last executing test programs: 1m15.174536015s ago: executing program 4 (id=3921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1) 1m15.000881636s ago: executing program 4 (id=3922): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x110) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r4, 0x20000) socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x0, 0xffffffffffffffff, 0x7, 0x9}) remap_file_pages(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x0, 0x40, 0x3be35710d161a59e) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) syz_open_dev$video(0x0, 0x8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x14) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.790127606s ago: executing program 4 (id=3929): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget(0x2, 0x2000, 0x54000000, &(0x7f00003ed000/0x2000)=nil) 1m11.152726814s ago: executing program 4 (id=3943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9d, 0x0, &(0x7f0000001080)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731c389ef77123c89d59b699eeaa8eaa0073461119663906400f30c060000000000004ab6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8974b54b620636894aaacf28ff61816363c70a4", 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000000), 0x3, 0x0, 0x800}, 0x50) sendto$inet6(r1, &(0x7f00000000c0)="3f681a", 0x3, 0x20040845, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) shutdown(r1, 0x1) 1m11.032824783s ago: executing program 4 (id=3946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1m10.549007516s ago: executing program 4 (id=3949): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) 55.782428036s ago: executing program 2 (id=4003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x18b343, 0x0) socket(0x1, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioperm(0x0, 0xf, 0x94f) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10002) 53.253703963s ago: executing program 32 (id=3949): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) 53.096414326s ago: executing program 3 (id=4006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) 52.970387337s ago: executing program 2 (id=4008): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x140000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb40, 0x870, 0x1, 0x0, 0xd59f80, 0x19f0, 0x3f, 0x19f2, 0x3, 0x5, 0x2800, 0x9, 0x2, 0xba2, 0xc, 0x0, {0x8, 0x1}, 0xd0, 0x9}}) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x2c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) 52.842590454s ago: executing program 3 (id=4009): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x80) 52.486332598s ago: executing program 3 (id=4012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000", 0x53}], 0x1) 52.153734135s ago: executing program 3 (id=4015): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 49.98576723s ago: executing program 2 (id=4016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x890) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x4800) 49.339095754s ago: executing program 2 (id=4018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 47.584417244s ago: executing program 3 (id=4022): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) 47.362352229s ago: executing program 1 (id=4023): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r1, r2, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) utime(&(0x7f0000000000)='./file0\x00', 0x0) 47.013549826s ago: executing program 3 (id=4025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000e9ffffff0e00000018000300"], 0x5c}}, 0x0) 43.661323719s ago: executing program 2 (id=4032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x594, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x568, 0x2, [@TCA_U32_SEL={0x564, 0x5, {0x2, 0x1, 0x55, 0xa, 0x8, 0x4, 0x1, 0x9, [{0x200, 0x1}, {0x6, 0x3b4, 0xdc1, 0x5}, {0x0, 0xfffffffa, 0x1, 0x9}, {0x2, 0x8, 0x3, 0x8001}, {0x99f, 0x7, 0x8000, 0x4}, {0x4, 0x60afc11e, 0x505d5630, 0x2}, {0x10001, 0x3, 0x98ae, 0x38}, {0x0, 0x6, 0x10001, 0x9}, {0x1, 0xed5, 0x0, 0x6}, {0xf, 0xc, 0x9037, 0xbe77}, {0x188, 0x8, 0x8, 0x3}, {0xffffffb5, 0x1c2e, 0x6f0fa328, 0x8000}, {0xae28, 0x80000001, 0xffffff54, 0x5}, {0x1, 0x9, 0x7ff, 0x2}, {0x8, 0x3, 0xfff, 0x8001}, {0x2, 0xe76, 0xb4f, 0x2}, {0x160c, 0x7, 0x10, 0x4}, {0x800, 0x0, 0x400, 0x3}, {0x48b, 0x9, 0x9, 0x9}, {0xc, 0x7f, 0x8c4d, 0x3}, {0x8001, 0x89, 0x8, 0x2}, {0x200, 0x558, 0x7f, 0x3b}, {0x78c, 0x8, 0xfffffffe, 0x6}, {0x7fffffff, 0x0, 0x81}, {0x4, 0x7, 0x5, 0x4}, {0x0, 0x10, 0x7ff, 0x3}, {0xa1, 0x8, 0x8, 0x5}, {0x3aefad9c, 0x3, 0x8000, 0x100}, {0x81, 0x7, 0x1, 0x9}, {0x4, 0xb64, 0xe, 0x5}, {0x8, 0x5, 0x2, 0x7}, {0x8d, 0xfffffff7, 0x280000, 0x4}, {0x8, 0x6, 0x100, 0x9}, {0x8, 0x6, 0xfffffffa}, {0x4, 0x8, 0xc8, 0x200}, {0x100, 0x1, 0x4, 0x1}, {0x9a, 0x10, 0x350, 0xffff563d}, {0xb1a4, 0x100, 0x5, 0xd669}, {0x40, 0x1, 0x8, 0x1}, {0x1, 0x8000, 0x9, 0x5}, {0x10001, 0xfffffc00, 0x8000, 0x9}, {0x8, 0x6, 0x4, 0x6}, {0x2, 0x7, 0x3, 0x7fffffff}, {0x2, 0x3, 0x4, 0xfad}, {0x1ff, 0x1, 0xfab2, 0x9}, {0x9, 0x9, 0x81, 0x3}, {0x726, 0x0, 0x6}, {0xff, 0x5a9, 0x72, 0x3}, {0x6, 0x2, 0x0, 0x1}, {0x101, 0x5, 0x8, 0x2}, {0x2, 0xa3f, 0x0, 0x7348}, {0x8, 0x7fff, 0x10000, 0x80000001}, {0x0, 0xe44, 0x8, 0xf7}, {0x4, 0x4, 0x340, 0x2}, {0x2, 0x0, 0x8, 0x10001}, {0x0, 0xff, 0xfffffc00, 0x483c}, {0x0, 0x9, 0x43, 0x1}, {0x93bb, 0x800, 0x3, 0xda1}, {0xf, 0x6, 0x4de, 0x3}, {0x4d7e277a, 0x2, 0x4, 0x1}, {0x9, 0x1000, 0x0, 0x768f}, {0xbc, 0x85c, 0xa, 0x5}, {0xfffffffa, 0x9, 0xffffffe1, 0x7fff}, {0x7d, 0xffffffff, 0x5, 0xa44d}, {0x57, 0x7f, 0x4, 0x7}, {0x6, 0x7, 0x2, 0x1}, {0x6, 0x4, 0x1, 0x1}, {0x200, 0xc, 0xf5, 0x8000}, {0x4, 0x0, 0x5, 0xe1253e26}, {0x9, 0xffff, 0xffffffff, 0xfffffffa}, {0x3b66, 0x0, 0x2, 0x67fd}, {0x7, 0x5d, 0x0, 0xffffff46}, {0x6, 0x6, 0xdd5, 0x827}, {0x0, 0x7, 0x0, 0x1}, {0x4, 0xfffffffe, 0x14, 0xf}, {0x6, 0x6, 0xb, 0x1}, {0xffff0001, 0x4, 0x8, 0x3}, {0x400, 0x7, 0x7fffffff, 0x1}, {0x401, 0x5a724697, 0xffff8000, 0x37}, {0x8, 0x391fd43d, 0x5, 0x4}, {0x800000, 0xf, 0x5, 0x8}, {0xe, 0x5, 0xc, 0x1ff}, {0x5, 0x77e, 0xe, 0x9}, {0x200, 0xff, 0xffffffff, 0x3}, {0x3, 0x1ff, 0xa65, 0x1}]}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x81}, 0x800) 43.201169491s ago: executing program 1 (id=4034): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) 42.682487764s ago: executing program 1 (id=4036): r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x4b, &(0x7f0000000680)={&(0x7f0000000040)={0x40, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a000600"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT]}]}, 0x40}}, 0x49000) 31.795010125s ago: executing program 33 (id=4025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x594, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x568, 0x2, [@TCA_U32_SEL={0x564, 0x5, {0x2, 0x1, 0x55, 0xa, 0x8, 0x4, 0x1, 0x9, [{0x200, 0x1}, {0x6, 0x3b4, 0xdc1, 0x5}, {0x0, 0xfffffffa, 0x1, 0x9}, {0x2, 0x8, 0x3, 0x8001}, {0x99f, 0x7, 0x8000, 0x4}, {0x4, 0x60afc11e, 0x505d5630, 0x2}, {0x10001, 0x3, 0x98ae, 0x38}, {0x0, 0x6, 0x10001, 0x9}, {0x1, 0xed5, 0x0, 0x6}, {0xf, 0xc, 0x9037, 0xbe77}, {0x188, 0x8, 0x8, 0x3}, {0xffffffb5, 0x1c2e, 0x6f0fa328, 0x8000}, {0xae28, 0x80000001, 0xffffff54, 0x5}, {0x1, 0x9, 0x7ff, 0x2}, {0x8, 0x3, 0xfff, 0x8001}, {0x2, 0xe76, 0xb4f, 0x2}, {0x160c, 0x7, 0x10, 0x4}, {0x800, 0x0, 0x400, 0x3}, {0x48b, 0x9, 0x9, 0x9}, {0xc, 0x7f, 0x8c4d, 0x3}, {0x8001, 0x89, 0x8, 0x2}, {0x200, 0x558, 0x7f, 0x3b}, {0x78c, 0x8, 0xfffffffe, 0x6}, {0x7fffffff, 0x0, 0x81}, {0x4, 0x7, 0x5, 0x4}, {0x0, 0x10, 0x7ff, 0x3}, {0xa1, 0x8, 0x8, 0x5}, {0x3aefad9c, 0x3, 0x8000, 0x100}, {0x81, 0x7, 0x1, 0x9}, {0x4, 0xb64, 0xe, 0x5}, {0x8, 0x5, 0x2, 0x7}, {0x8d, 0xfffffff7, 0x280000, 0x4}, {0x8, 0x6, 0x100, 0x9}, {0x8, 0x6, 0xfffffffa}, {0x4, 0x8, 0xc8, 0x200}, {0x100, 0x1, 0x4, 0x1}, {0x9a, 0x10, 0x350, 0xffff563d}, {0xb1a4, 0x100, 0x5, 0xd669}, {0x40, 0x1, 0x8, 0x1}, {0x1, 0x8000, 0x9, 0x5}, {0x10001, 0xfffffc00, 0x8000, 0x9}, {0x8, 0x6, 0x4, 0x6}, {0x2, 0x7, 0x3, 0x7fffffff}, {0x2, 0x3, 0x4, 0xfad}, {0x1ff, 0x1, 0xfab2, 0x9}, {0x9, 0x9, 0x81, 0x3}, {0x726, 0x0, 0x6}, {0xff, 0x5a9, 0x72, 0x3}, {0x6, 0x2, 0x0, 0x1}, {0x101, 0x5, 0x8, 0x2}, {0x2, 0xa3f, 0x0, 0x7348}, {0x8, 0x7fff, 0x10000, 0x80000001}, {0x0, 0xe44, 0x8, 0xf7}, {0x4, 0x4, 0x340, 0x2}, {0x2, 0x0, 0x8, 0x10001}, {0x0, 0xff, 0xfffffc00, 0x483c}, {0x0, 0x9, 0x43, 0x1}, {0x93bb, 0x800, 0x3, 0xda1}, {0xf, 0x6, 0x4de, 0x3}, {0x4d7e277a, 0x2, 0x4, 0x1}, {0x9, 0x1000, 0x0, 0x768f}, {0xbc, 0x85c, 0xa, 0x5}, {0xfffffffa, 0x9, 0xffffffe1, 0x7fff}, {0x7d, 0xffffffff, 0x5, 0xa44d}, {0x57, 0x7f, 0x4, 0x7}, {0x6, 0x7, 0x2, 0x1}, {0x6, 0x4, 0x1, 0x1}, {0x200, 0xc, 0xf5, 0x8000}, {0x4, 0x0, 0x5, 0xe1253e26}, {0x9, 0xffff, 0xffffffff, 0xfffffffa}, {0x3b66, 0x0, 0x2, 0x67fd}, {0x7, 0x5d, 0x0, 0xffffff46}, {0x6, 0x6, 0xdd5, 0x827}, {0x0, 0x7, 0x0, 0x1}, {0x4, 0xfffffffe, 0x14, 0xf}, {0x6, 0x6, 0xb, 0x1}, {0xffff0001, 0x4, 0x8, 0x3}, {0x400, 0x7, 0x7fffffff, 0x1}, {0x401, 0x5a724697, 0xffff8000, 0x37}, {0x8, 0x391fd43d, 0x5, 0x4}, {0x800000, 0xf, 0x5, 0x8}, {0xe, 0x5, 0xc, 0x1ff}, {0x5, 0x77e, 0xe, 0x9}, {0x200, 0xff, 0xffffffff, 0x3}, {0x3, 0x1ff, 0xa65, 0x1}]}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x81}, 0x800) 26.976248603s ago: executing program 35 (id=4036): r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x4b, &(0x7f0000000680)={&(0x7f0000000040)={0x40, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a000600"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT]}]}, 0x40}}, 0x49000) 8.747548013s ago: executing program 0 (id=4055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1fffff, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) waitid(0x1, r5, 0x0, 0x4, 0x0) 7.27277849s ago: executing program 0 (id=4056): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4136}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x2, 0x0, &(0x7f0000000280)) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.566456571s ago: executing program 0 (id=4057): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="b099b9", 0x3}, {&(0x7f0000000240)="283c0e576771d85955f7539007be2c65d287b3c3652d183779227a28d4d4358a3adf80dd53c5905ef2d4e67f1371e9d79fa3a8cc80f820f45e80348960ca85c8c6f1d6441e229119a91f47e738", 0x4d}], 0x2, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x50, 0xf) 3.433487096s ago: executing program 0 (id=4058): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe5a8, 0x80, 0x7fff, 0x1af}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.241016791s ago: executing program 0 (id=4059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 0 (id=4060): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="0448a599dc4c", @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x22, 0x1, 0x0, @local}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="1479d2df", 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}}, 0x48004) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ea"], 0x2c}}, 0x20008000) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x4040004) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.4.2093'. [ 240.193331][T10652] hub 6-0:1.0: USB hub found [ 240.240514][T10652] hub 6-0:1.0: 1 port detected [ 241.730817][T10647] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 241.741541][T10647] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 242.257463][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2105'. [ 242.487457][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'. [ 242.513151][T10688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.722343][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 243.084403][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2121'. [ 243.576002][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 243.576020][ T30] audit: type=1326 audit(1758300420.334:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.608894][ T30] audit: type=1326 audit(1758300420.374:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.689870][ T30] audit: type=1326 audit(1758300420.374:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.795813][ T30] audit: type=1326 audit(1758300420.374:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.818893][ T30] audit: type=1326 audit(1758300420.374:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.842927][ T30] audit: type=1326 audit(1758300420.374:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.895686][ T30] audit: type=1326 audit(1758300420.374:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.946660][ T30] audit: type=1326 audit(1758300420.374:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 243.999504][ T30] audit: type=1326 audit(1758300420.374:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 244.043243][ T30] audit: type=1326 audit(1758300420.374:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 246.285384][T10762] pimreg: entered allmulticast mode [ 246.311976][T10762] pimreg: left allmulticast mode [ 246.822503][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'. [ 247.237773][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2150'. [ 248.103520][T10807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2160'. [ 248.320791][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 248.504812][T10818] tipc: Started in network mode [ 248.518909][T10818] tipc: Node identity 0e1eed53678e, cluster identity 4711 [ 248.576753][T10818] tipc: Enabled bearer , priority 0 [ 248.610451][T10821] syzkaller0: entered promiscuous mode [ 248.615985][T10821] syzkaller0: entered allmulticast mode [ 248.664214][T10818] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 248.684909][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 248.758876][T10818] tipc: Resetting bearer [ 248.804826][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 248.814324][T10817] tipc: Resetting bearer [ 248.867967][T10817] tipc: Disabling bearer [ 249.019274][T10813] raw_sendmsg: syz.2.2163 forgot to set AF_INET. Fix it! [ 249.138398][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2174'. [ 249.372147][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 249.611684][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 249.963356][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 