1000 [ 341.831204][ T5937] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 342.431833][ T5937] gretap0 (unregistering): left promiscuous mode [ 342.502127][ T5937] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 342.513873][ T5937] bridge0 (unregistering): left promiscuous mode [ 342.657738][ T5937] bond0 (unregistering): Released all slaves [ 342.684246][T13815] lo speed is unknown, defaulting to 1000 [ 343.480272][ T2156] IPVS: starting estimator thread 0... [ 343.548837][T13810] chnl_net:caif_netlink_parms(): no params data found [ 343.567370][T13849] IPVS: using max 28 ests per chain, 67200 per kthread [ 343.617341][ T5838] Bluetooth: hci1: command tx timeout [ 343.887798][T13847] lo speed is unknown, defaulting to 1000 [ 343.974278][T13810] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.995764][T13810] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.016007][T13810] bridge_slave_0: entered allmulticast mode [ 344.073807][T13810] bridge_slave_0: entered promiscuous mode [ 344.153113][T13857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3047'. [ 344.223521][T13810] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.248358][T13810] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.270579][T13810] bridge_slave_1: entered allmulticast mode [ 344.309470][T13810] bridge_slave_1: entered promiscuous mode [ 344.633540][T13810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.692473][ T5937] hsr_slave_0: left promiscuous mode [ 344.702992][ T5937] hsr_slave_1: left promiscuous mode [ 345.413385][T13810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.569263][T13810] team0: Port device team_slave_0 added [ 345.590062][T13810] team0: Port device team_slave_1 added [ 345.689291][T13810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.697747][ T5838] Bluetooth: hci1: command tx timeout [ 345.717100][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.744057][T13810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.756738][T13810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.764129][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.790598][T13810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.840182][ T5937] IPVS: stop unused estimator thread 0... [ 345.911479][T13810] hsr_slave_0: entered promiscuous mode [ 345.918407][T13810] hsr_slave_1: entered promiscuous mode [ 347.236273][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3059'. [ 347.475634][T13810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.490341][T13810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.504091][T13810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.516453][T13810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.697985][T13904] lo speed is unknown, defaulting to 1000 [ 347.779549][T13810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.787195][ T5838] Bluetooth: hci1: command tx timeout [ 347.852542][T13810] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.897008][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.904257][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.965988][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.973301][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.251930][T13914] lo speed is unknown, defaulting to 1000 [ 348.423617][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3069'. [ 348.432070][T13810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.565409][T13810] veth0_vlan: entered promiscuous mode [ 348.591092][T13810] veth1_vlan: entered promiscuous mode [ 348.671443][T13810] veth0_macvtap: entered promiscuous mode [ 348.696667][T13810] veth1_macvtap: entered promiscuous mode [ 348.744444][T13810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.766384][T13810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.791342][T13810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.806932][T13810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.824622][T13810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.833675][T13810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.894012][T13919] lo speed is unknown, defaulting to 1000 [ 349.252834][T13931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.282664][T13931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.313895][T13931] bond0 (unregistering): Released all slaves [ 349.412135][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.431155][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.584235][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.608493][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.671480][T13939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 349.857228][ T5838] Bluetooth: hci1: command tx timeout [ 350.109571][T13946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3076'. [ 350.771508][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3080'. [ 351.600679][T13978] lo speed is unknown, defaulting to 1000 [ 351.730717][T13985] netlink: 'syz.4.3089': attribute type 39 has an invalid length. [ 352.053742][T13995] nbd: must specify at least one socket [ 352.125789][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.135118][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.150636][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.164853][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.180214][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.284217][T13996] lo speed is unknown, defaulting to 1000 [ 352.731834][T14007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.749193][T14007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.770749][T14007] bond0 (unregistering): Released all slaves [ 352.830124][T14005] lo speed is unknown, defaulting to 1000 [ 353.537421][T14023] lo speed is unknown, defaulting to 1000 [ 353.800918][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'. [ 354.111147][T13996] chnl_net:caif_netlink_parms(): no params data found [ 354.257425][ T5838] Bluetooth: hci2: command tx timeout [ 354.500962][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.522516][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.530685][T13996] bridge_slave_0: entered allmulticast mode [ 354.544656][T13996] bridge_slave_0: entered promiscuous mode [ 354.576311][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.602676][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.619059][T13996] bridge_slave_1: entered allmulticast mode [ 354.677516][T13996] bridge_slave_1: entered promiscuous mode [ 354.756520][T14045] netlink: 'syz.2.3108': attribute type 39 has an invalid length. [ 354.916538][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.008619][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.211428][T13996] team0: