last executing test programs: 6.483357805s ago: executing program 3 (id=1148): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, 0x0, 0x208000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) 4.162846495s ago: executing program 0 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 3.894484626s ago: executing program 3 (id=1161): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x8a, 0x21, @private1, @remote, 0x20, 0x700, 0xc0ae89c, 0x2}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r3, 0x409, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.779792344s ago: executing program 0 (id=1163): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x80000000, 0xffffffff, 0x0}) 3.604542669s ago: executing program 0 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) inotify_init1(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f00000000c0)) 3.193665887s ago: executing program 2 (id=1168): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 3.075268999s ago: executing program 1 (id=1169): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[], 0x10) 3.004282834s ago: executing program 4 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b79", 0x4d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed24f77c513e80ec3b5dd887c2e06e962f824f5b806e51ff", 0x67}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.682509751s ago: executing program 3 (id=1171): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, 0x0, 0x208000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) 2.633749207s ago: executing program 4 (id=1172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) poll(&(0x7f0000000080), 0x0, 0x400) shutdown(r0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x2b, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000e8d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2.633406591s ago: executing program 1 (id=1173): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.595122062s ago: executing program 1 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 1.306500997s ago: executing program 1 (id=1175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) 1.13760524s ago: executing program 4 (id=1176): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@remote, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x4000}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) 943.588692ms ago: executing program 1 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 882.348452ms ago: executing program 2 (id=1178): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) 757.539471ms ago: executing program 4 (id=1179): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) 602.985791ms ago: executing program 3 (id=1180): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x5}, '@'}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 601.767879ms ago: executing program 1 (id=1181): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x8a, 0x21, @private1, @remote, 0x20, 0x700, 0xc0ae89c, 0x2}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r3, 0x409, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) 549.75163ms ago: executing program 2 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x348e}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200, 0x0, 0x0, 0x7fff0000}]}) kexec_load(0x4, 0xa, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 490.562459ms ago: executing program 4 (id=1183): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x115, 0x45d72479, 0xe6}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r3, 0x3}, 0x8) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) 449.223626ms ago: executing program 0 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 353.776286ms ago: executing program 2 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc000900b80006990300000015000500fe800000003f00000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x40400c0) 302.576535ms ago: executing program 4 (id=1186): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x3ff, 0x5]}, &(0x7f0000000180)=0x44) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 270.579423ms ago: executing program 0 (id=1187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x40) 168.188673ms ago: executing program 2 (id=1188): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x2, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 167.381661ms ago: executing program 3 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3fffff) 77.911849ms ago: executing program 0 (id=1190): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, 0x0, 0x208000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) 27.51721ms ago: executing program 3 (id=1191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 0s ago: executing program 2 (id=1192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 71.160020][ T5827] cgroup: Unknown subsys name 'net' [ 71.284922][ T5827] cgroup: Unknown subsys name 'cpuset' [ 71.293698][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.740207][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.275311][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.284273][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.292108][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.301509][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.321297][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.348229][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.359150][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.368276][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.368382][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.384642][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.393125][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.403385][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.412515][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.420058][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.427965][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.428629][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.443707][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.454730][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.472876][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.480596][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.481695][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.499911][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.524860][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.548646][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.556969][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.047691][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 76.265900][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 76.357807][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 76.383248][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.390955][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.399373][ T5848] bridge_slave_0: entered allmulticast mode [ 76.409493][ T5848] bridge_slave_0: entered promiscuous mode [ 76.455133][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.462456][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.469623][ T5848] bridge_slave_1: entered allmulticast mode [ 76.478002][ T5848] bridge_slave_1: entered promiscuous mode [ 76.485934][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 76.501832][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 76.583501][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.596208][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.706358][ T5848] team0: Port device team_slave_0 added [ 76.714930][ T5848] team0: Port device team_slave_1 added [ 76.751767][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.758925][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.766414][ T5840] bridge_slave_0: entered allmulticast mode [ 76.773852][ T5840] bridge_slave_0: entered promiscuous mode [ 76.816245][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.823732][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.830902][ T5840] bridge_slave_1: entered allmulticast mode [ 76.838712][ T5840] bridge_slave_1: entered promiscuous mode [ 76.858963][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.866169][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.892546][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.956358][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.964068][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.971774][ T5842] bridge_slave_0: entered allmulticast mode [ 76.978777][ T5842] bridge_slave_0: entered promiscuous mode [ 76.987421][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.996484][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.023230][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.076024][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.083272][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.090479][ T5837] bridge_slave_0: entered allmulticast mode [ 77.098050][ T5837] bridge_slave_0: entered promiscuous mode [ 77.108143][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.117497][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.125464][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.132885][ T5842] bridge_slave_1: entered allmulticast mode [ 77.139840][ T5842] bridge_slave_1: entered promiscuous mode [ 77.159210][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.166592][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.174156][ T5850] bridge_slave_0: entered allmulticast mode [ 77.181121][ T5850] bridge_slave_0: entered promiscuous mode [ 77.189062][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.196601][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.204283][ T5837] bridge_slave_1: entered allmulticast mode [ 77.211393][ T5837] bridge_slave_1: entered promiscuous mode [ 77.219776][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.245484][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.252721][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.260096][ T5850] bridge_slave_1: entered allmulticast mode [ 77.269672][ T5850] bridge_slave_1: entered promiscuous mode [ 77.325523][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.337462][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.409512][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.423099][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.434459][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.447368][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.458639][ T5840] team0: Port device team_slave_0 added [ 77.468423][ T5840] team0: Port device team_slave_1 added [ 77.475076][ T5846] Bluetooth: hci1: command tx timeout [ 77.543125][ T5848] hsr_slave_0: entered promiscuous mode [ 77.549584][ T5848] hsr_slave_1: entered promiscuous mode [ 77.555306][ T5846] Bluetooth: hci2: command tx timeout [ 77.555594][ T5846] Bluetooth: hci0: command tx timeout [ 77.566388][ T5857] Bluetooth: hci3: command tx timeout [ 77.584954][ T5842] team0: Port device team_slave_0 added [ 77.632266][ T5846] Bluetooth: hci4: command tx timeout [ 77.635945][ T5842] team0: Port device team_slave_1 added [ 77.667899][ T5850] team0: Port device team_slave_0 added [ 77.676837][ T5850] team0: Port device team_slave_1 added [ 77.686923][ T5837] team0: Port device team_slave_0 added [ 77.695920][ T5837] team0: Port device team_slave_1 added [ 77.703154][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.710104][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.737092][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.812527][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.819509][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.846159][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.875482][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.882972][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.909118][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.938956][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.946041][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.972520][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.985248][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.992708][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.018945][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.037621][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.044792][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.070839][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.090665][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.097944][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.124214][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.137429][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.144805][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.171650][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.262542][ T5840] hsr_slave_0: entered promiscuous mode [ 78.268791][ T5840] hsr_slave_1: entered promiscuous mode [ 78.275732][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.283669][ T5840] Cannot create hsr debugfs directory [ 78.452652][ T5850] hsr_slave_0: entered promiscuous mode [ 78.458940][ T5850] hsr_slave_1: entered promiscuous mode [ 78.467071][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.474707][ T5850] Cannot create hsr debugfs directory [ 78.486674][ T5837] hsr_slave_0: entered promiscuous mode [ 78.493423][ T5837] hsr_slave_1: entered promiscuous mode [ 78.499424][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.507192][ T5837] Cannot create hsr debugfs directory [ 78.517896][ T5842] hsr_slave_0: entered promiscuous mode [ 78.525082][ T5842] hsr_slave_1: entered promiscuous mode [ 78.531116][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.538721][ T5842] Cannot create hsr debugfs directory [ 78.685332][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.704569][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.760551][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.800022][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.088784][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.100504][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.116473][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.127920][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.230213][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.256797][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.267966][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.280194][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.304670][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.373468][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.420222][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.427559][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.438111][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.445300][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.493143][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.519766][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.554687][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.555453][ T5846] Bluetooth: hci1: command tx timeout [ 79.589905][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.631864][ T5846] Bluetooth: hci3: command tx timeout [ 79.632025][ T5857] Bluetooth: hci2: command tx timeout [ 79.637374][ T5160] Bluetooth: hci0: command tx timeout [ 79.674793][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.701070][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.714255][ T5160] Bluetooth: hci4: command tx timeout [ 79.732882][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.774889][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.789131][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.832539][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.863215][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.870520][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.908066][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.915282][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.974977][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.008409][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.065016][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.087462][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.094669][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.173753][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.180938][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.245482][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.336410][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.372729][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.401210][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.408401][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.452139][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.475522][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.482784][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.587211][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.645991][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.653165][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.677897][ T5848] veth0_vlan: entered promiscuous mode [ 80.701050][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.708281][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.767238][ T5848] veth1_vlan: entered promiscuous mode [ 80.910672][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.960768][ T5848] veth0_macvtap: entered promiscuous mode [ 81.008387][ T5848] veth1_macvtap: entered promiscuous mode [ 81.070817][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.106837][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.119870][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.142722][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.175438][ T5842] veth0_vlan: entered promiscuous mode [ 81.187174][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.198878][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.208138][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.217427][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.259568][ T5842] veth1_vlan: entered promiscuous mode [ 81.368222][ T5840] veth0_vlan: entered promiscuous mode [ 81.407041][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.440529][ T5850] veth0_vlan: entered promiscuous mode [ 81.473327][ T5842] veth0_macvtap: entered promiscuous mode [ 81.489754][ T5840] veth1_vlan: entered promiscuous mode [ 81.517011][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.534588][ T5842] veth1_macvtap: entered promiscuous mode [ 81.542426][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.550872][ T5850] veth1_vlan: entered promiscuous mode [ 81.599088][ T5837] veth0_vlan: entered promiscuous mode [ 81.630510][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.646491][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.651220][ T5160] Bluetooth: hci1: command tx timeout [ 81.698024][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.711573][ T5160] Bluetooth: hci2: command tx timeout [ 81.717020][ T5160] Bluetooth: hci0: command tx timeout [ 81.723127][ T5160] Bluetooth: hci3: command tx timeout [ 81.730046][ T5840] veth0_macvtap: entered promiscuous mode [ 81.767705][ T5837] veth1_vlan: entered promiscuous mode [ 81.791620][ T5160] Bluetooth: hci4: command tx timeout [ 81.815788][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.852711][ T5840] veth1_macvtap: entered promiscuous mode [ 81.905996][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.917421][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.932898][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.941685][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.950484][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035823][ T5850] veth0_macvtap: entered promiscuous mode [ 82.080349][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.127285][ T5850] veth1_macvtap: entered promiscuous mode [ 82.147422][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.215172][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.231658][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240446][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.254978][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294032][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.305353][ T5837] veth0_macvtap: entered promiscuous mode [ 82.341224][ T5837] veth1_macvtap: entered promiscuous mode [ 82.361050][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.436704][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.448126][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.461610][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.470984][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.481891][ T5960] netlink: 292 bytes leftover after parsing attributes in process `syz.4.7'. [ 82.500277][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.502378][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.519156][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.526542][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.539109][ T5960] netlink: 292 bytes leftover after parsing attributes in process `syz.4.7'. [ 82.542004][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.564083][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.573993][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.584761][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.788848][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.808570][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.050828][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.069058][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.185516][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.195052][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.434982][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.458594][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.505205][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.522887][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.545642][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.571789][ T5979] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.647536][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.695241][ T5979] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.705665][ T5979] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.725886][ T5160] Bluetooth: hci1: command tx timeout [ 83.791526][ T5160] Bluetooth: hci0: command tx timeout [ 83.797011][ T5160] Bluetooth: hci2: command tx timeout [ 83.802560][ T5857] Bluetooth: hci3: command tx timeout [ 83.877532][ T5160] Bluetooth: hci4: command tx timeout [ 83.901757][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.909748][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.979081][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.005871][ T30] audit: type=1326 audit(1755713953.537:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.023792][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 84.036166][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.050691][ T30] audit: type=1326 audit(1755713953.537:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.083967][ T30] audit: type=1326 audit(1755713953.537:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.097017][ T5989] sctp: [Deprecated]: syz.0.14 (pid 5989) Use of int in max_burst socket option deprecated. [ 84.097017][ T5989] Use struct sctp_assoc_value instead [ 84.116677][ T30] audit: type=1326 audit(1755713953.537:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.162300][ T30] audit: type=1326 audit(1755713953.577:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.188795][ T30] audit: type=1326 audit(1755713953.577:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.216285][ T30] audit: type=1326 audit(1755713953.577:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.243936][ T30] audit: type=1326 audit(1755713953.597:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.329454][ T30] audit: type=1326 audit(1755713953.597:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 84.355587][ T30] audit: type=1326 audit(1755713953.597:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 86.083585][ T6008] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.137242][ T6011] cgroup: Need name or subsystem set [ 86.288978][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 86.753613][ T10] cfg80211: failed to load regulatory.db [ 87.554844][ T6030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.177380][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 89.337567][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 89.337584][ T30] audit: type=1326 audit(1755713958.887:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.365373][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.431543][ T30] audit: type=1326 audit(1755713958.887:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.487133][ T30] audit: type=1326 audit(1755713958.887:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.529338][ T30] audit: type=1326 audit(1755713958.887:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.605265][ T30] audit: type=1326 audit(1755713958.887:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.671988][ T30] audit: type=1326 audit(1755713958.897:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.758712][ T30] audit: type=1326 