249.963374][ T30] audit: type=1326 audit(1758300426.724:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.040539][ T30] audit: type=1326 audit(1758300426.724:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.067592][ T30] audit: type=1326 audit(1758300426.724:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.090827][ T30] audit: type=1326 audit(1758300426.724:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.115167][T10882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2189'. [ 250.126349][ T30] audit: type=1326 audit(1758300426.724:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.171967][ T30] audit: type=1326 audit(1758300426.734:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.252889][ T30] audit: type=1326 audit(1758300426.734:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.298056][ T30] audit: type=1326 audit(1758300426.734:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.321406][ T30] audit: type=1326 audit(1758300426.734:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.370900][ T30] audit: type=1326 audit(1758300426.734:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 250.599695][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2196'. [ 250.622340][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 250.833100][T10909] pimreg: entered allmulticast mode [ 250.855587][T10911] pimreg: left allmulticast mode [ 250.995961][T10921] netdevsim netdevsim1: Direct firmware load for ./bus failed with error -2 [ 251.031776][T10921] netdevsim netdevsim1: Falling back to sysfs fallback for: ./bus [ 254.123855][T11006] __nla_validate_parse: 8 callbacks suppressed [ 254.123876][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 254.821713][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 255.286697][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 255.286715][ T30] audit: type=1326 audit(1758300432.054:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 255.400664][ T30] audit: type=1326 audit(1758300432.124:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 255.460930][ T30] audit: type=1326 audit(1758300432.124:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 255.674499][ T30] audit: type=1326 audit(1758300432.434:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 255.730500][ T30] audit: type=1326 audit(1758300432.434:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 255.804942][ T30] audit: type=1326 audit(1758300432.434:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 255.853304][ T30] audit: type=1326 audit(1758300432.434:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 255.946631][ T30] audit: type=1326 audit(1758300432.434:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 255.974772][T11043] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.995866][ T30] audit: type=1326 audit(1758300432.434:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 256.124511][ T30] audit: type=1326 audit(1758300432.434:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 256.166167][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 260.997667][T11213] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2336'. [ 261.017631][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.023974][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.307711][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2340'. [ 261.356652][T11225] program syz.0.2342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.387829][T11225] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.473256][T11227] netlink: 'syz.3.2343': attribute type 7 has an invalid length. [ 261.495843][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2343'. [ 261.940858][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 261.940877][ T30] audit: type=1326 audit(1758300438.704:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.038696][ T30] audit: type=1326 audit(1758300438.764:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.086785][ T30] audit: type=1326 audit(1758300438.764:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.136515][ T30] audit: type=1326 audit(1758300438.764:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.231029][ T30] audit: type=1326 audit(1758300438.764:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.310535][ T30] audit: type=1326 audit(1758300438.764:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.363569][T11259] netlink: 'syz.4.2358': attribute type 7 has an invalid length. [ 262.390390][ T30] audit: type=1326 audit(1758300438.764:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.406600][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 262.485901][ T30] audit: type=1326 audit(1758300438.764:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.518117][ T30] audit: type=1326 audit(1758300438.764:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.580983][T11263] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 262.582479][ T30] audit: type=1326 audit(1758300438.764:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 262.835355][T11270] netlink: 'syz.4.2363': attribute type 4 has an invalid length. [ 263.333033][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 264.382758][T11322] netlink: 'syz.3.2389': attribute type 4 has an invalid length. [ 264.426594][T11322] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2389'. [ 264.451088][T11322] .`: renamed from bond0 [ 266.167929][T11398] team0: Device ipvlan2 failed to register rx_handler [ 266.567259][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 267.709139][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 267.709157][ T30] audit: type=1326 audit(1758300444.474:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 267.768819][ T30] audit: type=1326 audit(1758300444.514:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 267.799490][ T30] audit: type=1326 audit(1758300444.514:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 267.856540][ T30] audit: type=1326 audit(1758300444.514:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 267.915919][ T30] audit: type=1326 audit(1758300444.664:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 267.963549][T11453] tipc: Enabling of bearer rejected, failed to enable media [ 267.982603][ T30] audit: type=1326 audit(1758300444.664:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 268.034132][ T30] audit: type=1326 audit(1758300444.664:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 268.064760][ T30] audit: type=1326 audit(1758300444.664:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 268.097211][T11453] tipc: Enabling of bearer rejected, failed to enable media [ 268.141768][ T30] audit: type=1326 audit(1758300444.664:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 268.226290][ T30] audit: type=1326 audit(1758300444.664:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 268.617454][T11446] netlink: 'syz.0.2443': attribute type 5 has an invalid length. [ 268.806081][T11498] geneve2: entered promiscuous mode [ 269.981909][T11554] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2489'. [ 270.052557][T11554] unsupported nla_type 52263 [ 270.233789][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2492'. [ 270.282348][T11561] openvswitch: netlink: Flow key attr not present in new flow. [ 271.964299][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2527'. [ 272.474189][T11659] netlink: 712 bytes leftover after parsing attributes in process `syz.4.2539'. [ 272.591615][T11666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2543'. [ 273.090247][T11692] netlink: 4140 bytes leftover after parsing attributes in process `syz.3.2556'. [ 273.715931][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 273.715951][ T30] audit: type=1326 audit(1758300450.474:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11695 comm="syz.4.2558" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x0 [ 274.106352][ T30] audit: type=1326 audit(1758300450.864:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.155219][ T30] audit: type=1326 audit(1758300450.864:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.181382][T11738] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 274.200087][ T30] audit: type=1326 audit(1758300450.874:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.264257][ T30] audit: type=1326 audit(1758300450.874:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.335736][ T30] audit: type=1326 audit(1758300450.874:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.365926][ T30] audit: type=1326 audit(1758300450.874:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.412483][ T30] audit: type=1326 audit(1758300450.874:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.492749][ T30] audit: type=1326 audit(1758300450.874:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.528863][T11751] random: crng reseeded on system resumption [ 274.553700][ T30] audit: type=1326 audit(1758300450.874:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 274.960857][T11774] netlink: 'syz.0.2592': attribute type 10 has an invalid length. [ 274.972402][T11774] batman_adv: batadv0: Removing interface: dummy0 [ 275.003415][T11774] team0: Port device dummy0 added [ 275.015927][T11778] netlink: 'syz.0.2592': attribute type 10 has an invalid length. [ 275.039302][T11778] team0: Port device dummy0 removed [ 275.053456][T11778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 275.558165][T11804] netlink: 'syz.3.2603': attribute type 4 has an invalid length. [ 275.916667][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2613'. [ 278.062673][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2633'. [ 278.096518][T11879] openvswitch: netlink: Flow key attr not present in new flow. [ 278.351467][T11887] syzkaller1: entered promiscuous mode [ 278.383610][T11887] syzkaller1: entered allmulticast mode [ 278.523279][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2643'. [ 278.665325][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2645'. [ 278.727213][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2645'. [ 278.750761][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2645'. [ 278.797653][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 278.833441][T11910] openvswitch: netlink: Flow key attr not present in new flow. [ 279.013482][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 279.013504][ T30] audit: type=1326 audit(1758300455.774:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.092909][ T30] audit: type=1326 audit(1758300455.774:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.128310][T11921] netlink: 'syz.3.2652': attribute type 13 has an invalid length. [ 279.131176][ T30] audit: type=1326 audit(1758300455.814:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.212485][ T30] audit: type=1326 audit(1758300455.814:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.295945][ T30] audit: type=1326 audit(1758300455.814:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.319792][ T30] audit: type=1326 audit(1758300455.814:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.376038][T11921] 8021q: adding VLAN 0 to HW filter on device .` [ 279.401840][T11921] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.402992][ T30] audit: type=1326 audit(1758300455.814:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.437020][T11921] batman_adv: batadv0: Interface activated: dummy0 [ 279.445093][T11921] batadv0: mtu less than device minimum [ 279.463372][ T30] audit: type=1326 audit(1758300455.814:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.463850][T11921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 279.497701][T11921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 279.509743][T11921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 279.510668][ T30] audit: type=1326 audit(1758300455.814:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.521900][T11921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 279.546327][ T30] audit: type=1326 audit(1758300455.814:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 279.554677][T11921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 279.587101][T11921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 279.599173][T11921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 279.829451][T11943] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2664'. [ 280.192519][T11962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.200113][T11962] IPv6: NLM_F_CREATE should be set when creating new route [ 280.207421][T11962] IPv6: NLM_F_CREATE should be set when creating new route [ 281.110538][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 281.175999][T11954] netlink: 'syz.0.2668': attribute type 5 has an invalid length. [ 281.336038][T12013] netlink: 'syz.2.2695': attribute type 10 has an invalid length. [ 281.352587][T12013] team0: Port device dummy0 added [ 281.362662][T12013] netlink: 'syz.2.2695': attribute type 10 has an invalid length. [ 281.372572][T12013] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.407412][T12013] team0: Failed to send options change via netlink (err -105) [ 281.420699][T12013] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.431628][T12013] team0: Port device dummy0 removed [ 281.478067][T12013] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 281.635552][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 281.650232][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2701'. [ 283.115384][T12072] __nla_validate_parse: 3 callbacks suppressed [ 283.115403][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 283.697087][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 283.963645][T12096] tipc: Enabling of bearer rejected, failed to enable media [ 284.122903][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 284.122921][ T30] audit: type=1326 audit(1758300460.884:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.160081][ T30] audit: type=1326 audit(1758300460.914:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.214537][ T30] audit: type=1326 audit(1758300460.914:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.270733][ T30] audit: type=1326 audit(1758300460.914:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.351102][ T30] audit: type=1326 audit(1758300460.914:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.379353][ T30] audit: type=1326 audit(1758300460.914:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.492860][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'. [ 284.506655][ T30] audit: type=1326 audit(1758300460.914:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.552605][ T30] audit: type=1326 audit(1758300460.914:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.577546][ T30] audit: type=1326 audit(1758300460.944:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 284.630987][ T30] audit: type=1326 audit(1758300460.944:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12103 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 285.394391][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 285.446068][T12151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2760'. [ 285.525640][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'. [ 286.531021][T12170] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 287.045991][T12178] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2771'. [ 287.396016][T12184] netlink: 'syz.1.2774': attribute type 5 has an invalid length. [ 287.823160][T12199] syz_tun: refused to change device tx_queue_len [ 288.160468][T12213] netlink: 'syz.1.2787': attribute type 5 has an invalid length. [ 289.115535][T12238] netlink: 'syz.1.2799': attribute type 5 has an invalid length. [ 290.012792][T12257] bond0: (slave dummy0): Releasing backup interface [ 291.524048][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.589682][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.606815][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.674812][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.688081][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.044313][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 292.044332][ T30] audit: type=1326 audit(1758300468.804:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.149844][ T30] audit: type=1326 audit(1758300468.834:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.228911][ T30] audit: type=1326 audit(1758300468.844:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.326450][ T30] audit: type=1326 audit(1758300468.844:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.363167][T12288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 292.363167][T12288] program syz.3.2821 not setting count and/or reply_len properly [ 292.425253][ T30] audit: type=1326 audit(1758300468.844:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.566084][ T30] audit: type=1326 audit(1758300468.844:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.651679][ T30] audit: type=1326 audit(1758300468.844:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.771053][ T30] audit: type=1326 audit(1758300468.844:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.828160][ T30] audit: type=1326 audit(1758300468.844:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 292.906519][ T30] audit: type=1326 audit(1758300468.844:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 293.292712][T12278] chnl_net:caif_netlink_parms(): no params data found [ 293.313687][T12305] loop9: detected capacity change from 0 to 7 [ 293.345586][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.372977][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.402406][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.441325][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.475137][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.512523][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.535275][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.566154][T12185] ldm_validate_partition_table(): Disk read failed. [ 293.601612][ T1169] bridge_slave_1: left allmulticast mode [ 293.604960][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.623113][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.627759][ T1169] bridge_slave_1: left promiscuous mode [ 293.642151][T12185] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.663298][T12185] Dev loop9: unable to read RDB block 0 [ 293.673506][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.696265][T12185] loop9: unable to read partition table [ 293.707647][ T1169] bridge_slave_0: left allmulticast mode [ 293.709683][T12308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2829'. [ 293.713562][ T1169] bridge_slave_0: left promiscuous mode [ 293.736896][ T5881] Bluetooth: hci5: command tx timeout [ 293.745179][T12185] loop9: partition table beyond EOD, truncated [ 293.763385][T12305] ldm_validate_partition_table(): Disk read failed. [ 293.775806][T12305] Dev loop9: unable to read RDB block 0 [ 293.777669][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.782099][T12305] loop9: unable to read partition table [ 293.795642][T12305] loop9: partition table beyond EOD, truncated [ 293.816765][T12305] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 293.816765][T12305] ) failed (rc=-5) [ 294.736005][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.754793][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.764678][ T1169] bond0 (unregistering): Released all slaves [ 294.909897][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2835'. [ 294.982922][T12325] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2835'. [ 295.032174][ T1169] tipc: Left network mode [ 295.102676][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.120203][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.176669][T12278] bridge_slave_0: entered allmulticast mode [ 295.184658][T12278] bridge_slave_0: entered promiscuous mode [ 295.224995][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.250335][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.276707][T12278] bridge_slave_1: entered allmulticast mode [ 295.284740][T12278] bridge_slave_1: entered promiscuous mode [ 295.434423][T12338] bridge0: entered allmulticast mode [ 295.500513][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.574755][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.591703][T12350] hub 9-0:1.0: USB hub found [ 295.613384][T12350] hub 9-0:1.0: 1 port detected [ 295.763642][T12278] team0: Port device team_slave_0 added [ 295.806624][ T5881] Bluetooth: hci5: command tx timeout [ 295.812758][T12278] team0: Port device team_slave_1 added [ 295.988604][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2850'. [ 296.003873][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.821642][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 296.930986][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 297.324176][ T30] kauditd_printk_skb: 319 callbacks suppressed [ 297.324195][ T30] audit: type=1326 audit(1758300474.084:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12397 comm="syz.1.2862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 297.360297][ T30] audit: type=1326 audit(1758300474.124:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12397 comm="syz.1.2862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 297.387948][ T30] audit: type=1326 audit(1758300474.124:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12397 comm="syz.1.2862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 297.436598][ T30] audit: type=1326 audit(1758300474.124:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12397 comm="syz.1.2862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 297.475239][ T30] audit: type=1326 audit(1758300474.124:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12397 comm="syz.1.2862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 297.887362][ T5881] Bluetooth: hci5: command tx timeout [ 297.957164][T12378] tipc: New replicast peer: 255.255.255.255 [ 297.964772][T12378] tipc: Enabled bearer , priority 7 [ 297.999984][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.040275][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.113349][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.195067][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.225167][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.283983][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.846931][T12422] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2873'. [ 298.899220][T12278] hsr_slave_0: entered promiscuous mode [ 298.905796][T12278] hsr_slave_1: entered promiscuous mode [ 298.967436][T12278] debugfs: 'hsr0' already exists in 'hsr' [ 298.986442][T12278] Cannot create hsr debugfs directory [ 299.177163][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2877'. [ 299.977273][ T5881] Bluetooth: hci5: command tx timeout [ 300.382210][T12489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2897'. [ 300.533635][T12278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.583068][T12278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.625154][T12278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.640056][T12493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2898'. [ 300.676568][T12278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.769843][ T30] audit: type=1326 audit(1758300477.534:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.2901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 300.816698][T12508] hub 2-0:1.0: USB hub found [ 300.846970][ T30] audit: type=1326 audit(1758300477.564:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.2901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 300.871545][T12508] hub 2-0:1.0: 1 port detected [ 300.886305][ T30] audit: type=1326 audit(1758300477.564:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.2901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 300.923614][ T30] audit: type=1326 audit(1758300477.564:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.2901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 301.071951][ T30] audit: type=1326 audit(1758300477.564:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.2901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 301.232416][T12278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.300634][T12278] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.347421][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.354635][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.453818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.461772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.741505][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.874125][T12278] veth0_vlan: entered promiscuous mode [ 301.911633][T12278] veth1_vlan: entered promiscuous mode [ 302.016331][T12278] veth0_macvtap: entered promiscuous mode [ 302.036542][T12278] veth1_macvtap: entered promiscuous mode [ 302.089380][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.132917][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.287685][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.318937][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.387051][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.439916][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.789672][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.825196][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.913624][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.952174][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.273443][T12567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2812'. [ 304.280557][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 304.280591][ T30] audit: type=1326 audit(1758300481.044:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.394734][ T30] audit: type=1326 audit(1758300481.044:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.416077][T12596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2929'. [ 304.525472][ T30] audit: type=1326 audit(1758300481.044:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.593980][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.604465][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.612970][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.622623][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.630839][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.640308][ T30] audit: type=1326 audit(1758300481.344:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.3.2930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.664148][ T30] audit: type=1326 audit(1758300481.344:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.3.2930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.696321][ T30] audit: type=1326 audit(1758300481.354:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.3.2930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.719099][ T30] audit: type=1326 audit(1758300481.354:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.3.2930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.741651][ T30] audit: type=1326 audit(1758300481.354:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.3.2930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.764778][ T30] audit: type=1326 audit(1758300481.354:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.3.2930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.787328][ T30] audit: type=1326 audit(1758300481.354:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.3.2930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 304.939498][T12609] netlink: 'syz.0.2932': attribute type 20 has an invalid length. [ 305.315564][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2939'. [ 305.621764][T12634] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 305.930256][T12644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2943'. [ 306.432052][T12605] chnl_net:caif_netlink_parms(): no params data found [ 306.535682][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 306.679854][ T59] bridge_slave_1: left allmulticast mode [ 306.685601][ T59] bridge_slave_1: left promiscuous mode [ 306.744890][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.767773][ T5186] Bluetooth: hci0: command