Port device team_slave_0 added [ 355.253825][T13996] team0: Port device team_slave_1 added [ 355.434275][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.452080][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.484826][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.522998][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.532933][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.566373][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.847010][T13996] hsr_slave_0: entered promiscuous mode [ 355.903917][T13996] hsr_slave_1: entered promiscuous mode [ 355.917771][T13996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.925349][T13996] Cannot create hsr debugfs directory [ 356.035772][T14064] lo speed is unknown, defaulting to 1000 [ 356.343096][ T5838] Bluetooth: hci2: command tx timeout [ 356.377483][T14075] netlink: 'syz.0.3119': attribute type 39 has an invalid length. [ 356.530744][T14077] lo speed is unknown, defaulting to 1000 [ 356.564772][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'. [ 356.913149][T14086] nbd: must specify a size in bytes for the device [ 357.089293][T13996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.120965][T13996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.159748][T13996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.200614][T13996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.492728][T13996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.582349][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 357.609231][T13996] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.953800][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.961964][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.990195][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.997397][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.253312][T13996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.263889][T13996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.418191][ T5838] Bluetooth: hci2: command tx timeout [ 358.469113][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 358.715962][T14127] netlink: 'syz.0.3136': attribute type 39 has an invalid length. [ 358.719013][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.838806][T13996] veth0_vlan: entered promiscuous mode [ 358.862558][T13996] veth1_vlan: entered promiscuous mode [ 358.900800][T13996] veth0_macvtap: entered promiscuous mode [ 358.935463][T13996] veth1_macvtap: entered promiscuous mode [ 358.981672][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.003034][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.034967][T13996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.044337][T13996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.053438][T13996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.063091][T13996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.195334][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.228260][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.290156][ T3131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.327719][ T3131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.592020][T14151] lo speed is unknown, defaulting to 1000 [ 360.224579][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'. [ 360.254809][T14173] nbd: must specify at least one socket [ 360.500368][ T5838] Bluetooth: hci2: command tx timeout [ 360.577626][T14181] netlink: 'syz.3.3159': attribute type 39 has an invalid length. [ 361.255362][T14205] nbd: must specify at least one socket [ 361.752852][T14216] netlink: 'syz.3.3176': attribute type 1 has an invalid length. [ 361.951150][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 362.113939][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.129558][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.137842][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.145810][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.153947][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.197911][T14231] lo speed is unknown, defaulting to 1000 [ 362.264579][T14237] nbd: must specify at least one socket [ 362.290421][T14235] netlink: 'syz.2.3186': attribute type 39 has an invalid length. [ 362.516034][T14246] netlink: 'syz.1.3190': attribute type 1 has an invalid length. [ 362.934887][T14260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3197'. [ 363.081164][T14268] netlink: 'syz.3.3201': attribute type 1 has an invalid length. [ 363.791845][T14300] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 364.190318][ T5838] Bluetooth: hci3: command tx timeout [ 364.836552][T14231] chnl_net:caif_netlink_parms(): no params data found [ 364.923389][T14300] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 365.046432][T14294] lo speed is unknown, defaulting to 1000 [ 365.193563][T14231] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.193577][T14316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3216'. [ 365.259443][T14231] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.266765][T14231] bridge_slave_0: entered allmulticast mode [ 365.279077][T14231] bridge_slave_0: entered promiscuous mode [ 365.296030][T14231] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.303793][T14231] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.311183][T14231] bridge_slave_1: entered allmulticast mode [ 365.326068][T14231] bridge_slave_1: entered promiscuous mode [ 365.485047][T14231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.514999][T14231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.651041][T14327] netlink: 'syz.2.3221': attribute type 39 has an invalid length. [ 365.670494][T14231] team0: Port device team_slave_0 added [ 365.689005][T14231] team0: Port device team_slave_1 added [ 365.798202][T14231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.805256][T14231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.831913][T14231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.005666][T14231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.014492][T14231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.071500][T14231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.160055][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3226'. [ 366.261465][ T5838] Bluetooth: hci3: command tx timeout [ 367.461834][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3227'. [ 367.490235][T14231] hsr_slave_0: entered promiscuous mode [ 367.515447][T14231] hsr_slave_1: entered promiscuous mode [ 367.532754][T14231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.555411][T14231] Cannot