last executing test programs: 2.240644716s ago: executing program 3 (id=2277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)={0x2c, r1, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}]}, 0x2c}}, 0x0) 2.06820369s ago: executing program 3 (id=2281): unshare(0x26020480) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00, 0x7000000}, 0xc) 1.937209353s ago: executing program 3 (id=2285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/16, 0xfffffffffffffde6}, 0x40) 1.836634886s ago: executing program 0 (id=2287): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.767404808s ago: executing program 0 (id=2288): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.65624517s ago: executing program 0 (id=2291): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000002c0)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5753fcffffff"], 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) write(r0, &(0x7f0000000000), 0x0) 1.532069533s ago: executing program 0 (id=2294): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfa9}]}, @lsrr={0x83, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0) 1.531793233s ago: executing program 1 (id=2295): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x413}]}, 0x34}}, 0x0) 1.498615154s ago: executing program 2 (id=2296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.481196315s ago: executing program 0 (id=2297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2) ioperm(0x1, 0x9, 0x4) keyctl$clear(0x3, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {0x0}], 0x2, 0x0, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x6843, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x19, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8846, 0x0, 0x0) fallocate(r3, 0x0, 0x7c4, 0x7fff) sendto$inet(0xffffffffffffffff, 0x0, 0x1c, 0x4004084, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000003780), 0x80, 0x124100) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000037c0)) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.424099276s ago: executing program 1 (id=2298): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000000)=0x400) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r2, 0x5) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000280)={0x23, 0x2, 0xac, 0x1}, 0x10) connect$phonet_pipe(r3, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) r4 = accept$phonet_pipe(r2, 0x0, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, &(0x7f0000000400)="0060010000000001", 0x8, 0x0, &(0x7f0000000500)={0x23, 0x2, 0xac, 0x1}, 0x10) sendto$phonet(r5, &(0x7f0000000400)="0060010000000001", 0x8, 0x0, &(0x7f0000000500)={0x23, 0x1, 0xac, 0x1}, 0x10) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x80) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)='12', 0x2}], 0x1}, 0x80) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0, 0x20000000], 0x400000, 0x0, 0x0}, 0x8a) 1.386296497s ago: executing program 2 (id=2299): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) 1.301285309s ago: executing program 2 (id=2300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x28, 0x2, 0x0, 0x0, {{0x81, 0x1, 0x1}, {0x2, 0x1000, 0x5, 0x4, 0x5, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 1.204230921s ago: executing program 1 (id=2301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 351.535742ms ago: executing program 1 (id=2302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 351.374682ms ago: executing program 3 (id=2303): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) 288.703013ms ago: executing program 0 (id=2304): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 216.238905ms ago: executing program 3 (id=2305): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r1, 0x0, 0x0, 0x20) 216.020035ms ago: executing program 2 (id=2306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x3, 0x0, 0x0, 0x8, 0x11}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x4) 210.403795ms ago: executing program 1 (id=2307): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 111.305497ms ago: executing program 2 (id=2308): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) 64.220178ms ago: executing program 3 (id=2309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2040400) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 39.455559ms ago: executing program 1 (id=2310): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 0s ago: executing program 2 (id=2311): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xffffffffffffff5a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 72.353613][ T5758] cgroup: Unknown subsys name 'net' [ 72.529001][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.875578][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.385441][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.386083][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.393299][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.408285][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.417092][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.424754][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.424805][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.437277][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.440560][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.446685][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.453647][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.459604][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.475144][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.475683][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.482762][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.490474][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.497076][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.504063][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.512669][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.517743][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.524355][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.532152][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.546064][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.554421][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.938943][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.018658][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.040267][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.125313][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.133106][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.141054][ T5773] bridge_slave_0: entered allmulticast mode [ 76.148332][ T5773] bridge_slave_0: entered promiscuous mode [ 76.161043][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.168187][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.175472][ T5773] bridge_slave_1: entered allmulticast mode [ 76.182101][ T5773] bridge_slave_1: entered promiscuous mode [ 76.216600][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.265913][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.273133][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.280214][ T5772] bridge_slave_0: entered allmulticast mode [ 76.286984][ T5772] bridge_slave_0: entered promiscuous mode [ 76.295806][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.303059][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.310168][ T5772] bridge_slave_1: entered allmulticast mode [ 76.317532][ T5772] bridge_slave_1: entered promiscuous mode [ 76.326413][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.339470][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.394228][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.445822][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.459965][ T5773] team0: Port device team_slave_0 added [ 76.468198][ T5773] team0: Port device team_slave_1 added [ 76.478227][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.485756][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.492937][ T5771] bridge_slave_0: entered