tx timeout [ 306.783584][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 306.793794][ T59] bridge_slave_0: left allmulticast mode [ 306.808235][ T59] bridge_slave_0: left promiscuous mode [ 306.817132][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.263428][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2954'. [ 307.509951][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.522373][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.532730][ T59] bond0 (unregistering): Released all slaves [ 307.570436][T12677] pim6reg1: entered promiscuous mode [ 307.575800][T12677] pim6reg1: entered allmulticast mode [ 307.588049][T12680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.598810][T12680] batman_adv: batadv0: Interface deactivated: dummy0 [ 307.605831][T12680] batman_adv: batadv0: Removing interface: dummy0 [ 307.734590][T12605] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.742499][T12605] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.752211][T12605] bridge_slave_0: entered allmulticast mode [ 307.760123][T12605] bridge_slave_0: entered promiscuous mode [ 307.802335][T12605] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.810110][T12605] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.818450][T12605] bridge_slave_1: entered allmulticast mode [ 307.825938][T12605] bridge_slave_1: entered promiscuous mode [ 307.903915][T12605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.934772][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 307.950347][T12605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.174959][ T59] hsr_slave_0: left promiscuous mode [ 308.198305][ T59] hsr_slave_1: left promiscuous mode [ 308.846540][ T5186] Bluetooth: hci0: command tx timeout [ 309.387072][T12605] team0: Port device team_slave_0 added [ 309.412557][T12605] team0: Port device team_slave_1 added [ 309.643625][T12605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.676460][T12605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.726010][T12605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.807822][T12605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.853787][T12605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.926418][T12605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.277634][T12605] hsr_slave_0: entered promiscuous mode [ 310.307282][T12605] hsr_slave_1: entered promiscuous mode [ 310.929670][ T5186] Bluetooth: hci0: command tx timeout [ 310.939535][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 310.939555][ T30] audit: type=1326 audit(1758300487.704:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 310.977116][ T30] audit: type=1326 audit(1758300487.704:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 311.015800][ T30] audit: type=1326 audit(1758300487.744:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 311.170538][ T30] audit: type=1326 audit(1758300487.744:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 311.250895][ T30] audit: type=1326 audit(1758300487.744:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 311.313743][ T30] audit: type=1326 audit(1758300487.744:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 311.344542][ T30] audit: type=1326 audit(1758300487.744:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 311.455873][ T30] audit: type=1326 audit(1758300487.744:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 312.121590][T12605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.173177][T12605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.194145][T12605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.217811][T12605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.501031][T12605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.561513][T12605] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.578498][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.578621][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.601190][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.601291][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.806967][T12605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.872633][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2999'. [ 312.974753][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'. [ 312.997873][T12605] veth0_vlan: entered promiscuous mode [ 313.009527][ T5186] Bluetooth: hci0: command tx timeout [ 313.051274][T12605] veth1_vlan: entered promiscuous mode [ 313.234474][T12605] veth0_macvtap: entered promiscuous mode [ 313.268622][T12605] veth1_macvtap: entered promiscuous mode [ 313.350706][T12605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.372810][T12780] syz.3.2987: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.420632][T12605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.449718][T12780] CPU: 0 UID: 0 PID: 12780 Comm: syz.3.2987 Not tainted syzkaller #0 PREEMPT(full) [ 313.449750][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.449771][T12780] Call Trace: [ 313.449780][T12780] [ 313.449790][T12780] dump_stack_lvl+0x189/0x250 [ 313.449825][T12780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.449851][T12780] ? __pfx__printk+0x10/0x10 [ 313.449880][T12780] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 313.449905][T12780] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 313.449932][T12780] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 313.449960][T12780] warn_alloc+0x214/0x310 [ 313.450000][T12780] ? __pfx_warn_alloc+0x10/0x10 [ 313.450050][T12780] ? __get_vm_area_node+0x28f/0x300 [ 313.450080][T12780] ? hash_netiface_create+0x358/0xfe0 [ 313.450114][T12780] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 313.450179][T12780] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.450209][T12780] ? hash_netiface_create+0x358/0xfe0 [ 313.450240][T12780] ? __get_vm_area_node+0x28f/0x300 [ 313.450271][T12780] ? hash_netiface_create+0x358/0xfe0 [ 313.450302][T12780] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 313.450334][T12780] ? hash_netiface_create+0x358/0xfe0 [ 313.450360][T12780] ? __do_fast_syscall_32+0xb6/0x2b0 [ 313.450414][T12780] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.450463][T12780] ? rcu_is_watching+0x15/0xb0 [ 313.450485][T12780] ? hash_netiface_create+0x358/0xfe0 [ 313.450531][T12780] ? hash_netiface_create+0x358/0xfe0 [ 313.450555][T12780] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 313.450587][T12780] ? hash_netiface_create+0x358/0xfe0 [ 313.450616][T12780] ? hash_netiface_create+0x2fe/0xfe0 [ 313.450650][T12780] hash_netiface_create+0x358/0xfe0 [ 313.450686][T12780] ? __nla_parse+0x40/0x60 [ 313.450707][T12780] ? __pfx_hash_netiface_create+0x10/0x10 [ 313.450739][T12780] ip_set_create+0xa97/0x1940 [ 313.450770][T12780] ? ip_set_create+0x4a2/0x1940 [ 313.450813][T12780] ? __pfx_ip_set_create+0x10/0x10 [ 313.450878][T12780] nfnetlink_rcv_msg+0xb4a/0x1130 [ 313.450912][T12780] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 313.450964][T12780] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 313.450993][T12780] ? kasan_save_free_info+0x46/0x50 [ 313.451076][T12780] netlink_rcv_skb+0x205/0x470 [ 313.451100][T12780] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 313.451134][T12780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.451169][T12780] ? bpf_lsm_capable+0x9/0x20 [ 313.451196][T12780] ? security_capable+0x7e/0x2e0 [ 313.451238][T12780] nfnetlink_rcv+0x26a/0x2520 [ 313.451272][T12780] ? __dev_queue_xmit+0x1d79/0x3b50 [ 313.451314][T12780] ? __dev_queue_xmit+0x27b/0x3b50 [ 313.451355][T12780] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 313.451385][T12780] ? __pfx___dev_queue_xmit+0x10/0x10 [ 313.451427][T12780] ? ref_tracker_free+0x63a/0x7d0 [ 313.451447][T12780] ? __asan_memcpy+0x40/0x70 [ 313.451471][T12780] ? __pfx_ref_tracker_free+0x10/0x10 [ 313.451488][T12780] ? __skb_clone+0x63/0x7a0 [ 313.451519][T12780] ? __skb_clone+0x483/0x7a0 [ 313.451563][T12780] ? skb_clone+0x246/0x3a0 [ 313.451593][T12780] ? __netlink_deliver_tap+0x807/0x850 [ 313.451615][T12780] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.451642][T12780] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.451687][T12780] netlink_unicast+0x82f/0x9e0 [ 313.451730][T12780] ? __pfx_netlink_unicast+0x10/0x10 [ 313.451763][T12780] ? netlink_sendmsg+0x642/0xb30 [ 313.451784][T12780] ? skb_put+0x11b/0x210 [ 313.451812][T12780] netlink_sendmsg+0x805/0xb30 [ 313.451845][T12780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.451872][T12780] ? __import_iovec+0x5d4/0x7f0 [ 313.451907][T12780] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.451931][T12780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.451953][T12780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.451977][T12780] __sock_sendmsg+0x219/0x270 [ 313.452011][T12780] ____sys_sendmsg+0x505/0x830 [ 313.452052][T12780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.452086][T12780] ? __pfx_futex_wake_mark+0x10/0x10 [ 313.452123][T12780] ___sys_sendmsg+0x21f/0x2a0 [ 313.452152][T12780] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.452217][T12780] ? __fget_files+0x2a/0x420 [ 313.452234][T12780] ? __fget_files+0x3a0/0x420 [ 313.452265][T12780] __sys_sendmsg+0x164/0x220 [ 313.452294][T12780] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.452338][T12780] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.452363][T12780] __do_fast_syscall_32+0xb6/0x2b0 [ 313.452387][T12780] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.452413][T12780] do_fast_syscall_32+0x34/0x80 [ 313.452436][T12780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.452461][T12780] RIP: 0023:0xf705e539 [ 313.452511][T12780] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 313.452530][T12780] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 313.452553][T12780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 313.452568][T12780] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.452581][T12780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.452593][T12780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.452604][T12780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.452635][T12780] [ 313.452649][T12780] Mem-Info: [ 313.997459][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.009972][T12780] active_anon:6870 inactive_anon:0 isolated_anon:0 [ 314.009972][T12780] active_file:14405 inactive_file:39945 isolated_file:0 [ 314.009972][T12780] unevictable:768 dirty:101 writeback:0 [ 314.009972][T12780] slab_reclaimable:11235 slab_unreclaimable:112311 [ 314.009972][T12780] mapped:29565 shmem:1355 pagetables:1420 [ 314.009972][T12780] sec_pagetables:0 bounce:0 [ 314.009972][T12780] kernel_misc_reclaimable:0 [ 314.009972][T12780] free:1267629 free_pcp:14178 free_cma:0 [ 314.098267][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.119761][T12780] Node 0 active_anon:27416kB inactive_anon:0kB active_file:57620kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118300kB dirty:400kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12236kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 314.187137][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.199440][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.226482][T12780] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 314.305979][T12780] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.345517][T12780] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 314.351651][T12780] Node 0 DMA32 free:1164000kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27668kB inactive_anon:0kB active_file:57620kB inactive_file:158004kB unevictable:1536kB writepending:396kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:42632kB local_pcp:17592kB free_cma:0kB [ 314.395531][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.408274][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.438932][T12780] lowmem_reserve[]: 0 0 1 1 1 [ 314.468009][T12780] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 314.515113][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.541292][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.546721][T12780] lowmem_reserve[]: 0 0 0 0 0 [ 314.561062][T12780] Node 1 Normal free:3890436kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14592kB local_pcp:7520kB free_cma:0kB [ 314.627289][T12780] lowmem_reserve[]: 0 0 0 0 0 [ 314.642292][T12780] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.673510][T12780] Node 0 DMA32: 3*4kB (E) 11*8kB (ME) 2*16kB (ME) 98*32kB (UME) 173*64kB (UME) 131*128kB (M) 53*256kB (UM) 10*512kB (M) 1*1024kB (E) 4*2048kB (ME) 269*4096kB (UM) = 1160836kB [ 314.706042][T12780] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 314.722823][T12780] Node 1 Normal: 235*4kB (UME) 57*8kB (UME) 37*16kB (UME) 162*32kB (UME) 52*64kB (UME) 10*128kB (UME) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3890436kB [ 314.751239][T12780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.763911][T12780] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.787069][T12780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.803103][T12780] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.813315][T12780] 55702 total pagecache pages [ 314.822056][T12780] 0 pages in swap cache [ 314.826338][T12780] Free swap = 124996kB [ 314.830547][T12780] Total swap = 124996kB [ 314.834718][T12780] 2097051 pages RAM [ 314.875800][T12780] 0 pages HighMem/MovableOnly [ 314.884622][T12780] 425671 pages reserved [ 314.893810][T12780] 0 pages cma reserved [ 315.264863][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3014'. [ 315.525844][T12880] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.582622][T12881] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 315.589527][T12881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.647399][T12881] vhci_hcd vhci_hcd.0: Device attached [ 315.906768][ T5951] vhci_hcd: vhci_device speed not set [ 315.915427][T12887] net_ratelimit: 14 callbacks suppressed [ 315.915448][T12887] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 315.972105][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.981312][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.991113][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.996501][ T5951] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 316.019146][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.031575][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.288691][T12882] vhci_hcd: connection reset by peer [ 316.418175][ T59] vhci_hcd: stop threads [ 316.423189][ T59] vhci_hcd: release socket [ 316.483580][ T59] vhci_hcd: disconnect device [ 317.749818][T12890] chnl_net:caif_netlink_parms(): no params data found [ 318.133630][ T5186] Bluetooth: hci1: command tx timeout [ 318.360256][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.371470][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.381050][T12890] bridge_slave_0: entered allmulticast mode [ 318.389491][T12890] bridge_slave_0: entered promiscuous mode [ 318.414163][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.422257][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.430255][T12890] bridge_slave_1: entered allmulticast mode [ 318.439584][T12890] bridge_slave_1: entered promiscuous mode [ 318.570074][T12890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.622780][T12890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.741904][T12890] team0: Port device team_slave_0 added [ 318.761024][T12890] team0: Port device team_slave_1 added [ 319.584202][T12944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 319.590903][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 319.660620][T12944] vhci_hcd vhci_hcd.0: Device attached [ 319.846828][ T5969] vhci_hcd: vhci_device speed not set [ 319.917118][ T5969] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 320.164957][ T1040] bond0 (unregistering): Released all slaves [ 320.205506][T12945] vhci_hcd: connection reset by peer [ 320.213481][ T5186] Bluetooth: hci1: command tx timeout [ 320.230049][ T33] vhci_hcd: stop threads [ 320.230084][ T33] vhci_hcd: release socket [ 320.230160][ T33] vhci_hcd: disconnect device [ 320.477265][ T1040] tipc: Disabling bearer [ 320.490670][ T1040] tipc: Disabling bearer [ 320.501441][ T1040] tipc: Left network mode [ 320.595032][T12890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.602387][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.669659][T12890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.715118][T12890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.729021][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.816834][T12890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.064504][T12890] hsr_slave_0: entered promiscuous mode [ 321.065694][T12890] hsr_slave_1: entered promiscuous mode [ 321.073889][T12890] debugfs: 'hsr0' already exists in 'hsr' [ 321.073914][T12890] Cannot create hsr debugfs directory [ 321.153163][ T1040] hsr_slave_0: left promiscuous mode [ 321.160280][ T1040] hsr_slave_1: left promiscuous mode [ 321.161027][ T1040] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 321.161101][ T1040] batman_adv: batadv0: Removing interface: virt_wifi0 [ 321.167360][ T5951] vhci_hcd: vhci_device speed not set [ 322.299195][ T5186] Bluetooth: hci1: command tx timeout [ 322.462507][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.469028][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.001552][ T30] audit: type=1326 audit(1758300499.764:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.101868][ T30] audit: type=1326 audit(1758300499.764:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.171555][ T30] audit: type=1326 audit(1758300499.784:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.224933][ T30] audit: type=1326 audit(1758300499.784:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.312268][ T30] audit: type=1326 audit(1758300499.784:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.422756][ T30] audit: type=1326 audit(1758300499.784:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.480110][ T30] audit: type=1326 audit(1758300499.784:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.480164][ T30] audit: type=1326 audit(1758300499.784:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.480212][ T30] audit: type=1326 audit(1758300499.784:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.480258][ T30] audit: type=1326 audit(1758300499.784:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.939822][T12890] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.023248][T13044] pimreg: entered allmulticast mode [ 324.055873][T12890] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.080124][T13044] pimreg: left allmulticast mode [ 324.146083][T12890] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.185893][T12890] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.368046][ T5186] Bluetooth: hci1: command tx timeout [ 324.518407][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.582907][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.642029][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.649281][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.798858][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.806054][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.075909][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.095933][ T5969] vhci_hcd: vhci_device speed not set [ 325.321787][T12890] veth0_vlan: entered promiscuous mode [ 325.383052][T12890] veth1_vlan: entered promiscuous mode [ 325.530923][T12890] veth0_macvtap: entered promiscuous mode [ 325.578745][T12890] veth1_macvtap: entered promiscuous mode [ 325.656345][T12890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.709978][T12890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.772173][ T3572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.856492][ T3572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.865276][ T3572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.943068][ T3572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.287698][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.295583][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.501799][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.534976][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.805664][T13122] sctp: [Deprecated]: syz.0.3092 (pid 13122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.805664][T13122] Use struct sctp_sack_info instead [ 327.137325][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3093'. [ 327.525394][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 327.600798][T13148] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3100'. [ 328.427666][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.444015][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.460119][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.469130][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.483506][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.960078][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 328.960098][ T30] audit: type=1326 audit(1758300505.724:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 329.048862][ T30] audit: type=1326 audit(1758300505.724:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 329.048917][ T30] audit: type=1326 audit(1758300505.724:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 329.048963][ T30] audit: type=1326 audit(1758300505.724:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 329.647971][ T5881] Bluetooth: hci4: command 0x0406 tx timeout [ 329.825901][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 330.083059][T13222] veth0_to_team: entered promiscuous mode [ 330.471621][T13180] chnl_net:caif_netlink_parms(): no params data found [ 330.541318][ T2998] bridge_slave_1: left allmulticast mode [ 330.565794][ T2998] bridge_slave_1: left promiscuous mode [ 330.606723][ T5186] Bluetooth: hci3: command tx timeout [ 330.620806][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.639160][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3130'. [ 330.704828][ T2998] bridge_slave_0: left allmulticast mode [ 330.713096][ T30] audit: type=1326 audit(1758300507.474:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.3135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 330.726444][ T2998] bridge_slave_0: left promiscuous mode [ 330.763320][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.772545][ T30] audit: type=1326 audit(1758300507.504:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.3135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 330.825366][ T30] audit: type=1326 audit(1758300507.504:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.3135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 330.865124][ T30] audit: type=1326 audit(1758300507.504:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.3135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 330.925030][ T30] audit: type=1326 audit(1758300507.504:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.3135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 330.959013][ T30] audit: type=1326 audit(1758300507.504:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.3135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 331.660487][ T2998] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.671068][ T2998] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.680984][ T2998] .` (unregistering): Released all slaves [ 331.701356][ T2998] bond1 (unregistering): Released all slaves [ 331.926736][ T2998] tipc: Disabling bearer [ 331.947104][ T2998] tipc: Left network mode [ 332.139241][T13266] netlink: 'syz.1.3142': attribute type 2 has an invalid length. [ 332.566095][T13180] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.601497][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.624559][T13180] bridge_slave_0: entered allmulticast mode [ 332.645613][T13180] bridge_slave_0: entered promiscuous mode [ 332.702719][ T5186] Bluetooth: hci3: command tx timeout [ 332.713420][T13180] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.754763][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.813310][T13180] bridge_slave_1: entered allmulticast mode [ 332.855669][T13180] bridge_slave_1: entered promiscuous mode [ 333.688326][T13287] tipc: Started in network mode [ 333.693792][T13287] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 333.702025][T13287] tipc: Enabled bearer , priority 0 [ 333.781107][T13180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.897818][ T2998] hsr_slave_0: left promiscuous mode [ 333.918298][ T2998] hsr_slave_1: left promiscuous mode [ 334.690461][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 334.722697][ T5972] tipc: Node number set to 11578026 [ 334.770393][ T5186] Bluetooth: hci3: command tx timeout [ 334.884412][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 334.969661][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3164'. [ 334.978864][T13329] openvswitch: netlink: Flow key attr not present in new flow. [ 335.695989][T13180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.746487][T13320] geneve2: entered promiscuous mode [ 335.866602][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 335.866622][ T30] audit: type=1326 audit(1758300512.634:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.3169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 335.899918][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 336.017038][ T30] audit: type=1326 audit(1758300512.664:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.3169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 336.088776][T13180] team0: Port device team_slave_0 added [ 336.115956][ T30] audit: type=1326 audit(1758300512.664:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.3169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 336.151619][T13180] team0: Port device team_slave_1 added [ 336.244694][ T30] audit: type=1326 audit(1758300512.664:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.3169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 336.296505][ T30] audit: type=1326 audit(1758300512.664:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.3169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 336.454431][T13180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.461728][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.585050][T13180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.608374][T13180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.615477][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.650871][T13180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.856653][ T5186] Bluetooth: hci3: command tx timeout [ 337.031079][T13180] hsr_slave_0: entered promiscuous mode [ 337.057593][T13180] hsr_slave_1: entered promiscuous mode [ 337.072978][T13369] netlink: 'syz.1.3178': attribute type 10 has an invalid length. [ 337.083690][T13180] debugfs: 'hsr0' already exists in 'hsr' [ 337.109456][T13180] Cannot create hsr debugfs directory [ 337.198145][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 337.240652][T13369] team0: Device hsr_slave_0 failed to register rx_handler [ 337.757357][T13255] Set syz1 is full, maxelem 65536 reached [ 339.185899][T13180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.275913][T13180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.342536][T13180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.419456][T13180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.467779][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 339.517769][T13456] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3212'. [ 339.545196][T13458] hsr0: entered promiscuous mode [ 339.552409][T13458] macvlan2: entered allmulticast mode [ 339.558368][T13458] hsr0: entered allmulticast mode [ 339.563811][T13458] hsr_slave_0: entered allmulticast mode [ 339.570335][T13458] hsr_slave_1: entered allmulticast mode [ 339.589824][T13456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.681183][T13456] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 339.688756][T13456] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 339.704849][T13456] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 