create hsr debugfs directory [ 368.297351][T14374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3237'. [ 368.342958][ T5838] Bluetooth: hci3: command tx timeout [ 368.695066][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3240'. [ 369.092960][T14405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3248'. [ 369.360234][T14231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.380774][T14231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.423324][T14231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.460301][T14231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.738975][T14231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.760508][T14435] lo speed is unknown, defaulting to 1000 [ 369.805426][T14231] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.834789][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.842009][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.860426][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.867642][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.217993][T14450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3262'. [ 370.417830][ T5838] Bluetooth: hci3: command tx timeout [ 370.703293][T14231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.845360][T14231] veth0_vlan: entered promiscuous mode [ 370.880540][T14231] veth1_vlan: entered promiscuous mode [ 370.995064][T14231] veth0_macvtap: entered promiscuous mode [ 371.152060][T14231] veth1_macvtap: entered promiscuous mode [ 371.315419][T14231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.333014][T14231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.360457][T14231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.391113][T14231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.405888][T14231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.415341][T14231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.795782][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.822850][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.935573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.970119][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.776903][T14528] smc: net device bond0 applied user defined pnetid SYZ2 [ 373.021349][T14542] smc: net device bond0 erased user defined pnetid SYZ2 [ 373.066303][T14539] lo speed is unknown, defaulting to 1000 [ 373.201702][T14542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.215095][T14542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.233045][T14542] bond0 (unregistering): Released all slaves [ 373.584214][T14549] lo speed is unknown, defaulting to 1000 [ 373.660175][ T2156] IPVS: starting estimator thread 0... [ 373.757335][T14553] IPVS: using max 43 ests per chain, 103200 per kthread [ 373.973991][T14561] netlink: 'syz.0.3303': attribute type 39 has an invalid length. [ 374.136584][T14567] smc: net device bond0 applied user defined pnetid SYZ2 [ 374.315516][T14571] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 375.213510][T14595] netlink: 'syz.1.3318': attribute type 39 has an invalid length. [ 375.978112][T14614] lo speed is unknown, defaulting to 1000 [ 375.991740][ T981] IPVS: starting estimator thread 0... [ 376.115288][T14620] IPVS: using max 29 ests per chain, 69600 per kthread [ 376.369118][T14630] netlink: 'syz.4.3332': attribute type 39 has an invalid length. [ 377.800408][T14644] smc: net device bond0 erased user defined pnetid SYZ2 [ 378.431118][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660363][T14679] netlink: 'syz.4.3350': attribute type 39 has an invalid length. [ 379.405716][T14701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3358'. [ 379.583265][T14710] netlink: 'syz.4.3362': attribute type 39 has an invalid length. [ 379.896367][T14727] lo speed is unknown, defaulting to 1000 [ 380.184360][T14737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3372'. [ 380.786891][T14755] netlink: 'syz.1.3378': attribute type 39 has an invalid length. [ 381.119764][T14772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3385'. [ 381.682735][T14774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.724236][T14774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.792096][T14774] bond0 (unregistering): Released all slaves [ 382.054147][T14797] netlink: 'syz.0.3392': attribute type 39 has an invalid length. [ 382.469588][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 382.513489][T14818] bridge_slave_1: left allmulticast mode [ 382.520466][T14818] bridge_slave_1: left promiscuous mode [ 382.529212][T14818] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.542530][T14818] bridge_slave_0: left allmulticast mode [ 382.549208][T14818] bridge_slave_0: left promiscuous mode [ 382.555141][T14818] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.830667][T14824] lo speed is unknown, defaulting to 1000 [ 383.109176][T14834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3405'. [ 383.227641][ T5960] IPVS: starting estimator thread 0... [ 383.337852][T14836] lo speed is unknown, defaulting to 1000 [ 383.339766][T14840] IPVS: using max 27 ests per chain, 64800 per kthread [ 383.774502][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 384.003741][T14854] bridge_slave_1: left allmulticast mode [ 384.023770][T14854] bridge_slave_1: left promiscuous mode [ 384.033552][T14854] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.053505][T14854] bridge_slave_0: left allmulticast mode [ 384.065831][T14854] bridge_slave_0: left promiscuous mode [ 384.079721][T14854] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.415579][T14871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3417'. [ 385.214819][T14896] netlink: 'syz.0.3426': attribute type 39 has an invalid length. [ 386.206099][T14920] lo speed is unknown, defaulting to 1000 [ 387.024757][T14958] netlink: 'syz.1.3449': attribute type 39 has an invalid length. [ 387.925766][T15002] netlink: 'syz.4.3465': attribute type 39 has an invalid length. [ 388.853267][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 388.883791][T15038] bridge_slave_1: left allmulticast mode [ 388.889770][T15038] bridge_slave_1: left promiscuous mode [ 388.895979][T15038] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.914025][T15038] bridge_slave_0: left allmulticast mode [ 388.921691][T15038] bridge_slave_0: left promiscuous mode [ 388.930073][T15038] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.110911][T15046] netlink: 'syz.0.3480': attribute type 39 has an invalid length. [ 389.243386][T15051] lo speed is unknown, defaulting to 1000 [ 390.497922][T15084] lo speed is unknown, defaulting to 