audit(1755713958.897:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.780172][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.820428][ T30] audit: type=1326 audit(1755713958.897:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.842496][ T30] audit: type=1326 audit(1755713958.897:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 89.866498][ T30] audit: type=1326 audit(1755713958.937:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 91.795073][ T6130] bridge_slave_0: left allmulticast mode [ 91.801605][ T6130] bridge_slave_0: left promiscuous mode [ 91.808742][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.868465][ T6130] bridge_slave_1: left allmulticast mode [ 91.909059][ T6130] bridge_slave_1: left promiscuous mode [ 91.932621][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.010062][ T6130] bond0: (slave bond_slave_0): Releasing backup interface [ 92.044632][ T6130] bond0: (slave bond_slave_1): Releasing backup interface [ 92.085732][ T6130] team0: Port device team_slave_0 removed [ 92.125424][ T6130] team0: Port device team_slave_1 removed [ 92.135573][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.149668][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.166036][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.178224][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.305716][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.74'. [ 92.322459][ T6155] netlink: 196 bytes leftover after parsing attributes in process `syz.1.74'. [ 92.340937][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.74'. [ 92.363930][ T6155] netlink: 196 bytes leftover after parsing attributes in process `syz.1.74'. [ 92.377407][ T6151] syzkaller1: entered promiscuous mode [ 92.388279][ T6151] syzkaller1: entered allmulticast mode [ 94.605763][ T6186] hub 6-0:1.0: USB hub found [ 94.625601][ T6186] hub 6-0:1.0: 1 port detected [ 94.710714][ T6192] geneve2: entered promiscuous mode [ 94.739588][ T6192] geneve2: entered allmulticast mode [ 95.172673][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 95.172690][ T30] audit: type=1326 audit(1755713964.727:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.3.96" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x0 [ 95.249767][ T30] audit: type=1326 audit(1755713964.787:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 95.273017][ T30] audit: type=1326 audit(1755713964.787:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 95.298560][ T30] audit: type=1326 audit(1755713964.787:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 95.405579][ T6187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.511722][ T30] audit: type=1326 audit(1755713964.787:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 95.533794][ T30] audit: type=1326 audit(1755713964.787:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 95.555331][ T30] audit: type=1326 audit(1755713964.787:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 95.597238][ T30] audit: type=1326 audit(95.218:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 96.359063][ T30] audit: type=1326 audit(95.218:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 96.967841][ T6232] 9pnet: p9_errstr2errno: server reported unknown error [ 97.437957][ T6241] netlink: 224 bytes leftover after parsing attributes in process `syz.0.109'. [ 97.447590][ T6241] ksmbd: Unknown IPC event: 1, ignore. [ 97.741611][ T30] audit: type=1326 audit(97.498:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 97.954242][ T6253] capability: warning: `syz.4.113' uses 32-bit capabilities (legacy support in use) [ 98.260495][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.113'. [ 99.295674][ T6262] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 99.365131][ T6262] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 101.012684][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 101.223677][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 101.237178][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.247993][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.255964][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.263896][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.274721][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.282488][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.290358][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.298172][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.961539][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 102.007152][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 102.081414][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 102.123506][ T5931] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 102.211998][ T5931] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 102.497597][ T6316] process 'syz.0.135' launched './file0' with NULL argv: empty string added [ 102.531013][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 102.558937][ T6318] Zero length message leads to an empty skb [ 102.687306][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 102.687324][ T30] audit: type=1326 audit(102.658:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 102.760100][ T30] audit: type=1326 audit(102.708:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 102.844274][ T30] audit: type=1326 audit(102.708:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 102.922933][ T30] audit: type=1326 audit(102.708:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 102.948922][ T30] audit: type=1326 audit(102.708:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 102.983651][ T30] audit: type=1326 audit(102.708:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 103.027755][ T6333] netlink: 'wg1': attribute type 13 has an invalid length. [ 103.041849][ T30] audit: type=1326 audit(102.708:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 103.068095][ T6333] netlink: 'wg1': attribute type 17 has an invalid length. [ 103.091473][ T30] audit: type=1326 audit(102.708:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 103.207926][ T6333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.694318][ T30] audit: type=1326 audit(103.668:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6328 comm="syz.1.141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc41038ebe9 code=0x0 [ 103.725245][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 103.886248][ T30] audit: type=1326 audit(103.858:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 104.095857][ T6373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.157'. [ 104.886746][ T6407] 9pnet_fd: Insufficient options for proto=fd [ 106.002094][ T6446] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.259642][ T3616] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.279289][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 108.279308][ T30] audit: type=1800 audit(108.248:134): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.194" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 108.309277][ T6469] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 108.322401][ T6469] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 108.356287][ T6469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 108.438657][ T6469] syz.1.194 (6469) used greatest stack depth: 16536 bytes left [ 108.903875][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 108.914262][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.954796][ T30] audit: type=1107 audit(108.868:135): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 109.012600][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.701057][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.206'. [ 109.713211][ T6497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.205'. [ 109.714596][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.206'. [ 109.739978][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.206'. [ 109.795225][ T5160] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 109.829862][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 109.937715][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.206'. [ 110.031447][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.206'. [ 110.078132][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.206'. [ 110.395200][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.206'. [ 111.023716][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.102814][ T30] audit: type=1107 audit(110.998:136): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 111.313315][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.167977][ T3580] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.695269][ T30] audit: type=1326 audit(112.638:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 112.759002][ T30] audit: type=1326 audit(112.638:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 112.780541][ T30] audit: type=1326 audit(112.638:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 112.804741][ T30] audit: type=1326 audit(112.638:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 112.825643][ T30] audit: type=1326 audit(112.638:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 112.853298][ T30] audit: type=1326 audit(112.638:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 113.977151][ T30] audit: type=1107 audit(113.328:143): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 114.031484][ T5160] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.031984][ T5846] Bluetooth: hci5: command 0x1003 tx timeout [ 114.109342][ T6574] __nla_validate_parse: 5 callbacks suppressed [ 114.109364][ T6574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.497273][ T6592] netlink: 360 bytes leftover after parsing attributes in process `syz.0.243'. [ 115.010882][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 115.820365][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 115.861485][ T30] audit: type=1107 audit(115.788:144): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 117.143686][ T5846] Bluetooth: hci5: sending frame failed (-49) [ 117.150883][ T5160] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 117.520172][ T6592] infiniband syz!: set down [ 117.528102][ T6592] infiniband syz!: added team_slave_0 [ 117.693302][ T6627] fuse: Bad value for 'fd' [ 117.989528][ T6592] syz!: rxe_create_cq: returned err = -12 [ 118.008489][ T6592] infiniband syz!: Couldn't create ib_mad CQ [ 118.031686][ T6592] infiniband syz!: Couldn't open port 1 [ 118.156609][ T6592] RDS/IB: syz!: added [ 118.161124][ T6592] smc: adding ib device syz! with port count 1 [ 118.180202][ T6592] smc: ib device syz! port 1 has pnetid [ 118.877450][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 118.888615][ T30] audit: type=1107 audit(118.848:145): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 120.201983][ T6666] syzkaller0: entered allmulticast mode [ 120.247748][ T6666] syzkaller0 (unregistering): left allmulticast mode [ 120.888034][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 121.677596][ T6688] syz.2.275 (6688) used greatest stack depth: 15960 bytes left [ 121.814452][ T6691] fuse: Invalid rootmode [ 121.815028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.112497][ T5846] Bluetooth: hci5: command 0x1003 tx timeout [ 122.123826][ T5160] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 122.411498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.420261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.632187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 122.686090][ T30] audit: type=1326 audit(122.658:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 122.756952][ T30] audit: type=1326 audit(122.658:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 122.817867][ T30] audit: type=1326 audit(122.658:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 122.883770][ T30] audit: type=1326 audit(122.658:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 122.937798][ T30] audit: type=1326 audit(122.658:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 123.007846][ T30] audit: type=1326 audit(122.658:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 123.066553][ T30] audit: type=1326 audit(122.658:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 123.167895][ T30] audit: type=1326 audit(122.658:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 123.189605][ T6712] macvtap0: refused to change device tx_queue_len [ 123.451104][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.285'. [ 124.114019][ T6722] tipc: Started in network mode [ 124.147325][ T6722] tipc: Node identity 62af52c345eb, cluster identity 4711 [ 124.156569][ T6728] netlink: 'syz.1.290': attribute type 6 has an invalid length. [ 124.180348][ T6722] tipc: Enabled bearer , priority 0 [ 124.294803][ T6724] tipc: Disabling bearer [ 124.316577][ T30] audit: type=1326 audit(124.288:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 124.349810][ T30] audit: type=1326 audit(124.288:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 124.554793][ T6744] netlink: 'syz.0.296': attribute type 3 has an invalid length. [ 124.568360][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 124.611517][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 124.634930][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 124.653266][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 124.673574][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 124.711384][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 124.719120][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 124.822282][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 124.840566][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.401546][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.409565][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.417900][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.425791][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.433761][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.441688][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.444308][ T6754] Can't find ip_set type hash:net,por [ 125.449832][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.463336][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.471032][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.678591][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.687027][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.694781][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.702534][ T24] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 125.729916][ T24] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 125.810026][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 126.476570][ T6770] netlink: 'syz.1.304': attribute type 6 has an invalid length. [ 128.088052][ T6791] netlink: 592 bytes leftover after parsing attributes in process `syz.2.313'. [ 128.950565][ T6799] Can't find ip_set type hash:net,por [ 129.284281][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'. [ 130.041875][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 130.041893][ T30] audit: type=1326 audit(130.018:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6811 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 130.104081][ T30] audit: type=1326 audit(130.018:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6811 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 130.424282][ T5931] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 130.865834][ T5931] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.881240][ T5931] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 130.890440][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.933649][ T5931] usb 2-1: config 0 descriptor?? [ 131.219000][ T5931] usb 2-1: USB disconnect, device number 2 [ 131.498141][ T30] audit: type=1326 audit(131.468:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x0 [ 132.837740][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.861965][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.184254][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.339'. [ 135.256456][ T6880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.406988][ T6886] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.426378][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 135.437981][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.457690][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.470307][ T6880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.483089][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.490650][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.498855][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.507181][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.507790][ T6886] IPVS: Error joining to the multicast group [ 135.514913][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.528754][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.540007][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.550975][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.559331][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.567227][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.574856][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.582695][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.590673][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.598434][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.600521][ T6880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.610267][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.624675][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.632308][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.647627][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.659056][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.669145][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.676649][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.684117][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.691860][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.699358][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.706816][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.715469][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.723065][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.730531][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.738065][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.741099][ T6880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.755287][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 135.769012][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 135.888530][ T6880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.909094][ T6880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.929926][ T6880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.973209][ T6880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.223009][ T6903] hub 9-0:1.0: USB hub found [ 136.228024][ T6903] hub 9-0:1.0: 1 port detected [ 137.055332][ T6911] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.357'. [ 137.062661][ T6915] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.151596][ T6917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.358'. [ 137.285592][ T30] audit: type=1326 audit(137.258:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f337e58ebe9 code=0x0 [ 137.397029][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.404849][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.325741][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.366739][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.515799][ T6921] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.537294][ T6921] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.555584][ T6921] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.565032][ T6921] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.670287][ T6943] netlink: 'syz.4.368': attribute type 21 has an invalid length. [ 138.700072][ T6943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.368'. [ 138.925060][ T6947] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.370'. [ 139.890298][ T6968] 9pnet_fd: Insufficient options for proto=fd [ 139.936962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.211456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.154216][ T6986] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.381'. [ 141.794116][ T7000] pim6reg: entered allmulticast mode [ 141.814616][ T7000] pim6reg: left allmulticast mode [ 141.998744][ T7009] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.394'. [ 143.501361][ T30] audit: type=1326 audit(143.468:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.553042][ T30] audit: type=1326 audit(143.468:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.636298][ T30] audit: type=1326 audit(143.468:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.685883][ T30] audit: type=1326 audit(143.468:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.733245][ T30] audit: type=1326 audit(143.468:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.808496][ T30] audit: type=1326 audit(143.468:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.893723][ T30] audit: type=1326 audit(143.468:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.921261][ T30] audit: type=1326 audit(143.468:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 143.980915][ T30] audit: type=1326 audit(143.468:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 144.065197][ T30] audit: type=1326 audit(143.468:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 144.140664][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 144.327897][ T7055] netlink: '+}[@': attribute type 21 has an invalid length. [ 144.350513][ T7055] netlink: 156 bytes leftover after parsing attributes in process `+}[@'. [ 144.859997][ T7069] fuse: Bad value for 'fd' [ 145.277351][ T7072] netlink: 'wg1': attribute type 13 has an invalid length. [ 145.309310][ T7072] netlink: 'wg1': attribute type 17 has an invalid length. [ 145.537873][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.571691][ T7072] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.615756][ T7072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.098087][ T3453] Bluetooth: hci5: Frame reassembly failed (-84) [ 147.606071][ T7118] netlink: 'syz.0.435': attribute type 6 has an invalid length. [ 147.843761][ T7120] 9pnet: Could not find request transport: 0xffffffffffffffff [ 148.031954][ T5846] Bluetooth: hci5: command 0x1003 tx timeout [ 148.038243][ T5160] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.126856][ T7128] netlink: 'syz.0.437': attribute type 13 has an invalid length. [ 148.172400][ T7128] netlink: 'syz.0.437': attribute type 17 has an invalid length. [ 148.444495][ T7128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.694382][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 148.694398][ T30] audit: type=1326 audit(148.668:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x0 [ 151.173253][ T7169] netlink: 'wg1': attribute type 13 has an invalid length. [ 151.215281][ T7169] netlink: 'wg1': attribute type 17 has an invalid length. [ 151.238440][ T30] audit: type=1326 audit(151.208:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7177 comm="syz.4.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x0 [ 151.686776][ T7169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.369788][ T30] audit: type=1326 audit(152.338:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.2.471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x0 [ 152.455202][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 153.414634][ T30] audit: type=1326 audit(153.378:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7231 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 153.469842][ T30] audit: type=1326 audit(153.378:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7231 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 153.496665][ T30] audit: type=1326 audit(153.408:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7231 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 153.517997][ T30] audit: type=1326 audit(153.408:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7231 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 153.548337][ T30] audit: type=1326 audit(153.408:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7231 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 153.574201][ T30] audit: type=1326 audit(153.408:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7231 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 153.602082][ T30] audit: type=1326 audit(153.408:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7231 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 153.736276][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 153.736293][ T30] audit: type=1326 audit(153.708:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7245 comm="syz.2.