allmulticast mode [ 76.499585][ T5771] bridge_slave_0: entered promiscuous mode [ 76.538077][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.545640][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.552747][ T5771] bridge_slave_1: entered allmulticast mode [ 76.559587][ T5771] bridge_slave_1: entered promiscuous mode [ 76.596158][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.603360][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.629599][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.659739][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.666949][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.674626][ T5770] bridge_slave_0: entered allmulticast mode [ 76.681230][ T5770] bridge_slave_0: entered promiscuous mode [ 76.690894][ T5772] team0: Port device team_slave_0 added [ 76.700515][ T5772] team0: Port device team_slave_1 added [ 76.706963][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.714166][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.740368][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.756453][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.766115][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.773500][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.780621][ T5770] bridge_slave_1: entered allmulticast mode [ 76.787598][ T5770] bridge_slave_1: entered promiscuous mode [ 76.826041][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.858518][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.870906][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.877924][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.904083][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.916155][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.923174][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.949366][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.988624][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.036130][ T5770] team0: Port device team_slave_0 added [ 77.044004][ T5771] team0: Port device team_slave_0 added [ 77.052441][ T5771] team0: Port device team_slave_1 added [ 77.068253][ T5770] team0: Port device team_slave_1 added [ 77.100050][ T5773] hsr_slave_0: entered promiscuous mode [ 77.106498][ T5773] hsr_slave_1: entered promiscuous mode [ 77.140927][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.148322][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.174264][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.187028][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.194189][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.220241][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.237990][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.245341][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.271354][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.292739][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.299935][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.325914][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.359052][ T5772] hsr_slave_0: entered promiscuous mode [ 77.365354][ T5772] hsr_slave_1: entered promiscuous mode [ 77.371766][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.379922][ T5772] Cannot create hsr debugfs directory [ 77.479334][ T5770] hsr_slave_0: entered promiscuous mode [ 77.488250][ T5770] hsr_slave_1: entered promiscuous mode [ 77.494591][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.502599][ T5770] Cannot create hsr debugfs directory [ 77.520966][ T5771] hsr_slave_0: entered promiscuous mode [ 77.527242][ T5771] hsr_slave_1: entered promiscuous mode [ 77.533673][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.541239][ T5771] Cannot create hsr debugfs directory [ 77.584467][ T5780] Bluetooth: hci3: command tx timeout [ 77.584479][ T5784] Bluetooth: hci0: command tx timeout [ 77.584626][ T5784] Bluetooth: hci2: command tx timeout [ 77.590059][ T5780] Bluetooth: hci1: command tx timeout [ 77.887626][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.900693][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.911680][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.922517][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.975916][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.987525][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.998311][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.035672][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.091151][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.119375][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.129434][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.149771][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.251846][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.280574][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.290707][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.300871][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.328951][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.353131][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.366749][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.387142][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.394399][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.425510][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.432634][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.467778][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.482057][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.489227][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.525220][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.532290][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.549233][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.589963][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.675559][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.719600][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.726767][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.781727][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.788919][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.837397][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.954267][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.969807][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.000310][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.007492][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.038992][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.046162][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.151212][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.175963][ T5773] veth0_vlan: entered promiscuous mode [ 79.221396][ T5773] veth1_vlan: entered promiscuous mode [ 79.296648][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.340579][ T5773] veth0_macvtap: entered promiscuous mode [ 79.359341][ T5772] veth0_vlan: entered promiscuous mode [ 79.374249][ T5773] veth1_macvtap: entered promiscuous mode [ 79.416190][ T5772] veth1_vlan: entered promiscuous mode [ 79.452743][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.476710][ T5770] veth0_vlan: entered promiscuous mode [ 79.489041][ T5770] veth1_vlan: entered promiscuous mode [ 79.501303][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.535937][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.545618][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.555363][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.564785][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.612670][ T5772] veth0_macvtap: entered promiscuous mode [ 79.627249][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.637104][ T5770] veth0_macvtap: entered promiscuous mode [ 79.648672][ T5770] veth1_macvtap: entered promiscuous mode [ 79.663659][ T5786] Bluetooth: hci3: command tx timeout [ 79.663730][ T5776] Bluetooth: hci1: command tx timeout [ 79.669102][ T5780] Bluetooth: hci2: command tx timeout [ 79.674522][ T5784] Bluetooth: hci0: command tx