1000 [ 391.935840][T15106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.964766][T15106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.976472][T15106] bond0 (unregistering): Released all slaves [ 392.143002][T15120] lo speed is unknown, defaulting to 1000 [ 392.682420][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 392.765193][T15151] netlink: 'syz.3.3518': attribute type 39 has an invalid length. [ 392.807609][T15127] lo speed is unknown, defaulting to 1000 [ 394.598856][T15180] netlink: 'syz.3.3530': attribute type 39 has an invalid length. [ 394.939261][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3531'. [ 396.786818][T15245] lo speed is unknown, defaulting to 1000 [ 396.845480][ T981] IPVS: starting estimator thread 0... [ 396.947174][T15249] IPVS: using max 29 ests per chain, 69600 per kthread [ 397.059032][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 398.286080][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'. [ 399.429872][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 399.772595][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'. [ 399.922390][T15335] hsr_slave_1 (unregistering): left promiscuous mode [ 400.050054][T15345] lo speed is unknown, defaulting to 1000 [ 401.695330][T15401] netlink: 'syz.3.3617': attribute type 39 has an invalid length. [ 402.816290][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 403.020624][T15446] netlink: 'syz.2.3635': attribute type 39 has an invalid length. [ 403.085882][T15432] hsr_slave_1 (unregistering): left promiscuous mode [ 403.415133][T15456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.871246][T15479] netlink: 'syz.3.3647': attribute type 39 has an invalid length. [ 403.893513][T15477] lo speed is unknown, defaulting to 1000 [ 404.904675][T15513] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 405.172483][T15520] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 407.526432][T15539] lo speed is unknown, defaulting to 1000 [ 407.571544][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 407.768760][T15548] netlink: 'syz.0.3672': attribute type 39 has an invalid length. [ 408.484846][T15561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.363216][T15591] netlink: 'syz.1.3685': attribute type 39 has an invalid length. [ 410.811777][T15605] lo speed is unknown, defaulting to 1000 [ 411.353499][T15626] netlink: 'syz.0.3697': attribute type 39 has an invalid length. [ 411.648161][T15633] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.091699][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 413.245736][T15675] lo speed is unknown, defaulting to 1000 [ 413.419376][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'. [ 415.014560][T15692] bridge0: port 3(vxlan0) entered blocking state [ 415.046325][T15692] bridge0: port 3(vxlan0) entered disabled state [ 415.057588][T15692] vxlan0: entered allmulticast mode [ 415.065022][T15692] vxlan0: entered promiscuous mode [ 415.427830][T15705] macvlan0: entered allmulticast mode [ 415.447115][T15705] veth1_vlan: entered allmulticast mode [ 415.521436][T15705] veth1_vlan: left allmulticast mode [ 415.563707][T15705] macvlan0 (unregistering): left allmulticast mode [ 415.681358][T15714] lo speed is unknown, defaulting to 1000 [ 416.560345][T15742] lo speed is unknown, defaulting to 1000 [ 417.972645][T15766] netlink: 'syz.3.3744': attribute type 39 has an invalid length. [ 418.204381][T15774] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.850890][T15788] vlan3: entered promiscuous mode [ 418.856312][T15788] vlan2: entered promiscuous mode [ 418.865120][T15788] gretap0: entered promiscuous mode [ 419.021654][T15792] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.046583][T15792] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 419.087105][T15792] bridge_slave_0: default FDB implementation only supports local addresses [ 419.220588][T15799] bridge_slave_0: default FDB implementation only supports local addresses [ 419.429831][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.440118][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.454686][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.475624][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.503701][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.523302][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.535253][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.545063][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.569887][T15818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.587397][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.596896][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 419.681323][T15810] lo speed is unknown, defaulting to 1000 [ 419.946765][T15830] macvlan0: entered allmulticast mode [ 419.965893][T15830] veth1_vlan: entered allmulticast mode [ 419.989179][T15830] veth1_vlan: left allmulticast mode [ 420.036708][T15830] macvlan0 (unregistering): left allmulticast mode [ 420.599986][T15849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input42 [ 420.795789][T15862] netlink: 'syz.1.3785': attribute type 39 has an invalid length. [ 421.277992][T15881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.502000][T15887] lo speed is unknown, defaulting to 1000 [ 421.795884][T15902] netlink: 'syz.2.3802': attribute type 39 has an invalid length. [ 424.106791][T15947] lo speed is unknown, defaulting to 1000 [ 424.564456][T15965] lo speed is unknown, defaulting to 1000 [ 425.536639][T15997] __nla_validate_parse: 62 callbacks suppressed [ 425.536657][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 427.036408][T16030] loop3: detected capacity change from 0 to 512 [ 427.108173][T16030] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.110993][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3857'. [ 427.137330][T16030] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 427.171784][T16030] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 427.276270][T16030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 427.304263][T16030] System zones: 0-2, 18-18, 34-34 [ 427.320495][T16030] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3855: iget: bad i_size value: 360287970189639680 [ 427.334633][T16030] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3855: couldn't read orphan inode 15 (err -117) [ 427.355923][T16030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.440534][T16045] lo speed is unknown, defaulting to 1000 [ 428.089584][T16055] netlink: 'syz.2.3863': attribute type 39 has an invalid length. [ 428.228979][T13996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.444709][T16068] macvlan0: entered allmulticast mode [ 428.466920][T16068] veth1_vlan: entered allmulticast mode [ 428.478538][T16071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.505035][T16068] veth1_vlan: left allmulticast mode [ 428.533695][T16068] macvlan0 (unregistering): left allmulticast mode [ 428.717690][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 428.726612][T16075] vxlan0: left allmulticast mode [ 428.732857][T16075] vxlan0: left promiscuous mode [ 428.754393][T16075] bridge0: port 3(vxlan0) entered disabled state [ 428.772084][T16075] bridge_slave_1: left allmulticast mode [ 428.789727][T16075] bridge_slave_1: left promiscuous mode [ 428.796344][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.825259][T16075] bridge_slave_0: left allmulticast mode [ 428.831469][T16075] bridge_slave_0: left promiscuous mode [ 428.837568][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.273941][T16090] netlink: 'syz.0.3877': attribute type 39 has an invalid length. [ 429.376821][T16094] loop3: detected capacity change from 0 to 512 [ 429.437045][T16094] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.484914][T16094] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 429.541555][T16095] lo speed is unknown, defaulting to 1000 [ 429.541784][T16094] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 429.605363][T16094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 429.657161][T16094] System zones: 0-2, 18-18, 34-34 [ 429.697314][T16094] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3878: iget: bad i_size value: 360287970189639680 [ 429.738786][T16094] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3878: couldn't read orphan inode 15 (err -117) [ 429.788844][T16094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.387131][T16119] netlink: 'syz.0.3884': attribute type 2 has an invalid length. [ 430.506344][T16119] : entered promiscuous mode [ 430.714108][T13996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.969143][T16131] netlink: 'syz.0.3890': attribute type 39 has an invalid length. [ 432.118563][T16150] loop0: detected capacity change from 0 to 512 [ 432.166215][T16155] netlink: 'syz.2.3898': attribute type 2 has an invalid length. [ 432.226180][T16150] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.244535][T16150] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 432.276729][T16150] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 432.288896][T16155] : entered promiscuous mode [ 432.324283][T16160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3902'. [ 432.348304][T16150] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 432.368412][T16150] System zones: 0-2, 18-18, 34-34 [ 432.398759][T16150] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3897: iget: bad i_size value: 360287970189639680 [ 432.448118][T16150] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3897: couldn't read orphan inode 15 (err -117) [ 432.522111][T16150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.853520][T16170] lo speed is unknown, defaulting to 1000 [ 432.988330][T16178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3897'. [ 433.852207][T14231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.573472][T16203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3917'. [ 434.605947][T16205] netlink: 'syz.1.3916': attribute type 2 has an invalid length. [ 434.672004][T16205] : entered promiscuous mode [ 434.684290][T16207] netlink: 'syz.0.3918': attribute type 39 has an invalid length. [ 434.772043][T16211] loop4: detected capacity change from 0 to 512 [ 434.839254][T16211] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.857880][T16211] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 434.898307][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 434.922052][T16211] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 434.977930][T16211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 434.986037][T16211] System zones: 0-2, 18-18, 34-34 [ 434.997410][T16215] bridge_slave_1: left allmulticast mode [ 435.003174][T16215] bridge_slave_1: left promiscuous mode [ 435.036386][T16215] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.068576][T16211] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3920: iget: bad i_size value: 360287970189639680 [ 435.099739][T16211] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3920: couldn't read orphan inode 15 (err -117) [ 435.118756][T16215] bridge_slave_0: left allmulticast mode [ 435.125941][T16215] bridge_slave_0: left promiscuous mode [ 435.137627][T16215] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.163743][T16211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.504559][T16229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3920'. [ 435.992051][T13388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.184203][T16242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3932'. [ 436.191227][T16244] netlink: 'syz.2.3933': attribute type 39 has an invalid length. [ 436.342455][T16247] loop0: detected capacity change from 0 to 512 [ 436.411210][T16247] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 436.433292][T16247] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 436.477626][T16247] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 436.503484][T16247] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 436.550583][T16247] System zones: 0-2, 18-18, 34-34 [ 436.559185][T16247] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3934: iget: bad i_size value: 360287970189639680 [ 436.577262][T16247] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3934: couldn't read orphan inode 15 (err -117) [ 436.577533][T16255] macvlan0: entered allmulticast mode [ 436.607512][T16247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.615607][T16255] veth1_vlan: entered allmulticast mode [ 436.689825][T16262] veth1_vlan: left allmulticast mode [ 436.930221][T16262] macvlan0 (unregistering): left allmulticast mode [ 436.943504][T16274] loop2: detected capacity change from 0 to 512 [ 436.970732][T16274] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 436.984803][T16274] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 437.076286][T16277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3934'. [ 437.304101][T16274] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 437.334336][T16274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 437.368780][T16274] System zones: 0-2, 18-18, 34-34 [ 437.394270][T16274] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.3945: iget: bad i_size value: 360287970189639680 [ 437.441306][T16274] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3945: couldn't read orphan inode 15 (err -117) [ 437.468367][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 437.485973][T16282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3947'. [ 437.637457][T16274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.663315][T14231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.883860][T16287] netlink: 'syz.3.3950': attribute type 39 has an invalid length. [ 438.028411][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3945'. [ 438.575978][T13810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.657952][T16289] lo speed is unknown, defaulting to 1000 [ 439.215419][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 439.371414][T16332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.861360][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.274843][T16381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.490373][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'. [ 442.522357][T16388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3988'. [ 442.969443][T16400] loop3: detected capacity change from 0 to 512 [ 442.995984][T16400] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 443.012476][T16400] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 443.030651][T16400] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 443.043420][T16400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 443.051695][T16400] System zones: 0-2, 18-18, 34-34 [ 443.083750][T16400] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3992: iget: bad i_size value: 360287970189639680 [ 443.138621][T16400] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3992: couldn't read orphan inode 15 (err -117) [ 443.217698][T16400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.163893][T13996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.021372][T16454] loop1: detected capacity change from 0 to 512 [ 447.087769][T16454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.140016][T16454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 447.193458][T16454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4006: bg 0: block 248: padding at end of block bitmap is not set [ 447.216268][T16454] Quota error (device loop1): write_blk: dquota write failed [ 447.224454][T16454] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 447.234679][T16454] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4006: Failed to acquire dquot type 1 [ 447.257717][T16454] EXT4-fs (loop1): 1 truncate cleaned up [ 447.343211][T16454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 447.602428][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 449.093043][T16454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.735280][ C1] ------------[ cut here ]------------ [ 449.741059][ C1] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#1: syz.2.4011/16478 [ 449.751837][ C1] Modules linked in: [ 449.755858][ C1] CPU: 1 UID: 0 PID: 16478 Comm: syz.2.4011 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 449.767440][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.777535][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 449.783885][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 449.803550][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 449.809682][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888026b9da00 [ 449.817705][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.825699][ C1] RBP: 0000000000000000 R08: ffff888026b9da00 R09: 0000000000000003 [ 449.833720][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c732500 [ 449.841753][ C1] R13: dffffc0000000000 R14: ffff88805c7329d0 R15: ffff88807bd1ec24 [ 449.849774][ C1] FS: 00007f52b5b7b6c0(0000) GS:ffff888125d40000(0000) knlGS:0000000000000000 [ 449.858740][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.865334][ C1] CR2: 00007f52b5b7af98 CR3: 000000007897a000 CR4: 00000000003526f0 [ 449.873373][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.881383][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.889483][ C1] Call Trace: [ 449.892804][ C1] [ 449.895670][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 449.901275][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 449.906754][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 449.912878][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 449.918471][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 449.925694][ C1] __iterate_interfaces+0x2a8/0x590 [ 449.930931][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 449.937049][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 449.944257][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 449.950369][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 449.957433][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 449.962662][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 449.968574][ C1] __hrtimer_run_queues+0x529/0xc60 [ 449.973834][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 449.979620][ C1] ? read_tsc+0x9/0x20 [ 449.983721][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 449.989593][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 449.994728][ C1] handle_softirqs+0x283/0x870 [ 449.999556][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 450.004355][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 450.009725][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 450.014964][ C1] __irq_exit_rcu+0xca/0x1f0 [ 450.019647][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 450.024893][ C1] irq_exit_rcu+0x9/0x30 [ 450.029256][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 450.034949][ C1] [ 450.037938][ C1] [ 450.040893][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.046905][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 450.052804][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 3f 4c da 09 e8 7a 0e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 450.072483][ C1] RSP: 0018:ffffc900033c6c38 EFLAGS: 00000282 [ 450.078622][ C1] RAX: 35604d740cc19000 RBX: 0000000000000000 RCX: 35604d740cc19000 [ 450.086624][ C1] RDX: 0000000000000006 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 450.093318][T16476] lo speed is unknown, defaulting to 1000 [ 450.094641][ C1] RBP: ffffc900033c6c90 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 450.108399][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: ffff888026b9da00 [ 450.116393][ C1] R13: dffffc0000000000 R14: ffff8880688a3c00 R15: ffff8880b873c4d8 [ 450.124456][ C1] ? finish_task_switch+0x266/0x950 [ 450.129739][ C1] __schedule+0x16fd/0x4d00 [ 450.134284][ C1] ? arch_irq_work_raise+0x6d/0x80 [ 