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x0 [ 155.167486][ T30] audit: type=1326 audit(155.138:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.178635][ T7275] netlink: 'syz.0.493': attribute type 6 has an invalid length. [ 155.193628][ T30] audit: type=1326 audit(155.138:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.231581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 155.392646][ T7272] fuse: Bad value for 'fd' [ 155.489013][ T30] audit: type=1326 audit(155.138:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.524677][ T30] audit: type=1326 audit(155.138:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.561639][ T30] audit: type=1326 audit(155.138:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.691349][ T30] audit: type=1326 audit(155.138:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.776497][ T30] audit: type=1326 audit(155.138:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.831289][ T30] audit: type=1326 audit(155.138:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 155.930534][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 156.049395][ T30] audit: type=1326 audit(155.138:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 157.603325][ T7307] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 157.616440][ T7307] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 159.417622][ T7338] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 159.562955][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 159.562974][ T30] audit: type=1326 audit(159.518:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 159.603531][ T30] audit: type=1326 audit(159.518:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 159.693843][ T7347] sctp: [Deprecated]: syz.3.517 (pid 7347) Use of int in max_burst socket option deprecated. [ 159.693843][ T7347] Use struct sctp_assoc_value instead [ 159.983079][ T7356] vlan2: entered allmulticast mode [ 159.988260][ T7356] bridge_slave_0: entered allmulticast mode [ 160.324098][ T30] audit: type=1326 audit(160.298:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x0 [ 160.782796][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.536'. [ 160.934048][ T7400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.980903][ T7404] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 161.057790][ T7400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.178872][ T7400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.268222][ T7400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.391102][ T7419] pim6reg: entered allmulticast mode [ 161.413187][ T7419] pim6reg: left allmulticast mode [ 161.517374][ T7400] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.576369][ T7400] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.626368][ T7425] 9pnet: Could not find request transport: fd0x0000000000000004 [ 161.629554][ T7400] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.668917][ T7400] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.001583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.204408][ T7451] fuse: Bad value for 'fd' [ 162.614299][ T7454] netlink: 'wg1': attribute type 13 has an invalid length. [ 162.639379][ T7454] netlink: 'wg1': attribute type 17 has an invalid length. [ 162.780312][ T7468] 9pnet: Could not find request transport: fd0x0000000000000004 [ 162.820266][ T7454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.350633][ T7495] fuse: Bad value for 'fd' [ 163.892110][ T7502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.926076][ T7507] netlink: 'wg1': attribute type 13 has an invalid length. [ 163.952217][ T7502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.961985][ T7507] netlink: 'wg1': attribute type 17 has an invalid length. [ 163.986106][ T7507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.037810][ T7518] 9pnet: Could not find request transport: fd0x0000000000000003 [ 164.084235][ T7502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.224065][ T7531] random: crng reseeded on system resumption [ 164.260406][ T7531] Restarting kernel threads ... [ 164.274758][ T7531] Done restarting kernel threads. [ 164.287587][ T7502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.382790][ T7534] syz.2.590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 164.509337][ T7502] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.543713][ T7502] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.566277][ T7502] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.588526][ T7502] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.974609][ T7565] netlink: 1684 bytes leftover after parsing attributes in process `syz.2.602'. [ 165.075311][ T7569] syz.4.605 uses obsolete (PF_INET,SOCK_PACKET) [ 165.488509][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.614'. [ 165.511441][ T7590] bridge: RTM_NEWNEIGH with invalid ether address [ 167.391572][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 167.400826][ T7664] IPVS: Error joining to the multicast group [ 167.746191][ T30] audit: type=1326 audit(167.718:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 167.768767][ T7677] capability: warning: `syz.0.651' uses deprecated v2 capabilities in a way that may be insecure [ 167.808626][ T30] audit: type=1326 audit(167.738:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 167.830260][ T30] audit: type=1326 audit(167.798:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 167.851302][ T30] audit: type=1326 audit(167.798:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 167.941797][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 168.935974][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 169.107249][ T7712] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.664'. [ 169.960996][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 169.975398][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 169.983290][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.002231][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.009913][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.017958][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.025708][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.103896][ T7742] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.675'. [ 170.321078][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.328833][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.336534][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.344243][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.352667][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.360345][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.369819][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.377597][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.385404][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.404425][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.426522][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.441221][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.455590][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.463869][ T30] audit: type=1326 audit(170.428:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 170.485206][ T43] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 170.495971][ T43] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.506112][ T30] audit: type=1326 audit(170.428:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 170.528931][ T30] audit: type=1326 audit(170.438:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 170.566400][ T7755] netlink: 108 bytes leftover after parsing attributes in process `syz.1.682'. [ 170.577626][ T7755] netlink: 108 bytes leftover after parsing attributes in process `syz.1.682'. [ 170.603139][ T30] audit: type=1326 audit(170.438:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 170.629077][ T7755] netlink: 108 bytes leftover after parsing attributes in process `syz.1.682'. [ 170.638603][ T30] audit: type=1326 audit(170.458:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 170.675933][ T30] audit: type=1326 audit(170.458:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 171.739116][ T7774] 9pnet_fd: Insufficient options for proto=fd [ 171.776541][ T7771] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.690'. [ 172.184511][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 172.213410][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 172.221876][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.229569][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.237477][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.819392][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.827171][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.834890][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.842756][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.850409][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.858241][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.865941][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.884027][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.901399][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.927336][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.941230][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.971116][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 172.978857][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 173.007081][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 173.031345][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 173.048379][ T5947] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 173.088593][ T5947] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 173.320833][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 174.237070][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 174.237086][ T30] audit: type=1326 audit(174.208:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 174.266684][ T30] audit: type=1326 audit(174.208:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 174.303381][ T30] audit: type=1326 audit(174.208:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 174.324985][ T30] audit: type=1326 audit(174.208:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 174.348610][ T30] audit: type=1326 audit(174.208:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 174.369935][ T30] audit: type=1326 audit(174.208:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 174.391109][ T30] audit: type=1326 audit(174.208:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 174.413909][ T30] audit: type=1326 audit(174.208:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7801 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 175.066955][ T7809] 9pnet: Could not find request transport: f [ 175.114846][ T7805] pim6reg1: entered promiscuous mode [ 175.143524][ T7805] pim6reg1: entered allmulticast mode [ 175.254068][ T7814] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 175.394602][ T7820] pim6reg: entered allmulticast mode [ 175.419582][ T7820] pim6reg: left allmulticast mode [ 175.436709][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 175.460495][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 175.474650][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.484254][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.494711][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.504775][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.515657][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.526528][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.554194][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.615422][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.661705][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.706945][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.764987][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.799304][ T30] audit: type=1326 audit(175.768:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7829 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 175.827984][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.864954][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.910104][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.926100][ T30] audit: type=1326 audit(175.768:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7829 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 175.956912][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 175.999177][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 176.039479][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 176.077806][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 176.090452][ T7836] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 176.116252][ T43] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 176.166201][ T43] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.371509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.546108][ T7848] fuse: Unknown parameter '0x0000000000000005' [ 177.184616][ T7860] pim6reg: entered allmulticast mode [ 177.192067][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 177.199782][ T7860] pim6reg: left allmulticast mode [ 177.200865][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 178.000981][ T7891] syzkaller1: entered promiscuous mode [ 178.008482][ T7891] syzkaller1: entered allmulticast mode [ 178.185060][ T7896] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 178.244247][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 178.349929][ T7896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.501464][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 179.501482][ T30] audit: type=1326 audit(179.348:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.532255][ T30] audit: type=1326 audit(179.348:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.562552][ T30] audit: type=1326 audit(179.358:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.597706][ T30] audit: type=1326 audit(179.358:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.650326][ T30] audit: type=1326 audit(179.358:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.688412][ T30] audit: type=1326 audit(179.358:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.761467][ T30] audit: type=1326 audit(179.358:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.830090][ T30] audit: type=1326 audit(179.358:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.864854][ T30] audit: type=1326 audit(179.358:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 179.921482][ T30] audit: type=1326 audit(179.358:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 180.490681][ T7899] bond1 (unregistering): Released all slaves [ 180.676538][ T7955] pim6reg: entered allmulticast mode [ 180.705820][ T7957] pim6reg: left allmulticast mode [ 180.796035][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 180.854552][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 180.922242][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 180.953211][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 181.370219][ T7982] hub 9-0:1.0: USB hub found [ 181.380358][ T7982] hub 9-0:1.0: 1 port detected [ 181.574109][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 181.604426][ T7964] netlink: 108 bytes leftover after parsing attributes in process `syz.4.765'. [ 181.637489][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 181.679524][ T7964] netlink: 108 bytes leftover after parsing attributes in process `syz.4.765'. [ 181.721690][ T7964] netlink: 84 bytes leftover after parsing attributes in process `syz.4.765'. [ 181.776685][ T7992] pim6reg: entered allmulticast mode [ 181.811389][ T7991] pim6reg: left allmulticast mode [ 182.310771][ T8006] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 182.505764][ T8006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.770269][ T8011] bond1: (slave veth3): Enslaving as an active interface with a down link [ 182.809483][ T8015] bridge1: entered promiscuous mode [ 182.859229][ T8015] bridge1: entered allmulticast mode [ 182.910743][ T8015] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 184.132422][ T8034] pim6reg: entered allmulticast mode [ 184.149755][ T8034] pim6reg: left allmulticast mode [ 184.192054][ T8037] program syz.1.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.528875][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.795'. [ 185.341372][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 185.935953][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 185.935988][ T30] audit: type=1326 audit(185.898:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8046 comm="syz.1.797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x0 [ 186.421831][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 186.429637][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 186.485540][ T30] audit: type=1326 audit(186.458:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.590632][ T30] audit: type=1326 audit(186.498:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.668150][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.676799][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.685090][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.693525][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.701293][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.708998][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.716941][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.739147][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.748196][ T30] audit: type=1326 audit(186.498:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.749896][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.777044][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.788587][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796605][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796637][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796664][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796713][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796738][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796762][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796786][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.796811][ T5947] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 186.798818][ T8084] pim6reg: entered allmulticast mode [ 186.798992][ T5947] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 186.802146][ T30] audit: type=1326 audit(186.498:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.802186][ T30] audit: type=1326 audit(186.498:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.802222][ T30] audit: type=1326 audit(186.498:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.802281][ T30] audit: type=1326 audit(186.498:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.802320][ T30] audit: type=1326 audit(186.498:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 186.802360][ T30] audit: type=1326 audit(186.498:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 186.816832][ T8084] pim6reg: left allmulticast mode [ 187.037852][ T8090] __nla_validate_parse: 2 callbacks suppressed [ 187.037870][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 188.087679][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 188.096214][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 188.107448][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.108246][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.129561][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 188.151250][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151284][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151311][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151337][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151363][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151397][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151423][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151449][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151475][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151501][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151528][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151555][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151581][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151607][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151632][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151658][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151689][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.151716][ T5910] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 188.154202][ T5910] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 188.158067][ T10] usb 2-1: can't read configurations, error -71 [ 188.835633][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 188.869642][ T8145] netem: invalid attributes len -15 [ 188.871759][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 188.891415][ T8145] netem: change failed [ 188.896834][ T8150] netlink: 'syz.2.838': attribute type 3 has an invalid length. [ 188.908203][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.839'. [ 188.912320][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 188.939947][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 188.970786][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 189.614554][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.853'. [ 189.879689][ T8189] 9pnet_fd: Insufficient options for proto=fd [ 189.914625][ T8182] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.021409][ T8182] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.108436][ T8199] random: crng reseeded on system resumption [ 190.144117][ T8182] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.165662][ T8203] netlink: 'syz.1.860': attribute type 13 has an invalid length. [ 190.281743][ T8203] gretap0: refused to change device tx_queue_len [ 190.288787][ T8203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 190.363012][ T8182] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.612967][ T8214] lo speed is unknown, defaulting to 1000 [ 190.625931][ T8214] lo speed is unknown, defaulting to 1000 [ 190.637361][ T8214] lo speed is unknown, defaulting to 1000 [ 191.223943][ T8214] infiniband sz1: set active [ 191.228689][ T8214] infiniband sz1: added lo [ 191.366057][ T8214] RDS/IB: sz1: added [ 191.370138][ T8214] smc: adding ib device sz1 with port count 1 [ 191.376463][ T8214] smc: ib device sz1 port 1 has pnetid [ 191.383915][ T8214] lo speed is unknown, defaulting to 1000 [ 191.441666][ T5910] lo speed is unknown, defaulting to 1000 [ 191.619934][ T8214] lo speed is unknown, defaulting to 1000 [ 191.803945][ T8182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.856535][ T10] lo speed is unknown, defaulting to 1000 [ 191.872594][ T8214] lo speed is unknown, defaulting to 1000 [ 191.929296][ T8182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.976154][ T8223] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 192.021668][ T8223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.868'. [ 192.109090][ T8182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.149778][ T8227] can0: slcan on ttyS3. [ 192.150552][ T8214] lo speed is unknown, defaulting to 1000 [ 192.202374][ T8226] can0 (unregistered): slcan off ttyS3. [ 192.441485][ T8182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.456717][ T8214] lo speed is unknown, defaulting to 1000 [ 192.490640][ T8232] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'. [ 192.571087][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'. [ 194.280284][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.653009][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.882'. [ 195.506319][ T8281] netlink: 64 bytes leftover after parsing attributes in process `syz.0.892'. [ 196.707495][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.900'. [ 197.700981][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 197.707348][ T30] audit: type=1326 audit(197.488:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 197.780319][ T8309] lo speed is unknown, defaulting to 1000 [ 198.044131][ T30] audit: type=1326 audit(197.488:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 198.210146][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 198.706903][ T30] audit: type=1326 audit(197.488:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 198.730172][ T30] audit: type=1326 audit(197.488:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 198.764963][ T30] audit: type=1326 audit(197.488:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 198.790172][ T8329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.908'. [ 198.800082][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 198.832448][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 198.878965][ T30] audit: type=1326 audit(197.488:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 198.952677][ T30] audit: type=1326 audit(197.488:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 199.057535][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 199.077088][ T30] audit: type=1326 audit(197.488:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 199.162799][ T30] audit: type=1326 audit(197.488:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 199.258346][ T30] audit: type=1326 audit(197.498:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 199.446382][ T8343] macvtap0: refused to change device tx_queue_len [ 200.256019][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 200.970555][ T8363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.922'. [ 201.024336][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 201.073912][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 201.385145][ T8374] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 202.090019][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 202.097714][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 202.104832][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 