342.640516][T13180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.708118][T13180] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.726066][T13545] netlink: 'syz.1.3228': attribute type 4 has an invalid length. [ 342.743963][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.751167][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.805172][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.812372][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.018548][T13180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.134316][T13180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.263101][T13180] veth0_vlan: entered promiscuous mode [ 343.301622][T13180] veth1_vlan: entered promiscuous mode [ 343.365743][T13180] veth0_macvtap: entered promiscuous mode [ 343.377755][T13180] veth1_macvtap: entered promiscuous mode [ 343.439370][T13180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.461961][T13180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.481178][ T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.483940][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.508008][ T33] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.510570][ T33] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.602750][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.602802][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.693780][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.693805][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.419153][T13605] C: renamed from team_slave_0 (while UP) [ 344.458766][T13605] netlink: 'syz.1.3253': attribute type 1 has an invalid length. [ 344.471668][T13605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3253'. [ 344.487199][T13605] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 344.503810][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 344.542906][T13608] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3256'. [ 344.553136][T13609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3255'. [ 344.860185][T13617] ipvlan2: entered promiscuous mode [ 345.284153][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3269'. [ 346.185258][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'. [ 346.299334][T13680] tap0: tun_chr_ioctl cmd 1074025677 [ 346.349534][T13680] tap0: linktype set to 0 [ 346.400722][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3288'. [ 346.779923][T13698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.193336][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'. [ 347.865085][T13743] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 347.873483][T13743] macsec1: entered promiscuous mode [ 347.886240][T13743] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 348.155001][T13751] team0: Device ipip0 is of different type [ 348.482349][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'. [ 348.502085][T13755] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3318'. [ 350.315303][T13807] __nla_validate_parse: 2 callbacks suppressed [ 350.315326][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 350.477076][T13809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3342'. [ 350.572325][T13813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3345'. [ 350.632164][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 351.034523][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3354'. [ 351.111482][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 351.210286][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'. [ 351.648970][T13858] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 352.279617][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 352.425400][T13889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3378'. [ 352.443355][T13889] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.452036][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.933000][T13916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3390'. [ 353.230497][T13926] netlink: 'syz.3.3395': attribute type 10 has an invalid length. [ 353.252072][T13926] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 354.397465][T13975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.697869][T13982] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 354.716023][T13982] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.260113][T14047] __nla_validate_parse: 2 callbacks suppressed [ 356.260134][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3443'. [ 356.376779][T14051] netlink: 'syz.4.3445': attribute type 8 has an invalid length. [ 356.797595][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 357.622253][T14114] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3474'. [ 358.573525][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3491'. [ 358.661771][T14150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3491'. [ 359.540419][T14185] netlink: 'syz.2.3507': attribute type 10 has an invalid length. [ 359.581462][T14185] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 359.761236][T14194] netlink: 'syz.4.3512': attribute type 10 has an invalid length. [ 359.775953][T14194] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 361.270855][T14267] netlink: 'syz.4.3545': attribute type 10 has an invalid length. [ 363.321793][T14368] netlink: 'syz.1.3591': attribute type 10 has an invalid length. [ 363.349029][T14368] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 364.220483][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 366.841972][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3655'. [ 367.563212][T14542] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3667'. [ 367.623381][T14543] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3666'. [ 367.762817][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 368.068394][T14562] kvm: pic: single mode not supported [ 368.068547][T14562] kvm: pic: level sensitive irq not supported [ 368.091756][T14562] kvm: pic: single mode not supported [ 368.113545][T14562] kvm: pic: single mode not supported [ 368.119530][T14562] kvm: pic: level sensitive irq not supported [ 368.213490][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 368.235346][T14569] netlink: 'syz.0.3679': attribute type 3 has an invalid length. [ 368.272116][T14569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3679'. [ 368.774544][T14593] geneve2: entered promiscuous mode [ 369.025149][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3698'. [ 369.109102][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3700'. [ 369.125411][T14613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3700'. [ 369.684659][T14635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3711'. [ 369.756635][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 369.927331][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 369.953925][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.975092][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.003510][ T10] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 370.023329][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.063704][ T10] usb 5-1: config 0 descriptor?? [ 370.122623][T14644] bridge_slave_0: left allmulticast mode [ 370.145086][T14644] bridge_slave_0: left promiscuous mode [ 370.152142][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.182014][T14644] bridge_slave_1: left allmulticast mode [ 370.194975][T14644] bridge_slave_1: left promiscuous mode [ 370.202918][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.220795][T14644] bond0: (slave bond_slave_0): Releasing backup interface [ 370.234747][T14644] bond0: (slave bond_slave_1): Releasing backup interface [ 370.273335][T14644] team0: Port device team_slave_0 removed [ 370.297650][T14644] team0: Port device team_slave_1 removed [ 370.532844][ T10] saitek 0003:06A3:0621.0005: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 370.605364][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.613755][T14644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.625738][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.647018][T14644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.705686][T14644] bond0: (slave wlan1): Releasing backup interface [ 370.732094][ T5950] usb 5-1: USB disconnect, device number 4 [ 372.677138][T14713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3746'. [ 372.716666][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3744'. [ 372.762188][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3744'. [ 373.746026][T14730] netlink: 'syz.0.3752': attribute type 3 has an invalid length. [ 373.764786][T14730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3752'. [ 375.112140][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'. [ 375.127639][T14772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.134973][T14772] IPv6: NLM_F_CREATE should be set when creating new route [ 375.319829][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3766'. [ 375.736857][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3773'. [ 375.988119][T14788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3774'. [ 376.491246][T14804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3781'. [ 376.735627][T14814] netlink: 'syz.3.3786': attribute type 10 has an invalid length. [ 376.760124][T14814] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.761569][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 376.916745][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 376.985644][T14819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3788'. [ 377.291941][T14832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3794'. [ 378.173512][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3800'. [ 378.746656][ T5950] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 378.880929][T14868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.888264][T14868] IPv6: NLM_F_CREATE should be set when creating new route [ 378.908619][ T5950] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.923415][ T5950] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.946033][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.961790][ T5950] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 378.971682][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.984226][ T5950] usb 2-1: config 0 descriptor?? [ 379.621934][ T5950] usb 2-1: string descriptor 0 read error: -22 [ 379.696461][ T30] audit: type=1800 audit(1758300556.454:2224): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3810" name="memory.events" dev="tmpfs" ino=2317 res=0 errno=0 [ 379.854030][ T5950] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input6 [ 379.963445][ T5950] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input7 [ 380.109790][ T5950] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input8 [ 380.223840][ T5950] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input9 [ 380.350615][ T5950] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 380.440778][T14900] __nla_validate_parse: 1 callbacks suppressed [ 380.440798][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'. [ 380.464391][ T5950] usb 2-1: USB disconnect, device number 4 [ 380.616260][T14903] fido_id[14903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 381.148845][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 381.240175][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3826'. [ 381.266696][ T5972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 381.439626][ T5972] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 381.459946][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.474386][ T5972] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 381.501187][ T5972] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 381.519742][ T5972] usb 3-1: Manufacturer: syz [ 381.626014][ T5972] usb 3-1: config 0 descriptor?? [ 381.871133][ T5972] rc_core: IR keymap rc-hauppauge not found [ 381.947737][ T5972] Registered IR keymap rc-empty [ 381.955564][ T5972] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 381.972903][ T5972] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 382.042036][ T5972] usb 3-1: USB disconnect, device number 3 [ 383.342442][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3839'. [ 383.377312][T14966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.444979][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3840'. [ 383.724358][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3843'. [ 383.774233][T14972] netlink: 'syz.0.3841': attribute type 10 has an invalid length. [ 383.801275][T14972] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 383.892400][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.898911][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.166742][T14990] netlink: 'syz.4.3850': attribute type 3 has an invalid length. [ 384.174534][T14990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3850'. [ 385.156780][T15020] input: syz1 as /devices/virtual/input/input11 [ 385.310677][T15023] netlink: 'syz.4.3864': attribute type 25 has an invalid length. [ 385.344185][T15023] netlink: 'syz.4.3864': attribute type 7 has an invalid length. [ 385.695242][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3867'. [ 385.704625][T15030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.711931][T15030] IPv6: NLM_F_CREATE should be set when creating new route [ 387.518799][T15067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3883'. [ 389.089410][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 389.557378][T15108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3900'. [ 389.764077][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'. [ 391.107376][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 391.657732][ T5951] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 391.828657][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 391.843458][ T5951] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 391.864655][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.883130][ T5951] usb 2-1: Product: syz [ 391.898719][ T5951] usb 2-1: Manufacturer: syz [ 391.907846][ T5951] usb 2-1: SerialNumber: syz [ 391.934893][ T5951] usb 2-1: config 0 descriptor?? [ 392.305848][T15158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.317092][T15158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.596632][ T5951] usb 2-1: USB disconnect, device number 5 [ 395.656503][ T5969] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 395.790491][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.810573][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.811427][ T5969] usb 4-1: Using ep0 maxpacket: 8 [ 395.853394][ T5969] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 395.918715][ T5969] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 395.941809][ T5969] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 395.954931][ T5969] usb 4-1: Product: syz [ 396.001560][ T5969] usb 4-1: Manufacturer: syz [ 396.047578][ T5969] usb 4-1: SerialNumber: syz [ 396.070860][ T5969] usb 4-1: config 0 descriptor?? [ 396.089787][ T5969] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 396.296281][ T5969] gspca_zc3xx: reg_w_i err -71 [ 396.375878][T15223] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 396.379257][T15224] netlink: 'syz.4.3946': attribute type 10 has an invalid length. [ 396.872526][T15235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3951'. [ 396.908000][ T5969] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 396.922355][ T5969] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 396.947287][ T5969] usb 4-1: USB disconnect, device number 6 [ 397.066666][ T5972] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 397.246498][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 397.254350][ T5972] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 397.277528][ T5969] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 397.290246][ T5972] usb 5-1: config 0 has no interface number 0 [ 397.298437][ T5972] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.310729][ T5972] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 397.322648][ T5972] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.339251][ T5972] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.352510][ T5972] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 397.361679][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.372996][ T5972] usb 5-1: config 0 descriptor?? [ 397.391897][ T5972] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 397.469969][ T5969] usb 4-1: Using ep0 maxpacket: 8 [ 397.479730][ T5969] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 397.495086][ T5969] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 397.504757][ T5969] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 397.515146][ T5969] usb 4-1: Product: syz [ 397.519892][ T5969] usb 4-1: Manufacturer: syz [ 397.524509][ T5969] usb 4-1: SerialNumber: syz [ 397.531778][ T5969] usb 4-1: config 0 descriptor?? [ 397.541730][ T5969] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 398.356150][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3958'. [ 398.565886][ T5969] gspca_zc3xx: reg_w_i err -71 [ 398.690253][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'. [ 398.702254][T15260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.176586][ T5969] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 399.185893][ T5969] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 399.229589][ T5969] usb 4-1: USB disconnect, device number 7 [ 399.446684][T15260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.688998][T15270] netlink: 'syz.3.3965': attribute type 10 has an invalid length. [ 400.452890][T15273] netlink: 'syz.2.3968': attribute type 10 has an invalid length. [ 400.706768][ T5952] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 401.392074][T15291] netlink: 'syz.3.3974': attribute type 10 has an invalid length. [ 401.450821][T15291] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 402.414041][T15305] netlink: 'syz.3.3981': attribute type 10 has an invalid length. [ 403.960875][ C0] sched: DL replenish lagged too much [ 404.167727][ T5952] usb 2-1: device descriptor read/all, error -71 [ 405.531359][T15313] netlink: 'syz.3.3985': attribute type 10 has an invalid length. [ 407.966453][ T5969] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 408.578879][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.641762][ T5969] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 408.816739][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.338072][ T5969] usb 3-1: config 0 descriptor?? [ 410.565543][T15347] netlink: 'syz.3.3999': attribute type 10 has an invalid length. [ 410.640188][ T5969] hid_parser_main: 5 callbacks suppressed [ 410.640214][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.725154][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.786381][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.793554][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.851604][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.915029][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.943558][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.966745][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 410.994613][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 411.031753][ T5969] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 411.114028][ T5969] hid-rmi 0003:0461:4E72.0007: hidraw0: USB HID v80.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 411.203427][ T5969] usb 3-1: USB disconnect, device number 4 [ 411.443607][T15354] fido_id[15354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 414.427487][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'. [ 416.556084][T15390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.569144][T15390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.038419][T15390] Bluetooth: hci5: command 0x0406 tx timeout [ 417.045122][T15390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.054266][T15390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.076558][T15390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.397773][T15405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4019'. [ 418.915316][T15394] chnl_net:caif_netlink_parms(): no params data found [ 419.527071][ T5186] Bluetooth: hci2: command tx timeout [ 420.202753][T15394] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.243564][T15394] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.301267][T15394] bridge_slave_0: entered allmulticast mode [ 420.375875][T15394] bridge_slave_0: entered promiscuous mode [ 420.420936][T15394] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.485166][T15394] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.525714][T15394] bridge_slave_1: entered allmulticast mode [ 420.563508][T15394] bridge_slave_1: entered promiscuous mode [ 421.259478][T15394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.468041][T15394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.566718][ T5186] Bluetooth: hci2: command tx timeout [ 423.646750][ T5186] Bluetooth: hci2: command tx timeout [ 425.448639][T15461] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4037'. [ 425.726715][ T5186] Bluetooth: hci2: command tx timeout [ 427.006527][ T5186] Bluetooth: hci0: command 0x0406 tx timeout [ 437.611719][ T5186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.622080][ T5186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.631442][ T5186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.640319][ T5186] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.655579][ T5186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.736613][ T5186] Bluetooth: hci6: command tx timeout [ 441.501116][ T5881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 441.515214][ T5881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 441.523253][ T5881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 441.533720][ T5881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 441.552204][ T5881] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 441.676900][T15393] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 441.685889][T15393] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 441.694015][T15393] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 441.703033][T15393] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 441.711002][T15393] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 441.806609][T15390] Bluetooth: hci6: command tx timeout [ 442.004998][T15394] team0: Port device team_slave_0 added [ 442.030047][T15394] team0: Port device team_slave_1 added [ 442.286636][T15390] Bluetooth: hci1: command 0x0406 tx timeout [ 443.372924][ T3604] bridge_slave_1: left allmulticast mode [ 443.407014][ T3604] bridge_slave_1: left promiscuous mode [ 443.413731][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4044'. [ 443.456571][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.539720][ T3604] bridge_slave_0: left allmulticast mode [ 443.816639][ T5186] Bluetooth: hci8: command tx timeout [ 443.823455][T15390] Bluetooth: hci7: command tx timeout [ 443.865018][ T3604] bridge_slave_0: left promiscuous mode [ 443.879316][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.887833][ T5186] Bluetooth: hci6: command tx timeout [ 445.363641][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.376437][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.886729][ T5186] Bluetooth: hci8: command tx timeout [ 445.892345][T15390] Bluetooth: hci7: command tx timeout [ 445.967084][ T5186] Bluetooth: hci6: command tx timeout [ 446.257029][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.281341][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.298468][ T3604] bond0 (unregistering): Released all slaves [ 446.387180][T15394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.394181][T15394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.464395][T15394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.697487][T15394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.717724][T15394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.766386][T15394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.812323][ T3604] tipc: Left network mode [ 447.981701][ T5186] Bluetooth: hci8: command tx timeout [ 447.987405][T15390] Bluetooth: hci7: command tx timeout [ 448.249387][T15394] hsr_slave_0: entered promiscuous mode [ 448.256122][T15394] hsr_slave_1: entered promiscuous mode [ 448.310733][T15394] debugfs: 'hsr0' already exists in 'hsr' [ 448.324080][T15394] Cannot create hsr debugfs directory [ 448.782651][ T3604] hsr_slave_0: left promiscuous mode [ 448.797728][ T3604] hsr_slave_1: left promiscuous mode [ 448.808106][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.058570][ T5186] Bluetooth: hci8: command tx timeout [ 450.064045][ T5186] Bluetooth: hci7: command tx timeout [ 451.172704][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 451.374478][ T3604] team0 (unregistering): Port device team_slave_0 removed [ 454.465031][T15471] chnl_net:caif_netlink_parms(): no params data found [ 454.863140][T15480] chnl_net:caif_netlink_parms(): no params data found [ 455.285201][T15394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 455.345825][T15477] chnl_net:caif_netlink_parms(): no params data found [ 455.455518][T15394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 455.484251][T15394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 455.513679][T15394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 455.876487][T15531] input: syz1 as /devices/virtual/input/input12 [ 458.340300][T15480] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.366797][T15480] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.386562][T15480] bridge_slave_0: entered allmulticast mode [ 458.415075][T15480] bridge_slave_0: entered promiscuous mode [ 460.094851][T15480] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.143977][T15480] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.151853][T15480] bridge_slave_1: entered allmulticast mode [ 460.193626][T15480] bridge_slave_1: entered promiscuous mode [ 460.281203][ T3604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.830564][ T3604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.867275][T15471] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.891012][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.916843][T15471] bridge_slave_0: entered allmulticast mode [ 460.938803][T15471] bridge_slave_0: entered promiscuous mode [ 461.016078][T15480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.075321][T15480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.149506][ T3604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.191633][T15471] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.207127][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.214496][T15471] bridge_slave_1: entered allmulticast mode [ 461.235504][T15471] bridge_slave_1: entered promiscuous mode [ 461.460894][ T5969] usb 5-1: USB disconnect, device number 5 [ 461.491759][ T5969] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 461.609593][ T3604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.854033][T15480] team0: Port device team_slave_0 added [ 461.887798][T15471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.911425][T15471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.959264][T15477] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.975858][T15477] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.985658][T15477] bridge_slave_0: entered allmulticast mode [ 462.001584][T15477] bridge_slave_0: entered promiscuous mode [ 462.012877][T15480] team0: Port device team_slave_1 added [ 462.075238][T15477] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.090593][T15477] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.100841][T15477] bridge_slave_1: entered allmulticast mode [ 462.113097][T15477] bridge_slave_1: entered promiscuous mode [ 462.288495][T15480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.295606][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.346046][T15480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.360255][T15480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.376333][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.406501][T15480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.431037][T15471] team0: Port device team_slave_0 added [ 462.469102][T15477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.492085][T15477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.567430][T15471] team0: Port device team_slave_1 added [ 462.788444][T15477] team0: Port device team_slave_0 added [ 462.892719][T15471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.910318][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.946371][T15471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.972086][T15477] team0: Port device team_slave_1 added [ 463.027824][T15480] hsr_slave_0: entered promiscuous mode [ 463.034716][T15480] hsr_slave_1: entered promiscuous mode [ 463.049426][T15480] debugfs: 'hsr0' already exists in 'hsr' [ 463.055207][T15480] Cannot create hsr debugfs directory [ 463.070912][T15471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.078985][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.114749][T15471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.166073][T15477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.181572][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.215749][T15477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.252323][ T3604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.327081][T15477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.338814][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.371455][T15477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.465214][ T3604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.599636][ T3604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.645042][T15471] hsr_slave_0: entered promiscuous mode [ 463.662807][T15471] hsr_slave_1: entered promiscuous mode [ 463.672128][T15471] debugfs: 'hsr0' already exists in 'hsr' [ 463.678324][T15471] Cannot create hsr debugfs directory [ 463.795269][ T3604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.980009][T15477] hsr_slave_0: entered promiscuous mode [ 463.992806][T15477] hsr_slave_1: entered promiscuous mode [ 464.010030][T15477] debugfs: 'hsr0' already exists in 'hsr' [ 464.015933][T15477] Cannot create hsr debugfs directory [ 464.245661][T15394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.328811][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4059'. [ 464.559803][T15394] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.567501][T15574] bridge_slave_1: left allmulticast mode [ 464.573430][T15574] bridge_slave_1: left promiscuous mode [ 464.584833][T15574] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.595734][T15574] bridge_slave_0: left allmulticast mode [ 464.611134][T15574] bridge_slave_0: left promiscuous mode [ 464.618395][T15574] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.967168][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.974336][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.161796][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.169048][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.629466][ T3604] bridge_slave_1: left allmulticast mode [ 465.666511][ T3604] bridge_slave_1: left promiscuous mode [ 465.672355][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.706102][ T3604] bridge_slave_0: left allmulticast mode [ 465.740026][ T3604] bridge_slave_0: left promiscuous mode [ 465.752607][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.771827][ T3604] bridge_slave_1: left allmulticast mode [ 465.779629][ T3604] bridge_slave_1: left promiscuous mode [ 465.791313][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.813775][ T3604] bridge_slave_0: left allmulticast mode [ 465.819853][ T3604] bridge_slave_0: left promiscuous mode [ 465.825829][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.584357][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.595437][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.606773][ T3604] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 466.629331][ T3604] bond0 (unregistering): Released all slaves [ 466.863255][ T3604] bridge0 (unregistering): left allmulticast mode [ 467.140118][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.154166][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.165600][ T3604] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 467.177276][ T3604] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 467.188196][ T3604] bond0 (unregistering): Released all slaves [ 467.232871][T15394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.322259][T15394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.437698][ T3604] tipc: Disabling bearer [ 467.444103][ T3604] tipc: Left network mode [ 467.448349][T15480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 467.480081][T15480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.602469][T15480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.622684][T15480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.634381][T15596] tipc: Started in network mode [ 467.644985][T15596] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 467.658300][T15596] tipc: Enabled bearer , priority 7 [ 467.691561][ T3604] ------------[ cut here ]------------ [ 467.697394][ T3604] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 467.705559][ T3604] WARNING: CPU: 1 PID: 3604 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 467.716777][ T3604] Modules linked in: [ 467.720939][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 467.730854][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.741079][ T3604] Workqueue: netns cleanup_net [ 467.745989][ T3604] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 467.752431][ T3604] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 47 b0 8c e8 06 cc 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 2f d7 f6 90 0f 0b 90 42 80 7c 3d [ 467.772151][ T3604] RSP: 0018:ffffc9000c0072a0 EFLAGS: 00010246 [ 467.778744][ T3604] RAX: 6c7bd79a13e94500 RBX: 0000000000000000 RCX: ffff8880303f8000 [ 467.787129][ T3604] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 467.795138][ T3604] RBP: ffff888078c51728 R08: ffff8880b8724253 R09: 1ffff110170e484a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 467.803201][ T3604] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff888078c529d0 [ 467.811473][ T3604] R13: ffff888078c50d80 R14: 1ffff1100f18a2e5 R15: dffffc0000000000 [ 467.819600][ T3604] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 467.829516][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.836136][ T3604] CR2: 0000000033b18ffc CR3: 000000007633a000 CR4: 00000000003526f0 [ 467.844481][ T3604] Call Trace: [ 467.847861][ T3604] [ 467.850830][ T3604] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 467.856901][ T3604] __ieee80211_link_release_channel+0x33b/0x4a0 [ 467.863176][ T3604] ? __pfx_ieee80211_uninit+0x10/0x10 [ 467.868671][ T3604] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 467.875151][ T3604] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 467.882333][ T3604] ? __pfx_call_rcu+0x10/0x10 [ 467.887460][ T3604] unregister_netdevice_queue+0x33c/0x380 [ 467.893234][ T3604] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 467.899759][ T3604] _cfg80211_unregister_wdev+0x165/0x590 [ 467.905432][ T3604] ieee80211_remove_interfaces+0x49a/0x6e0 [ 467.911449][ T3604] ? __pfx_synchronize_rcu+0x10/0x10 [ 467.916817][ T3604] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 467.923176][ T3604] ? rcu_is_watching+0x15/0xb0 [ 467.928106][ T3604] ieee80211_unregister_hw+0x5d/0x2c0 [ 467.933528][ T3604] mac80211_hwsim_del_radio+0x275/0x460 [ 467.939215][ T3604] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 467.945310][ T3604] hwsim_exit_net+0x584/0x640 [ 467.950050][ T3604] ? __pfx_hwsim_exit_net+0x10/0x10 [ 467.955345][ T3604] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 467.961203][ T3604] ops_undo_list+0x497/0x990 [ 467.965977][ T3604] ? __pfx_ops_undo_list+0x10/0x10 [ 467.971236][ T3604] ? do_raw_spin_unlock+0x122/0x240 [ 467.976488][ T3604] cleanup_net+0x4c5/0x800 [ 467.980914][ T3604] ? __pfx_cleanup_net+0x10/0x10 [ 467.985974][ T3604] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.991250][ T3604] ? process_scheduled_works+0x9ef/0x17b0 [ 467.997025][ T3604] ? process_scheduled_works+0x9ef/0x17b0 [ 468.002751][ T3604] process_scheduled_works+0xae1/0x17b0 [ 468.008399][ T3604] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.014396][ T3604] worker_thread+0x8a0/0xda0 [ 468.019080][ T3604] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.025456][ T3604] ? __kthread_parkme+0x7b/0x200 [ 468.030468][ T3604] kthread+0x70e/0x8a0 [ 468.034553][ T3604] ? __pfx_worker_thread+0x10/0x10 [ 468.039735][ T3604] ? __pfx_kthread+0x10/0x10 [ 468.044360][ T3604] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.050051][ T3604] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.055273][ T3604] ? __pfx_kthread+0x10/0x10 [ 468.059920][ T3604] ret_from_fork+0x439/0x7d0 [ 468.064517][ T3604] ? __pfx_ret_from_fork+0x10/0x10 [ 468.069693][ T3604] ? __switch_to_asm+0x39/0x70 [ 468.074462][ T3604] ? __switch_to_asm+0x33/0x70 [ 468.079284][ T3604] ? __pfx_kthread+0x10/0x10 [ 468.083883][ T3604] ret_from_fork_asm+0x1a/0x30 [ 468.088871][ T3604] [ 468.091894][ T3604] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 468.099177][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 468.108719][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.118770][ T3604] Workqueue: netns cleanup_net [ 468.123540][ T3604] Call Trace: [ 468.126815][ T3604] [ 468.129748][ T3604] dump_stack_lvl+0x99/0x250 [ 468.134344][ T3604] ? __asan_memcpy+0x40/0x70 [ 468.139022][ T3604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.144225][ T3604] ? __pfx__printk+0x10/0x10 [ 468.148832][ T3604] vpanic+0x281/0x750 [ 468.152817][ T3604] ? __pfx__printk+0x10/0x10 [ 468.157408][ T3604] ? __pfx_vpanic+0x10/0x10 [ 468.161922][ T3604] ? is_bpf_text_address+0x26/0x2b0 [ 468.167135][ T3604] panic+0xb9/0xc0 [ 468.170861][ T3604] ? __pfx_panic+0x10/0x10 [ 468.175289][ T3604] __warn+0x31b/0x4b0 [ 468.179272][ T3604] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 468.185001][ T3604] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 468.190751][ T3604] report_bug+0x2be/0x4f0 [ 468.195077][ T3604] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 468.200817][ T3604] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 468.206632][ T3604] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 468.212373][ T3604] handle_bug+0x84/0x160 [ 468.216620][ T3604] exc_invalid_op+0x1a/0x50 [ 468.221124][ T3604] asm_exc_invalid_op+0x1a/0x20 [ 468.225973][ T3604] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 468.232306][ T3604] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 47 b0 8c e8 06 cc 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 2f d7 f6 90 0f 0b 90 42 80 7c 3d [ 468.251920][ T3604] RSP: 0018:ffffc9000c0072a0 EFLAGS: 00010246 [ 468.257996][ T3604] RAX: 6c7bd79a13e94500 RBX: 0000000000000000 RCX: ffff8880303f8000 [ 468.265972][ T3604] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 468.273944][ T3604] RBP: ffff888078c51728 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 468.282006][ T3604] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff888078c529d0 [ 468.289981][ T3604] R13: ffff888078c50d80 R14: 1ffff1100f18a2e5 R15: dffffc0000000000 [ 468.297995][ T3604] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 468.304008][ T3604] __ieee80211_link_release_channel+0x33b/0x4a0 [ 468.310250][ T3604] ? __pfx_ieee80211_uninit+0x10/0x10 [ 468.315642][ T3604] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 468.322072][ T3604] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 468.328844][ T3604] ? __pfx_call_rcu+0x10/0x10 [ 468.333530][ T3604] unregister_netdevice_queue+0x33c/0x380 [ 468.339286][ T3604] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 468.345542][ T3604] _cfg80211_unregister_wdev+0x165/0x590 [ 468.351198][ T3604] ieee80211_remove_interfaces+0x49a/0x6e0 [ 468.357005][ T3604] ? __pfx_synchronize_rcu+0x10/0x10 [ 468.362290][ T3604] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 468.368618][ T3604] ? rcu_is_watching+0x15/0xb0 [ 468.373393][ T3604] ieee80211_unregister_hw+0x5d/0x2c0 [ 468.378774][ T3604] mac80211_hwsim_del_radio+0x275/0x460 [ 468.384329][ T3604] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 468.390407][ T3604] hwsim_exit_net+0x584/0x640 [ 468.395091][ T3604] ? __pfx_hwsim_exit_net+0x10/0x10 [ 468.400298][ T3604] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 468.406114][ T3604] ops_undo_list+0x497/0x990 [ 468.410713][ T3604] ? __pfx_ops_undo_list+0x10/0x10 [ 468.415830][ T3604] ? do_raw_spin_unlock+0x122/0x240 [ 468.421034][ T3604] cleanup_net+0x4c5/0x800 [ 468.425462][ T3604] ? __pfx_cleanup_net+0x10/0x10 [ 468.430413][ T3604] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.435618][ T3604] ? process_scheduled_works+0x9ef/0x17b0 [ 468.441336][ T3604] ? process_scheduled_works+0x9ef/0x17b0 [ 468.447068][ T3604] process_scheduled_works+0xae1/0x17b0 [ 468.452656][ T3604] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.458669][ T3604] worker_thread+0x8a0/0xda0 [ 468.463292][ T3604] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.469665][ T3604] ? __kthread_parkme+0x7b/0x200 [ 468.474627][ T3604] kthread+0x70e/0x8a0 [ 468.478748][ T3604] ? __pfx_worker_thread+0x10/0x10 [ 468.483873][ T3604] ? __pfx_kthread+0x10/0x10 [ 468.488477][ T3604] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.493696][ T3604] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.498906][ T3604] ? __pfx_kthread+0x10/0x10 [ 468.503513][ T3604] ret_from_fork+0x439/0x7d0 [ 468.508118][ T3604] ? __pfx_ret_from_fork+0x10/0x10 [ 468.513239][ T3604] ? __switch_to_asm+0x39/0x70 [ 468.518016][ T3604] ? __switch_to_asm+0x33/0x70 [ 468.522788][ T3604] ? __pfx_kthread+0x10/0x10 [ 468.527391][ T3604] ret_from_fork_asm+0x1a/0x30 [ 468.532184][ T3604] [ 468.535601][ T3604] Kernel Offset: disabled [ 468.539943][ T3604] Rebooting in 86400 seconds..