timeout [ 79.690602][ T5772] veth1_macvtap: entered promiscuous mode [ 79.743355][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.751318][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.761219][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.778854][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.790784][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.810697][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.824771][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.837577][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.851454][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.862236][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.872300][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.882894][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.896738][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.924014][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.940135][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.940178][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.957666][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.969357][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.978160][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.996238][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.008842][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.019470][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.031390][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.042340][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.080913][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.094312][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.103101][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.111792][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.174191][ T5771] veth0_vlan: entered promiscuous mode [ 80.269931][ T5771] veth1_vlan: entered promiscuous mode [ 80.334789][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.342660][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.411855][ T5771] veth0_macvtap: entered promiscuous mode [ 80.439365][ T5771] veth1_macvtap: entered promiscuous mode [ 80.452039][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.473817][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.530280][ T5841] syz.1.6[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.545705][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.547288][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.562927][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.570702][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.585290][ T5841] loop1: detected capacity change from 0 to 1024 [ 80.588447][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.603913][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.617671][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.631244][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.644467][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.667856][ T5841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.684620][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.712009][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.731319][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.742759][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.752947][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.763611][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.774708][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.794422][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.831457][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.845914][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.860727][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.877692][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.887501][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.897110][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.059472][ T5849] loop1: detected capacity change from 0 to 512 [ 81.115180][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.147837][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.155856][ T5849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.223160][ T5849] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.252576][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.262049][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.299351][ T5849] EXT4-fs error (device loop1): ext4_readdir:223: inode #12: comm syz.1.7: path /3/file0/file0: directory fails checksum at offset 0 [ 81.328566][ T5856] loop3: detected capacity change from 0 to 128 [ 81.381998][ T5856] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.426592][ T5856] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.495101][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.563341][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.599103][ T5861] loop2: detected capacity change from 0 to 164 [ 81.606663][ T5861] ======================================================= [ 81.606663][ T5861] WARNING: The mand mount option has been deprecated and [ 81.606663][ T5861] and is ignored by this kernel. Remove the mand [ 81.606663][ T5861] option from the mount to silence this warning. [ 81.606663][ T5861] ======================================================= [ 81.800361][ T5776] Bluetooth: hci0: command tx timeout [ 81.806527][ T5784] Bluetooth: hci2: command tx timeout [ 81.812263][ T5776] Bluetooth: hci3: command tx timeout [ 81.818437][ T5780] Bluetooth: hci1: command tx timeout [ 81.922379][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 81.948347][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.973038][ T5836] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.102929][ T5865] rock: directory entry would overflow storage [ 82.109355][ T5865] rock: sig=0x4f50, size=4, remaining=3 [ 82.115045][ T5865] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 82.515056][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.633408][ T5836] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 82.642486][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.686512][ T5836] usb 1-1: Product: syz [ 82.690725][ T5836] usb 1-1: Manufacturer: syz [ 82.713537][ T5836] usb 1-1: SerialNumber: syz [ 82.859419][ T5871] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 83.098195][ T5875] loop2: detected capacity change from 0 to 256 [ 84.148177][ T5780] Bluetooth: hci2: command tx timeout [ 84.148174][ T5786] Bluetooth: hci3: command tx timeout [ 84.162887][ T5780] Bluetooth: hci0: command tx timeout [ 84.163437][ T5776] Bluetooth: hci1: command tx timeout [ 84.275223][ T5836] usb 1-1: unit 6 not found! [ 84.280077][ T5836] usb 1-1: unit 0 not found! [ 84.342918][ T5836] usb 1-1: USB disconnect, device number 2 [ 84.400284][ T5875] FAT-fs (loop2): Directory bread(block 64) failed [ 84.442322][ T5875] FAT-fs (loop2): Directory bread(block 65) failed [ 84.477467][ T5875] FAT-fs (loop2): Directory bread(block 66) failed [ 84.629927][ T5875] FAT-fs (loop2): Directory bread(block 67) failed [ 84.663628][ T5875] FAT-fs (loop2): Directory bread(block 68) failed [ 84.682947][ T5875] FAT-fs (loop2): Directory bread(block 69) failed [ 84.689616][ T5875] FAT-fs (loop2): Directory bread(block 70) failed [ 84.713479][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.789442][ T5875] FAT-fs (loop2): Directory bread(block 71) failed [ 85.189853][ T5875] FAT-fs (loop2): Directory bread(block 72) failed [ 85.251274][ T5875] FAT-fs (loop2): Directory bread(block 73) failed [ 85.578947][ T5887] loop0: detected capacity change from 0 to 8192 [ 85.638066][ T5887] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.649817][ T5891] Bluetooth: MGMT ver 1.22 [ 85.663817][ T5891] Bluetooth: hci0: unsupported parameter 5134 [ 86.905850][ T9] cfg80211: failed to load regulatory.db [ 86.956316][ T5891] Bluetooth: hci0: unsupported parameter 8192 [ 86.962444][ T5891] Bluetooth: hci0: unsupported parameter 5134 [ 87.023147][ T5891] Bluetooth: hci0: unsupported parameter 8192 [ 87.526276][ T5904] loop0: detected capacity change from 0 to 1024 [ 87.640978][ T27] audit: type=1800 audit(1788019644.655:2): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.24" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 91.111207][ T5927] loop3: detected capacity change from 0 to 164 [ 93.033503][ T5937] rock: directory entry would overflow storage [ 93.039699][ T5937] rock: sig=0x4f50, size=4, remaining=3 [ 93.045323][ T5937] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 93.527030][ T5941] TCP: TCP_TX_DELAY enabled [ 93.656877][ T5941] loop3: detected capacity change from 0 to 2048 [ 93.837559][ T5941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.896346][ T5968] loop1: detected capacity change from 0 to 164 [ 98.520105][ T5972] rock: directory entry would overflow storage [ 98.526451][ T5972] rock: sig=0x4f50, size=4, remaining=3 [ 98.532054][ T5972] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 99.692102][ T5977] loop0: detected capacity change from 0 to 2048 [ 99.711087][ T5979] loop2: detected capacity change from 0 to 256 [ 99.754484][ T5979] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 99.807230][ T5977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.861109][ T5977] EXT4-fs error (device loop0): ext4_find_extent:947: inode #2: comm syz.0.45: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 99.937678][ T5977] EXT4-fs (loop0): Remounting filesystem read-only [ 99.985965][ T27] audit: type=1800 audit(1788019657.005:3): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file2" dev="loop2" ino=1048593 res=0 errno=0 [ 99.987495][ T5988] 9pnet_fd: Insufficient options for proto=fd [ 100.014090][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.019271][ T5979] exFAT-fs (loop2): error, broken FAT chain. [ 100.063817][ T5979] exFAT-fs (loop2): Filesystem has been set read-only [ 100.089950][ T5979] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805e1587e0 iblock : 24, err : -5) [ 100.148670][ T5979] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 101.833072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.372956][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.571051][ T9] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.663201][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.687259][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 102.742008][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.781633][ T9] usb 2-1: config 0 descriptor?? [ 103.062875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.965895][ T6009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.428042][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 104.444304][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 104.465678][ T9] usb 2-1: USB disconnect, device number 2 [ 104.499320][ T6014] loop3: detected capacity change from 0 to 256 [ 106.097011][ T6024] loop2: detected capacity change from 0 to 256 [ 106.796493][ T6029] loop2: detected capacity change from 0 to 1024 [ 108.582922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 110.353326][ T6048] loop2: detected capacity change from 0 to 4096 [ 110.440298][ T6057] loop1: detected capacity change from 0 to 512 [ 110.454089][ T6048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.527144][ T6057] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 110.551787][ T6057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 110.583296][ T6057] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.589679][ T6057] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.71: bad orphan inode 3 [ 110.704201][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 110.711989][ T6057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 110.828597][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.867223][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 111.563108][ T5836] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 112.746919][ T5836] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.788331][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.810962][ T5836] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 112.840241][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.864156][ T5836] usb 2-1: config 0 descriptor?? [ 113.962860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.202859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.212857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.681770][ T5836] usbhid 2-1:0.0: can't add hid device: -71 [ 114.708929][ T5836] usbhid: probe of 2-1:0.0 failed with error -71 [ 114.746595][ T5836] usb 2-1: USB disconnect, device number 3 [ 114.968754][ T6090] loop1: detected capacity change from 0 to 1024 [ 116.291346][ T6104] loop2: detected capacity change from 0 to 2048 [ 116.544048][ T6104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.021960][ T6110] loop1: detected capacity change from 0 to 4096 [ 117.125369][ T6110] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 117.150379][ T6110] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 117.195515][ T6110] EXT4-fs (loop1): mount failed [ 118.822999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.383012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 124.142946][ T5813] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 124.368873][ T5813] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.412920][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.419607][ T5813] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 124.462933][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.496273][ T5813] usb 3-1: config 0 descriptor?? [ 124.964434][ T5813] nintendo 0003:057E:2009.0001: hidraw0: USB HID v90.01 Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 124.984957][ T6142] loop1: detected capacity change from 0 to 2048 [ 125.047603][ T6142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.065523][ T5813] nintendo 0003:057E:2009.0001: failed reading SPI flash; ret=-38 [ 125.082796][ T5813] nintendo 0003:057E:2009.0001: using factory cal for left stick [ 125.216255][ T5813] nintendo 0003:057E:2009.0001: failed reading SPI flash; ret=-38 [ 125.224635][ T5813] nintendo 0003:057E:2009.0001: using factory cal for right stick [ 125.232626][ T5813] nintendo 0003:057E:2009.0001: failed reading SPI flash; ret=-38 [ 125.240549][ T5813] nintendo 0003:057E:2009.0001: Failed to read left stick cal, using defaults; e=-38 [ 125.250170][ T5813] nintendo 0003:057E:2009.0001: failed reading SPI flash; ret=-38 [ 125.258125][ T5813] nintendo 0003:057E:2009.0001: Failed to read right stick cal, using defaults; e=-38 [ 125.268271][ T5813] nintendo 0003:057E:2009.0001: failed reading SPI flash; ret=-38 [ 125.283140][ T5813] nintendo 0003:057E:2009.0001: using factory cal for IMU [ 125.293005][ T5813] nintendo 0003:057E:2009.0001: failed reading SPI flash; ret=-38 [ 125.302972][ T5813] nintendo 0003:057E:2009.0001: Failed to read IMU cal, using defaults; ret=-38 [ 125.912924][ T5813] nintendo 0003:057E:2009.0001: Unable to read IMU calibration data [ 125.921103][ T5813] nintendo 0003:057E:2009.0001: Failed to set report mode; ret=-38 [ 125.929161][ T5813] nintendo 0003:057E:2009.0001: Failed to initialize controller; ret=-38 [ 125.994158][ T5813] nintendo 0003:057E:2009.0001: probe - fail = -38 [ 125.994338][ T5813] nintendo: probe of 0003:057E:2009.0001 failed with error -38 [ 126.136645][ T6151] 9pnet_fd: Insufficient options for proto=fd [ 126.161314][ T5813] usb 3-1: USB disconnect, device number 2 [ 129.063577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 129.611484][ T6163] loop2: detected capacity change from 0 to 1024 [ 130.773205][ T6166] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.622895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 131.823344][ T6171] binder: 6170:6171 ioctl c0306201 0 returned -14 [ 133.287154][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.306680][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.315208][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.666259][ T6208] 9pnet_fd: Insufficient options for proto=fd [ 139.529198][ T6215] loop2: detected capacity change from 0 to 256 [ 141.581517][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 142.424526][ T6223] bridge_slave_0: default FDB implementation only supports local addresses [ 142.746144][ T6229] loop0: detected capacity change from 0 to 1024 [ 144.071154][ T6236] loop0: detected capacity change from 0 to 1024 [ 144.894860][ T6249] loop0: detected capacity change from 0 to 8 [ 144.933593][ T6249] squashfs: Unknown parameter '' [ 147.358979][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 149.917712][ T6277] loop1: detected capacity change from 0 to 256 [ 151.624630][ T6292] netlink: 156 bytes leftover after parsing attributes in process `syz.0.150'. [ 151.835634][ T6296] warning: `syz.0.152' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.645285][ T6304] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 156.753334][ T6324] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.725400][ T6401] loop0: detected capacity change from 0 to 256 [ 174.443669][ T6425] pimreg: entered allmulticast mode [ 181.117960][ T6486] pimreg: entered allmulticast mode [ 183.893535][ T27] audit: type=1326 audit(1788019740.905:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22b9e159 code=0x7ffc0000 [ 183.972247][ T27] audit: type=1326 audit(1788019740.945:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f8e22b9e159 code=0x7ffc0000 [ 184.737589][ T27] audit: type=1326 audit(1788019740.945:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22b9e159 code=0x7ffc0000 [ 184.762902][ T27] audit: type=1326 audit(1788019740.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22b9e159 code=0x7ffc0000 [ 186.194997][ T6530] cgroup: subsys name conflicts with all [ 191.790549][ T6559] cgroup: subsys name conflicts with all [ 193.644235][ T6580] fuse: Bad value for 'fd' [ 193.918517][ T6585] cgroup: subsys name conflicts with all [ 194.014275][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 194.309731][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316571][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.519475][ T6609] cgroup: subsys name conflicts with all [ 201.167826][ T6638] cgroup: subsys name conflicts with all [ 202.384616][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 202.390728][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.397011][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 202.405531][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 203.251889][ T6667] cgroup: subsys name conflicts with all [ 207.261866][ T6701] cgroup: subsys name conflicts with all [ 212.199658][ T6735] cgroup: subsys name conflicts with all [ 213.743366][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 217.515568][ T6766] cgroup: subsys name conflicts with all [ 223.576541][ T6807] cgroup: subsys name conflicts with all [ 225.928868][ T6832] cgroup: subsys name conflicts with all [ 226.875980][ T6838] futex_wake_op: syz.2.336 tries to shift op by 144; fix this program [ 228.364429][ T6852] fuse: Bad value for 'fd' [ 228.826096][ T6855] cgroup: subsys name conflicts with all [ 231.362414][ T6882] cgroup: subsys name conflicts with all [ 236.154913][ T6916] cgroup: subsys name conflicts with all [ 238.832597][ T6933] Zero length message leads to an empty skb [ 239.567047][ T6944] cgroup: subsys name conflicts with all [ 242.244333][ T6971] cgroup: subsys name conflicts with all [ 253.677790][ T7056] capability: warning: `syz.3.411' uses deprecated v2 capabilities in a way that may be insecure [ 255.747255][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764870][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.004823][ T7081] cgroup: subsys name conflicts with all [ 266.877903][ T7200] cgroup: subsys name conflicts with all [ 267.386511][ T7213] bridge_slave_0: left allmulticast mode [ 267.392213][ T7213] bridge_slave_0: left promiscuous mode [ 267.421390][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.508936][ T7213] bridge_slave_1: left allmulticast mode [ 267.551263][ T7213] bridge_slave_1: left promiscuous mode [ 267.588626][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.704640][ T7213] bond0: (slave bond_slave_0): Releasing backup interface [ 267.854895][ T7213] bond0: (slave bond_slave_1): Releasing backup interface [ 268.043162][ T7213] team0: Port device team_slave_0 removed [ 268.090816][ T7213] team0: Port device team_slave_1 removed [ 268.111556][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.137973][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.181782][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.201119][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.548439][ T7237] ip_tables: iptables: counters copy to user failed while replacing table [ 269.697995][ T7238] cgroup: subsys name conflicts with all [ 269.929065][ T7247] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 269.943141][ T7247] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 272.984392][ T7288] Cannot find set identified by id 0 to match [ 275.699325][ T7338] tipc: Started in network mode [ 275.722983][ T7338] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 275.730301][ T7338] tipc: Enabled bearer , priority 10 [ 276.844818][ T5760] tipc: Node number set to 10136234 [ 277.295758][ T7366] dvmrp0: entered allmulticast mode [ 277.944501][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 279.524380][ T7401] cgroup: subsys name conflicts with all [ 281.504796][ T7415] ªªªªª»: renamed from dummy0 (while UP) [ 284.483872][ T7439] cgroup: subsys name conflicts with all [ 285.935108][ T7459] team0: Device gtp0 is of different type [ 287.209262][ T7470] cgroup: subsys name conflicts with all [ 288.578995][ T7481] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 288.640957][ T7481] team0: Port device dummy0 added [ 289.885709][ T7496] cgroup: subsys name conflicts with all [ 290.962505][ T7504] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 291.151447][ T7508] netlink: 272 bytes leftover after parsing attributes in process `syz.2.575'. [ 292.263658][ T7520] cgroup: subsys name conflicts with all [ 294.384267][ T7550] cgroup: subsys name conflicts with all [ 294.464582][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 295.001340][ T7573] batman_adv: batadv0: Adding interface: veth0 [ 295.010257][ T7573] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.051852][ T7573] batman_adv: batadv0: Interface activated: veth0 [ 295.052489][ T7574] syz.2.600 uses obsolete (PF_INET,SOCK_PACKET) [ 295.070721][ T7576] batman_adv: batadv0: Interface deactivated: veth0 [ 295.158203][ T7576] batman_adv: batadv0: Removing interface: veth0 [ 295.331022][ T7582] cgroup: subsys name conflicts with all [ 295.939643][ T7602] cgroup: subsys name conflicts with all [ 297.453095][ T7624] cgroup: subsys name conflicts with all [ 299.600187][ T7653] cgroup: subsys name conflicts with all [ 300.912800][ T7663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.614'. [ 304.537255][ T7712] cgroup: subsys name conflicts with all [ 306.720913][ T7765] cgroup: subsys name conflicts with all [ 308.023265][ T7787] cgroup: subsys name conflicts with all [ 309.446766][ T7812] cgroup: subsys name conflicts with all [ 309.520215][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 309.530406][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 310.535843][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.634721][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.942975][ T7835] cgroup: subsys name conflicts with all [ 313.261012][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.708'. [ 314.495489][ T7864] cgroup: subsys name conflicts with all [ 317.763383][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.769899][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.863767][ T7897] cgroup: subsys name conflicts with all [ 319.211302][ T7918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.734'. [ 319.353303][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 319.801209][ T7927] cgroup: subsys name conflicts with all [ 321.207629][ T7954] cgroup: subsys name conflicts with all [ 321.386194][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 322.964385][ T7984] cgroup: subsys name conflicts with all [ 322.973654][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 324.526183][ T8015] cgroup: subsys name conflicts with all [ 326.236140][ T8051] cgroup: subsys name conflicts with all [ 326.535138][ T8062] 9pnet_fd: Insufficient options for proto=fd [ 327.663913][ T8074] cgroup: subsys name conflicts with all [ 327.914179][ T8085] 9pnet_fd: Insufficient options for proto=fd [ 328.083251][ T8092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 328.304408][ T8096] cgroup: subsys name conflicts with all [ 329.474508][ T8113] 9pnet_fd: Insufficient options for proto=fd [ 333.913054][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 335.292556][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 336.239761][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 336.658816][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 336.821024][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.894'. [ 337.904253][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 338.002331][ T8333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.907'. [ 339.246050][ T8366] netlink: 68 bytes leftover after parsing attributes in process `syz.0.920'. [ 340.382204][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 340.403364][ T8393] netlink: 68 bytes leftover after parsing attributes in process `syz.2.932'. [ 340.404341][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 340.453313][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 340.477493][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 341.649452][ T8423] netlink: 68 bytes leftover after parsing attributes in process `syz.1.945'. [ 342.059160][ T8448] netlink: 68 bytes leftover after parsing attributes in process `syz.1.957'. [ 343.296464][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 343.332364][ T8484] ipvlan2: entered allmulticast mode [ 343.351763][ T8484] syz_tun: entered allmulticast mode [ 343.582470][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 344.821328][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 345.889398][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 345.936575][ T8539] ipvlan2: entered allmulticast mode [ 345.963917][ T8539] syz_tun: entered allmulticast mode [ 347.439347][ T8573] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 347.606155][ T8581] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 347.653212][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 347.674152][ T8573] netlink: 'syz.1.1003': attribute type 13 has an invalid length. [ 350.641216][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1027'. [ 352.083660][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 352.227614][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 352.276224][ T8686] ipvlan2: entered allmulticast mode [ 352.290161][ T8686] syz_tun: entered allmulticast mode [ 352.304255][ T8689] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1041'. [ 353.560057][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 358.119269][ T8820] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.159578][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'. [ 358.172351][ T8823] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 358.210975][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 358.247701][ T8820] netlink: 'syz.3.1094': attribute type 13 has an invalid length. [ 358.882725][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 358.892672][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1103'. [ 359.532075][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 359.778320][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 360.176940][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 360.392113][ T8899] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 360.470933][ T8899] IPVS: Error connecting to the multicast addr [ 360.554820][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 360.586635][ T8899] netlink: 'syz.2.1127': attribute type 13 has an invalid length. [ 361.094411][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 361.883129][ T8948] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 362.049354][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 366.947909][ T9052] tipc: Enabling of bearer rejected, failed to enable media [ 368.306685][ T9068] netlink: 'syz.0.1198': attribute type 12 has an invalid length. [ 368.579439][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 370.315737][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 370.383288][ T9115] tipc: Enabling of bearer rejected, failed to enable media [ 370.432416][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 372.461146][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 372.522398][ T9137] ip6gre1: entered promiscuous mode [ 372.546020][ T9137] ip6gre1: entered allmulticast mode [ 373.577972][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 376.354060][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.361814][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.130715][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.138130][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.176926][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.220586][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.683077][ T9182] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.692007][ T9182] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.701964][ T9182] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.711398][ T9182] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.795343][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 379.808445][ T9211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1246'. [ 381.818228][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 381.848038][ T9251] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 381.961172][ T9253] xt_CT: No such helper "snmp_trap" [ 383.159210][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 384.978509][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 385.011484][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 385.926060][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 387.622192][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 388.344798][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 390.954808][ T9452] bridge0: port 3(macvlan2) entered blocking state [ 390.987356][ T9452] bridge0: port 3(macvlan2) entered disabled state [ 390.995452][ T9452] macvlan2: entered allmulticast mode [ 391.000941][ T9452] ip6gretap0: entered allmulticast mode [ 391.011685][ T9452] macvlan2: entered promiscuous mode [ 391.112880][ T9452] bridge0: port 3(macvlan2) entered blocking state [ 391.119497][ T9452] bridge0: port 3(macvlan2) entered forwarding state [ 393.712797][ T9526] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1375'. [ 394.767444][ T9550] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1386'. [ 396.076883][ T9575] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1397'. [ 396.424223][ T9597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1413'. [ 397.193425][ T9603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1409'. [ 398.383209][ T9631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1423'. [ 399.467507][ T9646] xt_l2tp: wrong L2TP version: 0 [ 399.708961][ T9653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1435'. [ 400.950441][ T9675] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1443'. [ 400.972639][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 403.166568][ T9700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1454'. [ 403.397546][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 