202.113082][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 202.119799][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 202.130918][ T8374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.925'. [ 202.669105][ T8374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.700212][ T8374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.727710][ T8374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.766164][ T8374] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 202.787623][ T8374] team0: Failed to send options change via netlink (err -105) [ 202.795503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 202.961270][ T8374] team0: Port device geneve0 added [ 203.339223][ T8367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.450708][ T8367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.523069][ T8367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.697406][ T8367] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.708071][ T8404] __nla_validate_parse: 1 callbacks suppressed [ 203.709271][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 203.736296][ T8367] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.742806][ T8404] netlink: 'syz.0.934': attribute type 30 has an invalid length. [ 203.764181][ T8410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 203.777374][ T8367] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.797644][ T8404] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.806705][ T8404] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.815056][ T8404] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.823376][ T8404] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.856483][ T8367] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.683381][ T8429] serio: Serial port ptm0 [ 205.904351][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.948'. [ 206.090292][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 206.113170][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 206.158894][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 206.298265][ T8448] GUP no longer grows the stack in syz.0.951 (8448): 200000004000-200000008000 (200000002000) [ 206.386568][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 206.386588][ T30] audit: type=1326 audit(206.168:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8454 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 206.390903][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.0.951 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 206.390931][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.390949][ T8448] Call Trace: [ 206.390961][ T8448] [ 206.390970][ T8448] dump_stack_lvl+0x189/0x250 [ 206.391018][ T8448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.391040][ T8448] ? __pfx__printk+0x10/0x10 [ 206.391061][ T8448] ? find_vma+0xe7/0x160 [ 206.391095][ T8448] __get_user_pages+0x2a60/0x30b0 [ 206.391165][ T8448] ? __pfx___get_user_pages+0x10/0x10 [ 206.391204][ T8448] get_user_pages_remote+0x2f9/0xaa0 [ 206.391232][ T8448] ? __pfx_mtree_load+0x10/0x10 [ 206.391260][ T8448] ? __pfx_get_user_pages_remote+0x10/0x10 [ 206.391300][ T8448] __access_remote_vm+0x215/0x5f0 [ 206.391330][ T8448] ? __pfx___access_remote_vm+0x10/0x10 [ 206.391352][ T8448] ? alloc_pages_noprof+0xbe/0x190 [ 206.391378][ T8448] proc_pid_cmdline_read+0x440/0x840 [ 206.391399][ T8448] ? __asan_memset+0x22/0x50 [ 206.391433][ T8448] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 206.391457][ T8448] ? rw_verify_area+0x258/0x650 [ 206.391491][ T8448] vfs_readv+0x5aa/0x850 [ 206.391513][ T8448] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 206.391537][ T8448] ? __pfx_vfs_readv+0x10/0x10 [ 206.391576][ T8448] ? __fget_files+0x2a/0x420 [ 206.391602][ T8448] ? __fget_files+0x3a0/0x420 [ 206.391622][ T8448] ? __fget_files+0x2a/0x420 [ 206.391653][ T8448] __x64_sys_preadv+0x197/0x2a0 [ 206.391677][ T8448] ? __pfx___x64_sys_preadv+0x10/0x10 [ 206.391694][ T8448] ? rcu_is_watching+0x15/0xb0 [ 206.391721][ T8448] ? do_syscall_64+0xbe/0x3b0 [ 206.391744][ T8448] do_syscall_64+0xfa/0x3b0 [ 206.391764][ T8448] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.391784][ T8448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.391803][ T8448] ? clear_bhb_loop+0x60/0xb0 [ 206.391826][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.391844][ T8448] RIP: 0033:0x7f337e58ebe9 [ 206.391866][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.391882][ T8448] RSP: 002b:00007f337f44d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 206.391909][ T8448] RAX: ffffffffffffffda RBX: 00007f337e7b5fa0 RCX: 00007f337e58ebe9 [ 206.391923][ T8448] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000008 [ 206.391935][ T8448] RBP: 00007f337e611e19 R08: 0000000000000201 R09: 0000000000000000 [ 206.391948][ T8448] R10: 00000000000006cd R11: 0000000000000246 R12: 0000000000000000 [ 206.391959][ T8448] R13: 00007f337e7b6038 R14: 00007f337e7b5fa0 R15: 00007ffff4c68cf8 [ 206.391998][ T8448] [ 206.681573][ T30] audit: type=1326 audit(206.168:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8454 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 206.841522][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.957'. [ 206.881299][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.957'. [ 206.881320][ T30] audit: type=1326 audit(206.168:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8454 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 206.921197][ T30] audit: type=1326 audit(206.168:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8454 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40698ebe9 code=0x7ffc0000 [ 207.170266][ T30] audit: type=1326 audit(207.138:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 207.242442][ T30] audit: type=1326 audit(207.178:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 207.300724][ T30] audit: type=1326 audit(207.178:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 207.350047][ T30] audit: type=1326 audit(207.178:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 207.406831][ T30] audit: type=1326 audit(207.178:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 207.492425][ T30] audit: type=1326 audit(207.178:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871218ebe9 code=0x7ffc0000 [ 207.528486][ T8480] loop9: detected capacity change from 0 to 7 [ 207.567522][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.578076][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.588269][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.598657][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.618775][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.629159][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.639894][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.650171][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.662583][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.663053][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.964'. [ 207.673105][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.675904][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.700668][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.710324][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.720617][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.728669][ T8480] ldm_validate_partition_table(): Disk read failed. [ 207.731885][ T8483] tipc: Invalid UDP bearer configuration [ 207.741853][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.757754][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.768365][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 207.769466][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.786646][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.800295][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.810600][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.825414][ T8480] Dev loop9: unable to read RDB block 0 [ 207.838566][ T8480] loop9: unable to read partition table [ 207.844608][ T8480] loop9: partition table beyond EOD, truncated [ 207.857270][ T8480] loop_reread_partitions: partition scan of loop9 (被xڬd͈`*` [ 207.857270][ T8480] ) failed (rc=-5) [ 207.991611][ T8492] pim6reg: entered allmulticast mode [ 208.025048][ T8492] pim6reg: left allmulticast mode [ 208.160997][ T8498] 9pnet: p9_errstr2errno: server reported unknown error [ 208.887118][ T8533] pim6reg: entered allmulticast mode [ 209.246220][ T8538] pim6reg: left allmulticast mode [ 209.600201][ T8544] macvlan2: entered promiscuous mode [ 209.605821][ T8544] macvlan2: entered allmulticast mode [ 209.615691][ T8544] bond1: entered promiscuous mode [ 209.622040][ T8544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.644963][ T8544] bond1: left promiscuous mode [ 209.951652][ T8559] netlink: 'syz.3.996': attribute type 10 has an invalid length. [ 210.003837][ T8559] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.621252][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 211.621272][ T30] audit: type=1326 audit(211.548:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 211.743483][ T30] audit: type=1326 audit(211.548:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 211.870199][ T30] audit: type=1326 audit(211.548:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 211.981662][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 212.068590][ T8601] team1: entered promiscuous mode [ 212.074388][ T8601] team1: entered allmulticast mode [ 212.230838][ T30] audit: type=1326 audit(212.198:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 212.263298][ T30] audit: type=1326 audit(212.208:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 212.288375][ T30] audit: type=1326 audit(212.208:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 212.313630][ T30] audit: type=1326 audit(212.208:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 212.341538][ T30] audit: type=1326 audit(212.208:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 212.362960][ T30] audit: type=1326 audit(212.208:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 212.383851][ T30] audit: type=1326 audit(212.208:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337e58ebe9 code=0x7ffc0000 [ 212.429091][ T8626] pim6reg: entered allmulticast mode [ 212.471742][ T8626] pim6reg: left allmulticast mode [ 214.076743][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 215.063355][ T8711] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1059'. [ 215.276366][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 215.694908][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 216.653775][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 216.653792][ T30] audit: type=1326 audit(216.628:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 216.715267][ T30] audit: type=1326 audit(216.658:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 216.775215][ T30] audit: type=1326 audit(216.658:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 216.811292][ T30] audit: type=1326 audit(216.658:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 216.844892][ T30] audit: type=1326 audit(216.658:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 216.867261][ T30] audit: type=1326 audit(216.658:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 217.002516][ T30] audit: type=1326 audit(216.658:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 217.087222][ T30] audit: type=1326 audit(216.658:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 217.116931][ T30] audit: type=1326 audit(216.658:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 217.152381][ T30] audit: type=1326 audit(216.658:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc41038ebe9 code=0x7ffc0000 [ 217.335039][ T8762] macsec1: entered allmulticast mode [ 217.340393][ T8762] veth1_macvtap: entered allmulticast mode [ 217.426957][ T8762] veth1_macvtap: left allmulticast mode [ 218.194193][ T8783] tipc: Started in network mode [ 218.200149][ T8783] tipc: Node identity 1e8db6065c9b, cluster identity 4711 [ 218.217139][ T8783] tipc: Enabled bearer , priority 0 [ 218.226098][ T8783] syzkaller0: entered promiscuous mode [ 218.232464][ T8783] syzkaller0: entered allmulticast mode [ 218.248906][ T8783] tipc: Resetting bearer [ 218.287162][ T8782] tipc: Resetting bearer [ 218.312209][ T8782] tipc: Disabling bearer [ 218.438418][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 218.465345][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 218.528534][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 218.725217][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 219.263932][ T8824] hub 6-0:1.0: USB hub found [ 219.305738][ T8824] hub 6-0:1.0: 1 port detected [ 220.093672][ T8841] random: crng reseeded on system resumption [ 220.107993][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 220.120633][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 220.253453][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 223.309576][ T8914] random: crng reseeded on system resumption [ 224.276257][ T8926] dummy0: entered promiscuous mode [ 224.291728][ T8926] macsec1: entered allmulticast mode [ 224.311605][ T8926] dummy0: entered allmulticast mode [ 225.642648][ T8946] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1153'. [ 226.933595][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 226.933612][ T30] audit: type=1326 audit(226.908:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.025065][ T30] audit: type=1326 audit(226.908:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.088756][ T30] audit: type=1326 audit(226.908:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.136601][ T30] audit: type=1326 audit(226.908:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.233759][ T30] audit: type=1326 audit(226.908:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.314863][ T30] audit: type=1326 audit(226.908:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.449381][ T30] audit: type=1326 audit(226.908:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.471018][ T30] audit: type=1326 audit(226.908:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.493609][ T30] audit: type=1326 audit(226.908:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.518235][ T30] audit: type=1326 audit(226.908:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8965 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c458ebe9 code=0x7ffc0000 [ 227.985898][ T8988] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1170'. [ 229.182148][ T8997] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 229.267155][ T8997] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.447703][ T9032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.455460][ T9032] IPv6: NLM_F_CREATE should be set when creating new route [ 230.462823][ T9032] IPv6: NLM_F_CREATE should be set when creating new route [ 230.616119][ T9034] syzkaller1: entered promiscuous mode [ 230.632068][ T9034] syzkaller1: entered allmulticast mode [ 230.674883][ T9034] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 230.731309][ T9034] team0: Port device dummy0 added [ 230.752032][ T9043] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 230.778036][ T9043] [ 230.780424][ T9043] ====================================================== [ 230.787455][ T9043] WARNING: possible circular locking dependency detected [ 230.794502][ T9043] 6.16.0-syzkaller #0 Not tainted [ 230.799539][ T9043] ------------------------------------------------------ [ 230.806651][ T9043] syz.4.1186/9043 is trying to acquire lock: [ 230.812635][ T9043] ffff888059b90e00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 230.822414][ T9043] [ 230.822414][ T9043] but task is already holding lock: [ 230.829794][ T9043] ffff88805943ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 230.839562][ T9043] [ 230.839562][ T9043] which lock already depends on the new lock. [ 230.839562][ T9043] [ 230.849960][ T9043] [ 230.849960][ T9043] the existing dependency chain (in reverse order) is: [ 230.858966][ T9043] [ 230.858966][ T9043] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 230.867407][ T9043] lock_acquire+0x120/0x360 [ 230.872432][ T9043] __mutex_lock+0x182/0xe80 [ 230.877461][ T9043] dev_set_mtu+0x10e/0x260 [ 230.882494][ T9043] team_add_slave+0x8b8/0x2840 [ 230.887776][ T9043] do_set_master+0x530/0x6d0 [ 230.892887][ T9043] do_setlink+0xcf0/0x41c0 [ 230.897834][ T9043] rtnl_newlink+0x160b/0x1c70 [ 230.903030][ T9043] rtnetlink_rcv_msg+0x7cc/0xb70 [ 230.908484][ T9043] netlink_rcv_skb+0x205/0x470 [ 230.913771][ T9043] netlink_unicast+0x75c/0x8e0 [ 230.919051][ T9043] netlink_sendmsg+0x805/0xb30 [ 230.924351][ T9043] __sock_sendmsg+0x21c/0x270 [ 230.929542][ T9043] ____sys_sendmsg+0x505/0x830 [ 230.934835][ T9043] ___sys_sendmsg+0x21f/0x2a0 [ 230.940032][ T9043] __x64_sys_sendmsg+0x19b/0x260 [ 230.945491][ T9043] do_syscall_64+0xfa/0x3b0 [ 230.950522][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.956932][ T9043] [ 230.956932][ T9043] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 230.964931][ T9043] validate_chain+0xb9b/0x2140 [ 230.970333][ T9043] __lock_acquire+0xab9/0xd20 [ 230.975536][ T9043] lock_acquire+0x120/0x360 [ 230.980554][ T9043] __mutex_lock+0x182/0xe80 [ 230.985578][ T9043] team_device_event+0x182/0xa20 [ 230.991032][ T9043] notifier_call_chain+0x1b3/0x3e0 [ 230.996661][ T9043] __dev_notify_flags+0x18d/0x2e0 [ 231.002220][ T9043] netif_change_flags+0xe8/0x1a0 [ 231.007676][ T9043] do_setlink+0xc55/0x41c0 [ 231.012613][ T9043] rtnl_newlink+0x160b/0x1c70 [ 231.017809][ T9043] rtnetlink_rcv_msg+0x7cc/0xb70 [ 231.023263][ T9043] netlink_rcv_skb+0x205/0x470 [ 231.028568][ T9043] netlink_unicast+0x75c/0x8e0 [ 231.033850][ T9043] netlink_sendmsg+0x805/0xb30 [ 231.039228][ T9043] __sock_sendmsg+0x21c/0x270 [ 231.044421][ T9043] ____sys_sendmsg+0x505/0x830 [ 231.049715][ T9043] ___sys_sendmsg+0x21f/0x2a0 [ 231.054924][ T9043] __x64_sys_sendmsg+0x19b/0x260 [ 231.060391][ T9043] do_syscall_64+0xfa/0x3b0 [ 231.065412][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.071822][ T9043] [ 231.071822][ T9043] other info that might help us debug this: [ 231.071822][ T9043] [ 231.082130][ T9043] Possible unsafe locking scenario: [ 231.082130][ T9043] [ 231.089574][ T9043] CPU0 CPU1 [ 231.094934][ T9043] ---- ---- [ 231.100332][ T9043] lock(&dev_instance_lock_key#3); [ 231.105536][ T9043] lock(team->team_lock_key); [ 231.112816][ T9043] lock(&dev_instance_lock_key#3); [ 231.120537][ T9043] lock(team->team_lock_key); [ 231.125293][ T9043] [ 231.125293][ T9043] *** DEADLOCK *** [ 231.125293][ T9043] [ 231.133431][ T9043] 2 locks held by syz.4.1186/9043: [ 231.138535][ T9043] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 231.147595][ T9043] #1: ffff88805943ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 231.157701][ T9043] [ 231.157701][ T9043] stack backtrace: [ 231.163581][ T9043] CPU: 1 UID: 0 PID: 9043 Comm: syz.4.1186 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 231.163601][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.163612][ T9043] Call Trace: [ 231.163621][ T9043] [ 231.163629][ T9043] dump_stack_lvl+0x189/0x250 [ 231.163651][ T9043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.163669][ T9043] ? __pfx__printk+0x10/0x10 [ 231.163690][ T9043] ? print_lock_name+0xde/0x100 [ 231.163711][ T9043] print_circular_bug+0x2ee/0x310 [ 231.163733][ T9043] check_noncircular+0x134/0x160 [ 231.163754][ T9043] validate_chain+0xb9b/0x2140 [ 231.163776][ T9043] ? __lock_acquire+0xab9/0xd20 [ 231.163796][ T9043] __lock_acquire+0xab9/0xd20 [ 231.163812][ T9043] ? team_device_event+0x182/0xa20 [ 231.163827][ T9043] lock_acquire+0x120/0x360 [ 231.163841][ T9043] ? team_device_event+0x182/0xa20 [ 231.163858][ T9043] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 231.163887][ T9043] __mutex_lock+0x182/0xe80 [ 231.163904][ T9043] ? team_device_event+0x182/0xa20 [ 231.163923][ T9043] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 231.163945][ T9043] ? team_device_event+0x182/0xa20 [ 231.163961][ T9043] ? __pfx___mutex_lock+0x10/0x10 [ 231.163977][ T9043] ? __timer_delete_sync+0x218/0x2d0 [ 231.164007][ T9043] team_device_event+0x182/0xa20 [ 231.164023][ T9043] notifier_call_chain+0x1b3/0x3e0 [ 231.164045][ T9043] __dev_notify_flags+0x18d/0x2e0 [ 231.164070][ T9043] ? __pfx___dev_notify_flags+0x10/0x10 [ 231.164092][ T9043] ? __dev_change_flags+0x4cc/0x6d0 [ 231.164117][ T9043] ? __pfx___dev_change_flags+0x10/0x10 [ 231.164145][ T9043] netif_change_flags+0xe8/0x1a0 [ 231.164170][ T9043] do_setlink+0xc55/0x41c0 [ 231.164195][ T9043] ? trace_sched_exit_tp+0x38/0x120 [ 231.164222][ T9043] ? __pfx_do_setlink+0x10/0x10 [ 231.164245][ T9043] ? __lock_acquire+0xab9/0xd20 [ 231.164262][ T9043] ? do_raw_spin_lock+0x121/0x290 [ 231.164286][ T9043] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 231.164316][ T9043] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.164333][ T9043] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 231.164357][ T9043] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.164384][ T9043] ? rcu_is_watching+0x15/0xb0 [ 231.164403][ T9043] ? __mutex_lock+0xa6d/0xe80 [ 231.164420][ T9043] ? __mutex_lock+0x51b/0xe80 [ 231.164439][ T9043] ? rtnl_newlink+0x8db/0x1c70 [ 231.164461][ T9043] ? __pfx___mutex_lock+0x10/0x10 [ 231.164482][ T9043] ? ns_capable+0x8a/0xf0 [ 231.164499][ T9043] ? rtnl_link_get_net_capable+0x16a/0x350 [ 231.164524][ T9043] rtnl_newlink+0x160b/0x1c70 [ 231.164544][ T9043] ? netlink_sendmsg+0x805/0xb30 [ 231.164572][ T9043] ? __pfx_rtnl_newlink+0x10/0x10 [ 231.164602][ T9043] ? kasan_quarantine_put+0xdd/0x220 [ 231.164626][ T9043] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.164645][ T9043] ? nlmon_xmit+0xb0/0x100 [ 231.164664][ T9043] ? kmem_cache_free+0x18f/0x400 [ 231.164683][ T9043] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.164701][ T9043] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.164717][ T9043] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.164734][ T9043] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 231.164752][ T9043] ? __dev_queue_xmit+0x27e/0x3a70 [ 231.164769][ T9043] ? __dev_queue_xmit+0x27e/0x3a70 [ 231.164784][ T9043] ? __dev_queue_xmit+0x27e/0x3a70 [ 231.164800][ T9043] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 231.164819][ T9043] ? __lock_acquire+0xab9/0xd20 [ 231.164843][ T9043] ? __pfx_rtnl_newlink+0x10/0x10 [ 231.164863][ T9043] rtnetlink_rcv_msg+0x7cc/0xb70 [ 231.164885][ T9043] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 231.164905][ T9043] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.164925][ T9043] ? ref_tracker_free+0x63a/0x7d0 [ 231.164943][ T9043] ? __copy_skb_header+0xa7/0x550 [ 231.164958][ T9043] ? __pfx_ref_tracker_free+0x10/0x10 [ 231.164976][ T9043] ? __skb_clone+0x63/0x7a0 [ 231.164993][ T9043] netlink_rcv_skb+0x205/0x470 [ 231.165015][ T9043] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.165037][ T9043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.165063][ T9043] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.165085][ T9043] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.165109][ T9043] netlink_unicast+0x75c/0x8e0 [ 231.165133][ T9043] netlink_sendmsg+0x805/0xb30 [ 231.165159][ T9043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.165184][ T9043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.165201][ T9043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.165224][ T9043] __sock_sendmsg+0x21c/0x270 [ 231.165243][ T9043] ____sys_sendmsg+0x505/0x830 [ 231.165270][ T9043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.165303][ T9043] ? import_iovec+0x74/0xa0 [ 231.165327][ T9043] ___sys_sendmsg+0x21f/0x2a0 [ 231.165352][ T9043] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.165390][ T9043] ? __fget_files+0x2a/0x420 [ 231.165408][ T9043] ? __fget_files+0x3a0/0x420 [ 231.165429][ T9043] __x64_sys_sendmsg+0x19b/0x260 [ 231.165455][ T9043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.165484][ T9043] ? rcu_is_watching+0x15/0xb0 [ 231.165502][ T9043] ? do_syscall_64+0xbe/0x3b0 [ 231.165522][ T9043] do_syscall_64+0xfa/0x3b0 [ 231.165539][ T9043] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.165556][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.165572][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 231.165590][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.165606][ T9043] RIP: 0033:0x7fc40698ebe9 [ 231.165621][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.165637][ T9043] RSP: 002b:00007fc407846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.165654][ T9043] RAX: ffffffffffffffda RBX: 00007fc406bb6090 RCX: 00007fc40698ebe9 [ 231.165667][ T9043] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 231.165678][ T9043] RBP: 00007fc406a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 231.165689][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.165699][ T9043] R13: 00007fc406bb6128 R14: 00007fc406bb6090 R15: 00007ffe09afce28 [ 231.165719][ T9043] [ 231.761038][ T9043] team0: Port device dummy0 removed [ 231.770523][ T9043] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.786152][ T9049] tipc: Started in network mode [ 231.799234][ T9049] tipc: Node identity ac14140f, cluster identity 4711 [ 231.806424][ T9049] tipc: New replicast peer: 255.255.255.255 [ 231.812911][ T9049] tipc: Enabled bearer , priority 10 [ 232.931196][ T10] tipc: Node number set to 2886997007