last executing test programs: 31.22538012s ago: executing program 0 (id=3575): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x48802, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x4a8800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r1, &(0x7f0000000180)=0xfe5f, 0x12) pipe2(0x0, 0x4080) 30.165982786s ago: executing program 0 (id=3579): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000008500000007000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000440)="b9ff03316844268cb89914f088a84b4586dd", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.912478664s ago: executing program 0 (id=3582): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 29.768983631s ago: executing program 0 (id=3583): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2002, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180300003f0007012bbd700000000000017c0000e402fc80b00215806a4b4767ef29e5317dbe81cb7de0203ee72ec55ce049121c273120d45f7f360500109f58472b6d5371afc5ca2de5a1c14cbfedfa5363edd2ccc02813c08d1df81c7c15f732285519470ddf35cf5cf5fc8c71b4aa5351828f2f57af12e5d98e2eb4a849e4328e2cb8e61c024296f5ad2d351a5c7960dca8d98cc8fe8e8a48809ea287b746136d79be7cf397275f5d5cddc331f54ff9f7bc97dbc71329085b28dadfd8d25dc1b1f0036e96cef4a01d64e238c23e29774334769f32fe03806535641f5d37003d1d74881c9e9b73792b7c5f5871b49f3dac0ef126e466cb349bf67e5459bb69c6014780", @ANYRES32, @ANYBLOB="3d3668c91db02d5da40b867662c8238467dec63baa8faa428f086cdffaf2d95157392235c8aaff9de9dcb900a000a166ba80322accf55c0c767755bc1ab7084522b51d536b8940b4090df7caaef7907d665fcc01d1c05cd79956f7779696daafee87331484887e2bae20241cc6af0bef4b7c66968a77b38b22493aabf251316820cac664c5a63d9053fe1fc081f99f965d07a220117c951b534abc8fc79bea699d15e670a9d71eb71da6d56e976f907406551dfe19e03bfb092757792fa8228c28bab6f430cca7e930a1ea4a5dc03e5794e664ad34938ae1dc14440f12392832fff021000000c7002500b16659d73a3e415dfc3286bf8fee575ddc0ef3e6eef9505912b264644cecae2d0368668a5624ab70ae7a488178ff81d41e8c4e0f1b058f0d5e5eca09cf130422285017e5fa8451c635277015f246a6cbda429d5fa753de667ea24b34c7c6ed32fd74a9706e7a65ee41ddcb1ec19e3abf4c37d6c16d77f29d22e4ea088975b9b418b645d43e19a9738809987bcb185e3df3b4839330a01a7c62010c993e48569a225ac133ae44fe5270431128f74670ed7baf3f303d65377c4bbc7f82076cdfacdc1ed6000800e900ac1414bb000005006e000000000008000800", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r1], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) write$cgroup_subtree(r0, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40) 29.13799232s ago: executing program 0 (id=3587): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto]}, {0x0, [0x5f, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x0, 0x100000}, 0x28) socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x40800) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 28.775810052s ago: executing program 0 (id=3589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)={@void, @val={0x3, 0x3, 0x2, 0x5, 0x0, 0x2}, @mpls={[], @llc={@llc={0x0, 0xfc, "b2"}}}}, 0xd) 5.212807259s ago: executing program 4 (id=3696): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.999424878s ago: executing program 4 (id=3699): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x222222222222222', 0x6b) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='fc', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='fc', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f00000007c0)='nn-0x3333333333333333:pn-0x4444444444444444', 0x2b) symlinkat(&(0x7f0000000800)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r7, &(0x7f00000008c0)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=testsubsys', 0x86) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x64841) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 4.823987806s ago: executing program 4 (id=3702): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000780)={0x0, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1}) 4.671990121s ago: executing program 4 (id=3704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000050) 4.405539246s ago: executing program 4 (id=3706): r0 = socket$netlink(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4040001}, 0x0) 3.953536371s ago: executing program 1 (id=3708): bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[], 0xd6) 3.893359486s ago: executing program 3 (id=3710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, &(0x7f00000003c0), &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) 3.483466258s ago: executing program 3 (id=3712): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x48802, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r1, &(0x7f0000000180)=0xfe5f, 0x12) 3.388139162s ago: executing program 1 (id=3713): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000400)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0xc00) write$FUSE_INIT(r2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x2, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0xd, 0x6, 0xc000, 0x4, 0x0, r3, 