405.708492][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 406.162309][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'. [ 406.172440][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1472'. [ 406.193411][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1472'. [ 406.439175][ T9764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1464'. [ 406.501139][ T9769] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1478'. [ 406.511224][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 406.524429][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 406.536305][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 406.737555][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 414.271571][T10059] __nla_validate_parse: 33 callbacks suppressed [ 414.271586][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 414.288441][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 416.477947][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 416.500213][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 418.161769][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 418.190722][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 420.342674][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 420.356767][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 423.075368][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 423.103526][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 423.349934][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 425.257620][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 425.272438][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 425.433239][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 427.049778][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 427.063791][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 427.261209][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1659'. [ 428.398331][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 428.412749][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 429.739979][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 429.773836][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 431.309735][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 431.353374][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 433.712672][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'. [ 433.753685][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'. [ 435.273534][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 435.323169][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 435.535904][T10358] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1718'. [ 435.593638][T10358] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1718'. [ 435.925964][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 435.959883][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 436.424320][T10397] __nla_validate_parse: 1 callbacks suppressed [ 436.424336][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 436.453595][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 436.497225][T10400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1738'. [ 436.542246][T10406] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1741'. [ 436.594116][T10407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1741'. [ 436.948605][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 436.960293][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1751'. [ 436.990950][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 437.223013][T10445] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1760'. [ 437.250851][T10445] bridge0: port 3(macvlan2) entered disabled state [ 437.257653][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.265056][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.306871][T10447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1760'. [ 440.075131][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081676][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.672371][T10640] bond0: option downdelay: invalid value (18446744073675997440) [ 440.690613][T10640] bond0: option downdelay: allowed values 0 - 2147483647 [ 441.864186][T10698] __nla_validate_parse: 20 callbacks suppressed [ 441.864205][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1880'. [ 441.887074][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1880'. [ 451.034605][T10960] af_packet: packet size is too long (16777212 > 2016) [ 452.557331][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 452.671345][T11003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1996'. [ 453.885570][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 453.897243][T11036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.927133][T11038] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2008'. [ 454.001013][T11040] af_packet: packet size is too long (65535 > 2016) [ 454.422171][T11069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2021'. [ 455.217278][T11076] af_packet: packet size is too long (65535 > 2016) [ 455.238217][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 455.365552][T11088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2030'. [ 455.634675][T11104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2036'. [ 456.059166][T11116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2040'. [ 456.458856][T11130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2045'. [ 457.625921][T11158] __nla_validate_parse: 2 callbacks suppressed [ 457.625938][T11158] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2056'. [ 457.658751][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 458.870140][T11186] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2068'. [ 458.907367][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 460.473208][T11215] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2080'. [ 460.677268][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2081'. [ 460.702958][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2081'. [ 461.199267][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 461.296753][T11242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2090'. [ 461.794407][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 463.068461][T11284] __nla_validate_parse: 1 callbacks suppressed [ 463.068476][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 463.174318][T11288] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2110'. [ 464.605312][T11317] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2122'. [ 464.709879][T11312] syz.1.2119 (11312) used greatest stack depth: 17896 bytes left [ 465.093002][T11338] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2133'. [ 467.060135][T11371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2145'. [ 469.060394][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 471.247086][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 471.796515][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 472.996540][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 473.324247][T11473] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 473.530858][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 474.890769][T11519] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2192'. [ 474.918813][T11489] bond0 (unregistering): Released all slaves [ 474.936529][T11519] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2192'. [ 474.947371][T11524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2203'. [ 475.060856][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 476.514250][T11569] syz_tun: entered allmulticast mode [ 478.211837][T11666] tipc: Enabling of bearer rejected, failed to enable media [ 478.600744][T11690] tipc: Started in network mode [ 478.611469][T11690] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 478.637755][T11690] tipc: Enabled bearer , priority 10 [ 478.847417][T11706] tipc: Enabling of bearer rejected, failed to enable media [ 479.390677][T11740] netlink: 'syz.1.2298': attribute type 2 has an invalid length. [ 