450.139463][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 450.145385][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 450.150764][ C1] ? __pfx___schedule+0x10/0x10 [ 450.155641][ C1] ? irq_work_queue+0xbc/0x140 [ 450.160483][ C1] ? bpf_send_signal_common+0x3b4/0x540 [ 450.166080][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 450.171443][ C1] preempt_schedule_irq+0xb5/0x150 [ 450.176600][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 450.182406][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 450.188297][ C1] irqentry_exit+0x6f/0x90 [ 450.192766][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 450.198305][ C1] RIP: 0010:__rcu_read_unlock+0x58/0xe0 [ 450.203885][ C1] Code: 43 0f b6 04 3c 84 c0 75 4f ff 0b 75 1d 4c 8d b7 48 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 <43> 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 [ 450.223550][ C1] RSP: 0018:ffffc900033c7028 EFLAGS: 00000246 [ 450.229677][ C1] RAX: 0000000000000000 RBX: ffff888026b9de44 RCX: 35604d740cc19000 [ 450.237708][ C1] RDX: 0000000000000003 RSI: ffffffff8db79231 RDI: ffff888026b9da00 [ 450.245705][ C1] RBP: dffffc0000000000 R08: ffffc900033c7178 R09: 0000000000000000 [ 450.253742][ C1] R10: ffffc900033c71d8 R11: fffff52000678e3d R12: 1ffff11004d73bc8 [ 450.261780][ C1] R13: ffffc900033c0000 R14: ffff888026b9de48 R15: dffffc0000000000 [ 450.269851][ C1] ? unwind_next_frame+0xa5/0x2390 [ 450.275031][ C1] unwind_next_frame+0x19ae/0x2390 [ 450.280237][ C1] ? unwind_next_frame+0xa5/0x2390 [ 450.285397][ C1] ? __unwind_start+0xf8/0x760 [ 450.290253][ C1] __unwind_start+0x5b9/0x760 [ 450.294992][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.301223][ C1] arch_stack_walk+0xe4/0x150 [ 450.305933][ C1] ? arch_stack_walk+0xe4/0x150 [ 450.310856][ C1] stack_trace_save+0x9c/0xe0 [ 450.315574][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 450.321036][ C1] ? __lock_acquire+0xab9/0xd20 [ 450.325927][ C1] kasan_save_track+0x3e/0x80 [ 450.330742][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 450.336149][ C1] __kasan_slab_alloc+0x6c/0x80 [ 450.341071][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 450.346911][ C1] ? shmem_alloc_inode+0x28/0x40 [ 450.351957][ C1] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 450.357480][ C1] shmem_alloc_inode+0x28/0x40 [ 450.362274][ C1] alloc_inode+0x67/0x1b0 [ 450.366635][ C1] new_inode+0x22/0x170 [ 450.370863][ C1] shmem_get_inode+0x346/0xe90 [ 450.375677][ C1] shmem_mknod+0x18c/0x3e0 [ 450.380173][ C1] shmem_mkdir+0x33/0x70 [ 450.384443][ C1] vfs_mkdir+0x306/0x510 [ 450.388797][ C1] ovl_workdir_create+0x48f/0x860 [ 450.393868][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 450.399671][ C1] ? __pfx_ovl_workdir_create+0x10/0x10 [ 450.405243][ C1] ? irqentry_exit+0x74/0x90 [ 450.409913][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.415172][ C1] ovl_get_indexdir+0x2b6/0x5f0 [ 450.420096][ C1] ? __pfx_ovl_get_indexdir+0x10/0x10 [ 450.425514][ C1] ovl_fill_super+0x2b35/0x35b0 [ 450.430470][ C1] ? __pfx_ovl_fill_super+0x10/0x10 [ 450.435698][ C1] ? rcu_is_watching+0x15/0xb0 [ 450.440567][ C1] ? __pfx_ovl_fill_super+0x10/0x10 [ 450.445801][ C1] ? __pfx_ovl_fill_super+0x10/0x10 [ 450.451069][ C1] get_tree_nodev+0xb8/0x150 [ 450.455701][ C1] vfs_get_tree+0x92/0x2b0 [ 450.460199][ C1] do_new_mount+0x24a/0xa40 [ 450.464736][ C1] __se_sys_mount+0x317/0x410 [ 450.469489][ C1] ? __pfx___se_sys_mount+0x10/0x10 [ 450.474728][ C1] ? __x64_sys_mount+0x20/0xc0 [ 450.479563][ C1] do_syscall_64+0xfa/0x3b0 [ 450.484102][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.490236][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 450.495899][ C1] ? clear_bhb_loop+0x60/0xb0 [ 450.500653][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.506575][ C1] RIP: 0033:0x7f52b4d8e929 [ 450.511069][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.530730][ C1] RSP: 002b:00007f52b5b7b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.539211][ C1] RAX: ffffffffffffffda RBX: 00007f52b4fb6160 RCX: 00007f52b4d8e929 [ 450.547245][ C1] RDX: 0000200000000200 RSI: 0000200000000000 RDI: 0000000000000000 [ 450.555237][ C1] RBP: 00007f52b4e10b39 R08: 0000200000000180 R09: 0000000000000000 [ 450.563272][ C1] R10: 00000000000000d4 R11: 0000000000000246 R12: 0000000000000000 [ 450.571293][ C1] R13: 0000000000000000 R14: 00007f52b4fb6160 R15: 00007ffc1d4a3008 [ 450.579335][ C1] [ 450.582384][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 450.589687][ C1] CPU: 1 UID: 0 PID: 16478 Comm: syz.2.4011 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 450.601248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.611318][ C1] Call Trace: [ 450.614594][ C1] [ 450.617434][ C1] dump_stack_lvl+0x99/0x250 [ 450.622035][ C1] ? __asan_memcpy+0x40/0x70 [ 450.626637][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.631849][ C1] ? __pfx__printk+0x10/0x10 [ 450.636461][ C1] panic+0x2db/0x790 [ 450.640372][ C1] ? __pfx_panic+0x10/0x10 [ 450.644813][ C1] __warn+0x334/0x4c0 [ 450.648803][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 450.654525][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 450.660246][ C1] report_bug+0x2be/0x4f0 [ 450.664588][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 450.670311][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 450.676024][ C1] ? __ieee80211_beacon_get+0x125f/0x1630 [ 450.681745][ C1] handle_bug+0x84/0x160 [ 450.686001][ C1] exc_invalid_op+0x1a/0x50 [ 450.690515][ C1] asm_exc_invalid_op+0x1a/0x20 [ 450.695367][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 450.701704][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 450.721314][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 450.727394][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888026b9da00 [ 450.735390][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.743357][ C1] RBP: 0000000000000000 R08: ffff888026b9da00 R09: 0000000000000003 [ 450.751328][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c732500 [ 450.759299][ C1] R13: dffffc0000000000 R14: ffff88805c7329d0 R15: ffff88807bd1ec24 [ 450.767290][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 450.772854][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 450.778595][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 450.784315][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 450.789865][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 450.795331][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 450.801416][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 450.806958][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 450.814157][ C1] __iterate_interfaces+0x2a8/0x590 [ 450.819355][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 450.825432][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 450.832649][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 450.838738][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 450.845775][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 450.850991][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 450.856803][ C1] __hrtimer_run_queues+0x529/0xc60 [ 450.862031][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 450.867767][ C1] ? read_tsc+0x9/0x20 [ 450.871844][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 450.877669][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 450.882817][ C1] handle_softirqs+0x283/0x870 [ 450.887597][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 450.892384][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 450.897690][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 450.902894][ C1] __irq_exit_rcu+0xca/0x1f0 [ 450.907489][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 450.912704][ C1] irq_exit_rcu+0x9/0x30 [ 450.916970][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 450.922619][ C1] [ 450.925557][ C1] [ 450.928490][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.934466][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 450.940279][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 3f 4c da 09 e8 7a 0e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 450.959909][ C1] RSP: 0018:ffffc900033c6c38 EFLAGS: 00000282 [ 450.965985][ C1] RAX: 35604d740cc19000 RBX: 0000000000000000 RCX: 35604d740cc19000 [ 450.973965][ C1] RDX: 0000000000000006 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 450.981953][ C1] RBP: ffffc900033c6c90 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 450.989949][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: ffff888026b9da00 [ 450.997922][ C1] R13: dffffc0000000000 R14: ffff8880688a3c00 R15: ffff8880b873c4d8 [ 451.005906][ C1] ? finish_task_switch+0x266/0x950 [ 451.011121][ C1] __schedule+0x16fd/0x4d00 [ 451.015637][ C1] ? arch_irq_work_raise+0x6d/0x80 [ 451.020774][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 451.026690][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 451.031988][ C1] ? __pfx___schedule+0x10/0x10 [ 451.036851][ C1] ? irq_work_queue+0xbc/0x140 [ 451.041711][ C1] ? bpf_send_signal_common+0x3b4/0x540 [ 451.047273][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 451.052564][ C1] preempt_schedule_irq+0xb5/0x150 [ 451.057694][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 451.063436][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 451.069254][ C1] irqentry_exit+0x6f/0x90 [ 451.073684][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 451.079161][ C1] RIP: 0010:__rcu_read_unlock+0x58/0xe0 [ 451.084716][ C1] Code: 43 0f b6 04 3c 84 c0 75 4f ff 0b 75 1d 4c 8d b7 48 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 <43> 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 [ 451.104325][ C1] RSP: 0018:ffffc900033c7028 EFLAGS: 00000246 [ 451.110393][ C1] RAX: 0000000000000000 RBX: ffff888026b9de44 RCX: 35604d740cc19000 [ 451.118365][ C1] RDX: 0000000000000003 RSI: ffffffff8db79231 RDI: ffff888026b9da00 [ 451.126332][ C1] RBP: dffffc0000000000 R08: ffffc900033c7178 R09: 0000000000000000 [ 451.134299][ C1] R10: ffffc900033c71d8 R11: fffff52000678e3d R12: 1ffff11004d73bc8 [ 451.142266][ C1] R13: ffffc900033c0000 R14: ffff888026b9de48 R15: dffffc0000000000 [ 451.150262][ C1] ? unwind_next_frame+0xa5/0x2390 [ 451.155386][ C1] unwind_next_frame+0x19ae/0x2390 [ 451.160514][ C1] ? unwind_next_frame+0xa5/0x2390 [ 451.165718][ C1] ? __unwind_start+0xf8/0x760 [ 451.170492][ C1] __unwind_start+0x5b9/0x760 [ 451.175180][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.181338][ C1] arch_stack_walk+0xe4/0x150 [ 451.186021][ C1] ? arch_stack_walk+0xe4/0x150 [ 451.190870][ C1] stack_trace_save+0x9c/0xe0 [ 451.195546][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 451.200928][ C1] ? __lock_acquire+0xab9/0xd20 [ 451.205795][ C1] kasan_save_track+0x3e/0x80 [ 451.210565][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 451.215945][ C1] __kasan_slab_alloc+0x6c/0x80 [ 451.220802][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 451.226633][ C1] ? shmem_alloc_inode+0x28/0x40 [ 451.231606][ C1] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 451.237072][ C1] shmem_alloc_inode+0x28/0x40 [ 451.241846][ C1] alloc_inode+0x67/0x1b0 [ 451.246179][ C1] new_inode+0x22/0x170 [ 451.250331][ C1] shmem_get_inode+0x346/0xe90 [ 451.255101][ C1] shmem_mknod+0x18c/0x3e0 [ 451.259519][ C1] shmem_mkdir+0x33/0x70 [ 451.263757][ C1] vfs_mkdir+0x306/0x510 [ 451.268044][ C1] ovl_workdir_create+0x48f/0x860 [ 451.273084][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 451.278816][ C1] ? __pfx_ovl_workdir_create+0x10/0x10 [ 451.284366][ C1] ? irqentry_exit+0x74/0x90 [ 451.288953][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.294168][ C1] ovl_get_indexdir+0x2b6/0x5f0 [ 451.299026][ C1] ? __pfx_ovl_get_indexdir+0x10/0x10 [ 451.304403][ C1] ovl_fill_super+0x2b35/0x35b0 [ 451.309278][ C1] ? __pfx_ovl_fill_super+0x10/0x10 [ 451.314473][ C1] ? rcu_is_watching+0x15/0xb0 [ 451.319260][ C1] ? __pfx_ovl_fill_super+0x10/0x10 [ 451.324464][ C1] ? __pfx_ovl_fill_super+0x10/0x10 [ 451.329662][ C1] get_tree_nodev+0xb8/0x150 [ 451.334262][ C1] vfs_get_tree+0x92/0x2b0 [ 451.338677][ C1] do_new_mount+0x24a/0xa40 [ 451.343188][ C1] __se_sys_mount+0x317/0x410 [ 451.347886][ C1] ? __pfx___se_sys_mount+0x10/0x10 [ 451.353094][ C1] ? __x64_sys_mount+0x20/0xc0 [ 451.357862][ C1] do_syscall_64+0xfa/0x3b0 [ 451.362395][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.368467][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 451.374096][ C1] ? clear_bhb_loop+0x60/0xb0 [ 451.378775][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.384670][ C1] RIP: 0033:0x7f52b4d8e929 [ 451.389098][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.408700][ C1] RSP: 002b:00007f52b5b7b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 451.417139][ C1] RAX: ffffffffffffffda RBX: 00007f52b4fb6160 RCX: 00007f52b4d8e929 [ 451.425112][ C1] RDX: 0000200000000200 RSI: 0000200000000000 RDI: 0000000000000000 [ 451.433085][ C1] RBP: 00007f52b4e10b39 R08: 0000200000000180 R09: 0000000000000000 [ 451.441057][ C1] R10: 00000000000000d4 R11: 0000000000000246 R12: 0000000000000000 [ 451.449032][ C1] R13: 0000000000000000 R14: 00007f52b4fb6160 R15: 00007ffc1d4a3008 [ 451.457120][ C1] [ 451.460490][ C1] Kernel Offset: disabled [ 451.464820][ C1] Rebooting in 86400 seconds..