0x7, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 3.293161663s ago: executing program 5 (id=3714): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0x4) 3.196042856s ago: executing program 3 (id=3716): socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x0, 0xff, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0/file0/../file0\x00'}}) listen(r0, 0x80000001) sendmmsg(r0, &(0x7f0000000540), 0x0, 0xc8844) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40015) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)="1a00", 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.124705558s ago: executing program 2 (id=3717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.042811551s ago: executing program 5 (id=3718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2.890119249s ago: executing program 2 (id=3719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)={@void, @val={0x3, 0x3, 0x2, 0x5, 0x0, 0x2}, @mpls={[], @llc={@llc={0x0, 0xfc, "b2"}}}}, 0xd) 2.784171197s ago: executing program 5 (id=3720): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x20080000) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd000000080002", @ANYBLOB="08000100"], 0x90}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) preadv(r3, &(0x7f00000020c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/6, 0x6}, {&(0x7f0000001ec0)=""/121, 0x79}, {&(0x7f0000001f40)=""/203, 0xcb}, {&(0x7f0000002040)=""/108, 0x6c}], 0x5, 0x0, 0x38) 2.695609508s ago: executing program 1 (id=3721): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9}, 0x20) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 2.647836739s ago: executing program 2 (id=3722): socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x5}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a776"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.571338903s ago: executing program 5 (id=3723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, &(0x7f00000003c0), &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) 2.462229852s ago: executing program 2 (id=3724): bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[], 0xd6) 2.116583445s ago: executing program 3 (id=3725): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x8, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000780)=""/4096}, {&(0x7f0000001780)=""/106}, {&(0x7f0000001800)=""/4096}, {&(0x7f0000002800)=""/33}, {&(0x7f0000002840)=""/37}, {&(0x7f0000002880)=""/249}, {&(0x7f0000002980)=""/48}], 0x0, &(0x7f0000000580)=""/19, 0x4e}, 0x3}], 0x400000000000207, 0x40000083, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000240)="89ba41c97928dec7cec15a160d3dba2553b519a795020072ae0029d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de000000e0ff000000000000000000f1d3b9821c18", 0x80) 2.111162322s ago: executing program 5 (id=3726): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.99491575s ago: executing program 2 (id=3727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x80002, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0x3d6}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) socket(0x2000000000000021, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019300)=ANY=[@ANYBLOB, @ANYBLOB="01d7b90c9cda1b0b0e2a1be2706cf76fffab1695aebb0941ab453d935ea7f8f6beb22cac1c45c0614e6bd508304416c237fefc0daa151e0b3e4fa9fbfc"], 0x48}}, 0x808) openat$full(0xffffffffffffff9c, 0x0, 0x100, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0xffffffffffffffff, 0x4000000}, 0x0, 0xf4240, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffffff0a}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000019200), 0x2, 0x0) 1.945215879s ago: executing program 5 (id=3728): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.686465388s ago: executing program 1 (id=3729): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0x4) 1.18164182s ago: executing program 1 (id=3730): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x20040040) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000640)={0x40000006}) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 174.432678ms ago: executing program 2 (id=3731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x70bd26, 0x1001, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 102.092454ms ago: executing program 3 (id=3732): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 101.406805ms ago: executing program 4 (id=3733): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffff9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r2, r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000280)='\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) getpriority(0x2, 0xffffffffffffffff) 6.079676ms ago: executing program 1 (id=3734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x200, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x9d13, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x486180, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x8d@}/\x00', &(0x7f0000000100)='./file1\x00', r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TIOCMBIC(r6, 