480.302968][ T5878] tipc: Node number set to 8432298 [ 480.796715][T11767] ------------[ cut here ]------------ [ 480.802245][T11767] WARNING: CPU: 0 PID: 11767 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2ee/0x3c0 [ 480.812911][T11767] Modules linked in: [ 480.816845][T11767] CPU: 0 PID: 11767 Comm: syz.3.2309 Not tainted syzkaller #0 [ 480.824603][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.834728][T11767] RIP: 0010:nft_socket_init+0x2ee/0x3c0 [ 480.840310][T11767] Code: 30 84 c0 0f 85 d8 00 00 00 41 88 2c 24 bd 08 00 00 00 e9 b2 fe ff ff 89 f3 e8 5e 9b a8 f8 89 d8 e9 5c ff ff ff e8 52 9b a8 f8 <0f> 0b e9 4b ff ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 480.860126][T11767] RSP: 0018:ffffc900032771d8 EFLAGS: 00010287 [ 480.866589][T11767] RAX: ffffffff88ded71e RBX: ffff88807d468020 RCX: 0000000000080000 [ 480.874764][T11767] RDX: ffffc9000d58b000 RSI: 0000000000001d0b RDI: 0000000000001d0c [ 480.882761][T11767] RBP: 00000000000000ff R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 480.890792][T11767] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 0000000000000100 [ 480.898947][T11767] R13: ffff888030794018 R14: dffffc0000000000 R15: 1ffff1100fa8d004 [ 480.907076][T11767] FS: 00007f1a1a1eb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 480.916477][T11767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.923289][T11767] CR2: 0000200000009b00 CR3: 000000002ea93000 CR4: 00000000003506f0 [ 480.931294][T11767] Call Trace: [ 480.934654][T11767] [ 480.937602][T11767] nf_tables_newrule+0x176e/0x2870 [ 480.942917][T11767] ? nf_tables_delchain+0x1050/0x1050 [ 480.948336][T11767] ? __lock_acquire+0x7d80/0x7d80 [ 480.953552][T11767] ? mutex_unlock+0x10/0x10 [ 480.958180][T11767] ? __nla_parse+0x40/0x50 [ 480.962662][T11767] nfnetlink_rcv+0x1133/0x2490 [ 480.967589][T11767] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 480.973264][T11767] ? __lock_acquire+0x7d80/0x7d80 [ 480.978344][T11767] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.983689][T11767] netlink_unicast+0x7b1/0x930 [ 480.988497][T11767] netlink_sendmsg+0x8d0/0xbf0 [ 480.993352][T11767] ? netlink_getsockopt+0x590/0x590 [ 480.998587][T11767] ? apparmor_socket_sendmsg+0x170/0x330 [ 481.004309][T11767] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 481.009646][T11767] ? security_socket_sendmsg+0x80/0xa0 [ 481.015577][T11767] ? netlink_getsockopt+0x590/0x590 [ 481.020810][T11767] ____sys_sendmsg+0x61b/0x980 [ 481.027317][T11767] ? __asan_memset+0x22/0x40 [ 481.031980][T11767] ? __sys_sendmsg_sock+0x30/0x30 [ 481.037097][T11767] ? __import_iovec+0x5f2/0x850 [ 481.041990][T11767] ? import_iovec+0x73/0xa0 [ 481.046600][T11767] ___sys_sendmsg+0x2a6/0x360 [ 481.051315][T11767] ? __sys_sendmsg+0x2b0/0x2b0 [ 481.056216][T11767] __se_sys_sendmsg+0x1d0/0x2c0 [ 481.061188][T11767] ? __x64_sys_sendmsg+0x80/0x80 [ 481.066222][T11767] ? lockdep_hardirqs_on+0x98/0x150 [ 481.071506][T11767] do_syscall_64+0x55/0xb0 [ 481.076051][T11767] ? clear_bhb_loop+0x40/0x90 [ 481.080882][T11767] ? clear_bhb_loop+0x40/0x90 [ 481.085656][T11767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.091575][T11767] RIP: 0033:0x7f1a1939e159 [ 481.096088][T11767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.116356][T11767] RSP: 002b:00007f1a1a1eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.125032][T11767] RAX: ffffffffffffffda RBX: 00007f1a19625fa0 RCX: 00007f1a1939e159 [ 481.133100][T11767] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 481.141100][T11767] RBP: 00007f1a19435024 R08: 0000000000000000 R09: 0000000000000000 [ 481.149137][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.157188][T11767] R13: 00007f1a19626038 R14: 00007f1a19625fa0 R15: 00007ffc6bd97308 [ 481.165248][T11767] [ 481.168289][T11767] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.175591][T11767] CPU: 0 PID: 11767 Comm: syz.3.2309 Not tainted syzkaller #0 [ 481.183065][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.193134][T11767] Call Trace: [ 481.196423][T11767] [ 481.199370][T11767] dump_stack_lvl+0x18c/0x250 [ 481.204073][T11767] ? show_regs_print_info+0x20/0x20 [ 481.209292][T11767] ? load_image+0x420/0x420 [ 481.213873][T11767] panic+0x2ca/0x720 [ 481.217820][T11767] ? bpf_jit_dump+0xd0/0xd0 [ 481.222372][T11767] __warn+0x2e0/0x470 [ 481.226381][T11767] ? nft_socket_init+0x2ee/0x3c0 [ 481.231349][T11767] ? nft_socket_init+0x2ee/0x3c0 [ 481.236305][T11767] report_bug+0x2be/0x4f0 [ 481.240742][T11767] ? nft_socket_init+0x2ee/0x3c0 [ 481.245700][T11767] ? nft_socket_init+0x2ee/0x3c0 [ 481.250654][T11767] ? nft_socket_init+0x2f0/0x3c0 [ 481.255609][T11767] handle_bug+0xcf/0x120 [ 481.259882][T11767] exc_invalid_op+0x1a/0x50 [ 481.264411][T11767] asm_exc_invalid_op+0x1a/0x20 [ 481.269282][T11767] RIP: 0010:nft_socket_init+0x2ee/0x3c0 [ 481.274861][T11767] Code: 30 84 c0 0f 85 d8 00 00 00 41 88 2c 24 bd 08 00 00 00 e9 b2 fe ff ff 89 f3 e8 5e 9b a8 f8 89 d8 e9 5c ff ff ff e8 52 9b a8 f8 <0f> 0b e9 4b ff ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 481.294482][T11767] RSP: 0018:ffffc900032771d8 EFLAGS: 00010287 [ 481.300546][T11767] RAX: ffffffff88ded71e RBX: ffff88807d468020 RCX: 0000000000080000 [ 481.308518][T11767] RDX: ffffc9000d58b000 RSI: 0000000000001d0b RDI: 0000000000001d0c [ 481.316483][T11767] RBP: 00000000000000ff R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 481.324451][T11767] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 0000000000000100 [ 481.332440][T11767] R13: ffff888030794018 R14: dffffc0000000000 R15: 1ffff1100fa8d004 [ 481.340422][T11767] ? nft_socket_init+0x2ee/0x3c0 [ 481.345373][T11767] ? nft_socket_init+0x2ee/0x3c0 [ 481.350308][T11767] nf_tables_newrule+0x176e/0x2870 [ 481.355459][T11767] ? nf_tables_delchain+0x1050/0x1050 [ 481.360854][T11767] ? __lock_acquire+0x7d80/0x7d80 [ 481.365883][T11767] ? mutex_unlock+0x10/0x10 [ 481.370396][T11767] ? __nla_parse+0x40/0x50 [ 481.374821][T11767] nfnetlink_rcv+0x1133/0x2490 [ 481.379606][T11767] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 481.385189][T11767] ? __lock_acquire+0x7d80/0x7d80 [ 481.390216][T11767] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.395416][T11767] netlink_unicast+0x7b1/0x930 [ 481.400182][T11767] netlink_sendmsg+0x8d0/0xbf0 [ 481.404958][T11767] ? netlink_getsockopt+0x590/0x590 [ 481.410150][T11767] ? apparmor_socket_sendmsg+0x170/0x330 [ 481.415781][T11767] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 481.421068][T11767] ? security_socket_sendmsg+0x80/0xa0 [ 481.426534][T11767] ? netlink_getsockopt+0x590/0x590 [ 481.431731][T11767] ____sys_sendmsg+0x61b/0x980 [ 481.436504][T11767] ? __asan_memset+0x22/0x40 [ 481.441097][T11767] ? __sys_sendmsg_sock+0x30/0x30 [ 481.446116][T11767] ? __import_iovec+0x5f2/0x850 [ 481.450978][T11767] ? import_iovec+0x73/0xa0 [ 481.455485][T11767] ___sys_sendmsg+0x2a6/0x360 [ 481.460165][T11767] ? __sys_sendmsg+0x2b0/0x2b0 [ 481.464956][T11767] __se_sys_sendmsg+0x1d0/0x2c0 [ 481.469806][T11767] ? __x64_sys_sendmsg+0x80/0x80 [ 481.474747][T11767] ? lockdep_hardirqs_on+0x98/0x150 [ 481.479967][T11767] do_syscall_64+0x55/0xb0 [ 481.484402][T11767] ? clear_bhb_loop+0x40/0x90 [ 481.489087][T11767] ? clear_bhb_loop+0x40/0x90 [ 481.493767][T11767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.499661][T11767] RIP: 0033:0x7f1a1939e159 [ 481.504073][T11767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.523698][T11767] RSP: 002b:00007f1a1a1eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.532132][T11767] RAX: ffffffffffffffda RBX: 00007f1a19625fa0 RCX: 00007f1a1939e159 [ 481.540120][T11767] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 481.548108][T11767] RBP: 00007f1a19435024 R08: 0000000000000000 R09: 0000000000000000 [ 481.556084][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.564251][T11767] R13: 00007f1a19626038 R14: 00007f1a19625fa0 R15: 00007ffc6bd97308 [ 481.572237][T11767] [ 481.575381][T11767] Kernel Offset: disabled [ 481.579782][T11767] Rebooting in 86400 seconds..