0x5417, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") 0s ago: executing program 3 (id=3735): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.0.1314'. [ 400.009161][ T10] tipc: Node number set to 1978816605 [ 400.024757][ T9748] netlink: 'syz.1.1323': attribute type 6 has an invalid length. [ 400.024782][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 400.054764][ T5618] block nbd1: Receive control failed (result -32) [ 400.054764][ T5610] block nbd1: Receive control failed (result -32) [ 401.010523][ T9786] netlink: 'syz.1.1339': attribute type 6 has an invalid length. [ 401.010550][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 401.777904][ T9824] syzkaller0: entered promiscuous mode [ 401.777931][ T9824] syzkaller0: entered allmulticast mode [ 401.794279][ T9824] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 402.911612][ T9833] vlan2: entered promiscuous mode [ 402.911633][ T9833] bridge0: entered promiscuous mode [ 402.950483][ T9741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.049370][ T9879] netlink: 'syz.5.1379': attribute type 2 has an invalid length. [ 404.049400][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1379'. [ 404.957328][ T9924] ip_tables: iptables: counters copy to user failed while replacing table [ 406.819173][ T9867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.078020][ T9937] ip_tables: iptables: counters copy to user failed while replacing table [ 407.369318][ T9954] netlink: 'syz.2.1409': attribute type 6 has an invalid length. [ 407.372441][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 407.434008][ T9957] ip_tables: iptables: counters copy to user failed while replacing table [ 407.482066][ T9960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1413'. [ 407.566149][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'. [ 407.665021][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.845821][ T9972] tipc: Enabled bearer , priority 0 [ 407.930010][ T9971] tipc: Disabling bearer [ 408.367238][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1427'. [ 408.575543][T10006] netlink: 'syz.1.1433': attribute type 2 has an invalid length. [ 408.575572][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 409.157983][T10026] syzkaller0: entered promiscuous mode [ 409.158012][T10026] syzkaller0: entered allmulticast mode [ 409.193218][T10039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'. [ 409.262131][T10041] netlink: 1371 bytes leftover after parsing attributes in process `syz.2.1446'. [ 410.041576][T10075] lo: entered allmulticast mode [ 410.653648][T10074] lo: left allmulticast mode [ 410.676580][T10106] ip_tables: iptables: counters copy to user failed while replacing table [ 411.503713][T10136] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.1482'. [ 411.505049][T10137] ip_tables: iptables: counters copy to user failed while replacing table [ 412.255807][T10180] netlink: 1371 bytes leftover after parsing attributes in process `syz.2.1499'. [ 412.379058][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1505'. [ 412.435308][T10187] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1503'. [ 412.441116][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.441822][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.501616][T10192] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1503'. [ 412.513990][T10192] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.514129][T10192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.514562][T10192] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.514688][T10192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.569261][T10192] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1503'. [ 412.597450][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.597655][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.649737][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1507'. [ 412.649765][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1507'. [ 412.710413][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1507'. [ 412.710442][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1507'. [ 412.921316][T10203] syzkaller0: entered promiscuous mode [ 412.921345][T10203] syzkaller0: entered allmulticast mode [ 413.298098][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 413.319876][T10217] syzkaller0: entered promiscuous mode [ 413.319902][T10217] syzkaller0: entered allmulticast mode [ 413.843776][T10241] lo: entered allmulticast mode [ 413.852129][T10240] lo: left allmulticast mode [ 414.147165][T10255] syzkaller0: entered promiscuous mode [ 414.147195][T10255] syzkaller0: entered allmulticast mode [ 414.288888][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 414.561426][T10142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.053969][T10285] syzkaller0: entered promiscuous mode [ 415.053998][T10285] syzkaller0: entered allmulticast mode [ 415.087496][T10291] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.1552'. [ 416.239700][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.443468][T10387] __nla_validate_parse: 3 callbacks suppressed [ 417.443494][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'. [ 417.645899][T10399] lo: entered allmulticast mode [ 418.314408][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 418.314437][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 418.357167][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 418.357198][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 418.364159][ T7181] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.365177][ T7181] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.365246][ T7181] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.365288][ T7181] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.584978][T10419] ip_tables: iptables: counters copy to user failed while replacing table [ 418.685894][T10398] lo: left allmulticast mode [ 418.907741][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1613'. [ 418.943328][T10431] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1611'. [ 419.073918][T10436] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1615'. [ 419.077511][T10436] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 419.267248][T10441] smc: net device vlan1 applied user defined pnetid SYZ2 [ 419.291543][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 419.538425][T10452] syzkaller0: entered promiscuous mode [ 419.538453][T10452] syzkaller0: entered allmulticast mode [ 419.559551][T10442] tipc: Started in network mode [ 419.559587][T10442] tipc: Node identity eec9bd6c7e5, cluster identity 4711 [ 419.608093][T10442] tipc: Enabled bearer , priority 0 [ 419.628928][T10442] tipc: Resetting bearer [ 419.655643][T10438] tipc: Resetting bearer [ 419.778928][T10438] tipc: Disabling bearer [ 420.199805][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 420.328608][T10486] tipc: Enabling of bearer rejected, already enabled [ 420.895113][T10506] Unknown options in mask 6 [ 420.912358][T10506] netlink: 'syz.5.1643': attribute type 1 has an invalid length. [ 420.986000][T10516] netlink: 'syz.4.1645': attribute type 3 has an invalid length. [ 421.890679][T10549] syzkaller0: entered promiscuous mode [ 421.890709][T10549] syzkaller0: entered allmulticast mode [ 421.960524][T10549] tipc: Enabled bearer , priority 0 [ 421.977525][T10548] tipc: Resetting bearer [ 422.087270][T10548] tipc: Disabling bearer [ 422.342438][T10559] tipc: Enabled bearer , priority 0 [ 422.342737][T10564] syzkaller0: entered promiscuous mode [ 422.342759][T10564] syzkaller0: entered allmulticast mode [ 422.409383][T10550] tipc: Resetting bearer [ 422.503907][T10550] tipc: Disabling bearer [ 422.588594][T10570] syzkaller0: entered promiscuous mode [ 422.588623][T10570] syzkaller0: entered allmulticast mode [ 422.788016][T10588] __nla_validate_parse: 8 callbacks suppressed [ 422.788038][T10588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1671'. [ 422.965419][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.965730][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.501793][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.517262][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.643524][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 423.701530][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 423.793262][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 424.006290][T10625] netlink: 'syz.0.1682': attribute type 2 has an invalid length. [ 424.006317][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 424.143441][T10623] batman_adv: batadv0: Adding interface: gretap1 [ 424.149354][T10623] batman_adv: batadv0: Interface activated: gretap1 [ 424.168448][T10628] tipc: Enabling of bearer rejected, already enabled [ 424.175745][ T143] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.175782][ T143] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.178871][ T5919] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.178906][ T5919] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.179458][ T5919] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.179491][ T5919] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.179531][ T5919] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.179562][ T5919] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.816509][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 424.906359][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'. [ 425.020547][T10662] netlink: 'syz.1.1694': attribute type 16 has an invalid length. [ 425.020585][T10662] netlink: 'syz.1.1694': attribute type 17 has an invalid length. [ 425.036920][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'. [ 425.167480][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.167598][ T7180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.309796][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 425.404238][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'. [ 425.697911][T10677] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 425.775387][T10677] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 425.775637][T10677] ipt_ECN: cannot use operation on non-tcp rule [ 426.096233][ T31] audit: type=1804 audit(1789638008.644:14): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1711" name="/newroot/276/cgroup.controllers" dev="tmpfs" ino=1457 res=1 errno=0 [ 426.147905][ T31] audit: type=1800 audit(1789638008.694:15): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1711" name="cgroup.controllers" dev="tmpfs" ino=1457 res=0 errno=0 [ 426.162939][T10697] No such timeout policy "syz0" [ 426.234528][T10699] syzkaller0: entered promiscuous mode [ 426.234557][T10699] syzkaller0: entered allmulticast mode [ 426.307977][ T7180] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.308225][ T7180] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.334238][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.334458][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.735758][T10714] netlink: 'syz.4.1719': attribute type 6 has an invalid length. [ 426.963431][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 428.770873][T10753] lo: entered promiscuous mode [ 428.935293][T10753] tunl0: entered promiscuous mode [ 428.947261][T10755] __nla_validate_parse: 2 callbacks suppressed [ 428.947279][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 428.947297][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'. [ 429.003968][T10753] gre0: entered promiscuous mode [ 429.042029][T10753] gretap0: entered promiscuous mode [ 429.126460][T10753] erspan0: entered promiscuous mode [ 429.126737][T10753] ip_vti0: entered promiscuous mode [ 429.201464][T10753] ip6_vti0: entered promiscuous mode [ 429.224410][T10753] sit0: entered promiscuous mode [ 429.242483][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 429.287678][T10753] ip6tnl0: entered promiscuous mode [ 429.371457][T10753] ip6gre0: entered promiscuous mode [ 429.408995][T10753] syz_tun: entered promiscuous mode [ 429.457914][T10753] ip6gretap0: entered promiscuous mode [ 429.504205][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.504502][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.506521][T10753] bridge0: entered promiscuous mode [ 429.549545][T10753] vcan0: entered promiscuous mode [ 429.580290][T10753] bond0: entered promiscuous mode [ 429.580323][T10753] bond_slave_0: entered promiscuous mode [ 429.580556][T10753] bond_slave_1: entered promiscuous mode [ 429.596792][T10753] team0: entered promiscuous mode [ 429.596817][T10753] team_slave_0: entered promiscuous mode [ 429.597029][T10753] team_slave_1: entered promiscuous mode [ 429.627612][T10753] dummy0: entered promiscuous mode [ 429.665444][T10753] nlmon0: entered promiscuous mode [ 429.683857][T10753] batadv0: entered promiscuous mode [ 429.706461][T10753] vxcan0: entered promiscuous mode [ 429.727891][T10753] vxcan1: entered promiscuous mode [ 429.751033][T10753] veth1: entered promiscuous mode [ 429.780547][T10753] wg0: entered promiscuous mode [ 429.808456][T10753] wg1: entered promiscuous mode [ 429.828926][T10753] wg2: entered promiscuous mode [ 429.844843][T10753] veth0_to_bridge: entered promiscuous mode [ 429.890778][T10753] veth1_to_bridge: entered promiscuous mode [ 429.933268][T10753] veth0_to_bond: entered promiscuous mode [ 429.971794][T10753] veth1_to_bond: entered promiscuous mode [ 430.010286][T10753] veth0_to_team: entered promiscuous mode [ 430.043913][T10753] veth1_to_team: entered promiscuous mode [ 430.088028][T10753] veth0_to_batadv: entered promiscuous mode [ 430.108921][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.108975][T10753] batadv_slave_0: entered promiscuous mode [ 430.142893][T10753] veth1_to_batadv: entered promiscuous mode [ 430.157570][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.157641][T10753] batadv_slave_1: entered promiscuous mode [ 430.185448][T10753] xfrm0: entered promiscuous mode [ 430.207989][T10753] veth0_to_hsr: entered promiscuous mode [ 430.235949][T10753] veth1_to_hsr: entered promiscuous mode [ 430.268734][T10753] hsr0: entered promiscuous mode [ 430.332541][T10753] veth1_virt_wifi: entered promiscuous mode [ 430.352936][T10753] veth0_virt_wifi: entered promiscuous mode [ 430.382678][T10753] virt_wifi0: entered promiscuous mode [ 430.436078][T10753] vlan0: entered promiscuous mode [ 430.452475][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 430.471797][T10753] vlan1: entered promiscuous mode [ 430.501173][T10753] macvlan0: entered promiscuous mode [ 430.533236][T10753] macvlan1: entered promiscuous mode [ 430.561275][T10753] ipvlan0: entered promiscuous mode [ 430.561477][T10753] ipvlan1: entered promiscuous mode [ 430.573464][T10753] macvtap0: entered promiscuous mode [ 430.579773][T10753] macsec0: entered promiscuous mode [ 430.598829][T10753] geneve0: entered promiscuous mode [ 430.693013][T10753] geneve1: entered promiscuous mode [ 430.729206][T10753] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 430.753211][T10753] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 430.773143][T10753] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 430.790900][T10753] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 430.831470][T10753] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 430.853125][T10753] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 430.858312][T10753] bond1: entered promiscuous mode [ 430.858472][T10753] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 430.858733][T10753] vxlan0: entered promiscuous mode [ 430.889132][T10753] sit1: entered promiscuous mode [ 430.935002][T10753] ip6tnl1: entered promiscuous mode [ 430.950576][T10753] bridge1: entered promiscuous mode [ 431.061190][T10753] macvlan2: entered promiscuous mode [ 431.072428][T10753] vxlan1: entered promiscuous mode [ 431.092006][T10753] ip6gre1: entered promiscuous mode [ 431.119625][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 431.119652][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'. [ 431.121728][T10761] smc: net device vlan1 applied user defined pnetid SYZ2 [ 431.122451][ T7180] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.122490][ T7180] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.122538][ T7180] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.122576][ T7180] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.122619][ T7180] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.122649][ T7180] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.122691][ T7180] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.122723][ T7180] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.211441][T10785] xt_hashlimit: size too large, truncated to 1048576 [ 432.722816][T10849] netlink: 'syz.1.1760': attribute type 2 has an invalid length. [ 432.722843][T10849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1760'. [ 432.764076][T10849] : entered promiscuous mode [ 432.821899][T10849] netlink: 'syz.1.1760': attribute type 2 has an invalid length. [ 432.821925][T10849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1760'. [ 433.210871][T10861] syzkaller0: entered promiscuous mode [ 433.210901][T10861] syzkaller0: entered allmulticast mode [ 434.044981][T10899] syzkaller0: entered promiscuous mode [ 434.045012][T10899] syzkaller0: entered allmulticast mode [ 434.699678][T10926] syzkaller0: entered promiscuous mode [ 434.699707][T10926] syzkaller0: entered allmulticast mode [ 435.142686][T10948] syzkaller0: entered promiscuous mode [ 435.142714][T10948] syzkaller0: entered allmulticast mode [ 435.200893][T10948] tipc: Enabled bearer , priority 0 [ 435.234225][T10951] syzkaller0: entered promiscuous mode [ 435.234253][T10951] syzkaller0: entered allmulticast mode [ 435.240948][T10948] tipc: Resetting bearer [ 435.264917][T10944] tipc: Resetting bearer [ 435.616673][T10944] tipc: Disabling bearer [ 437.352887][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.382852][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.934902][T10989] batman_adv: batadv0: Interface deactivated: gretap1 [ 438.042654][ T5919] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.042715][ T5919] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.042759][ T5919] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.042805][ T5919] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.399530][T11028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1818'. [ 438.517553][T11036] netlink: 'syz.1.1824': attribute type 2 has an invalid length. [ 438.517580][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 438.565947][T11036] netlink: 'syz.1.1824': attribute type 2 has an invalid length. [ 438.565975][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 438.889508][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 438.889537][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'. [ 438.898734][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 438.898759][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'. [ 438.902401][ T7180] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.903480][ T7180] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.903544][ T7180] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.903584][ T7180] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.334635][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.343952][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.674956][T11071] tipc: Enabled bearer , priority 0 [ 439.807900][T11083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1836'. [ 439.857329][T11076] syzkaller0: entered promiscuous mode [ 439.857360][T11076] syzkaller0: entered allmulticast mode [ 439.888424][T11064] tipc: Resetting bearer [ 440.074760][T11064] tipc: Disabling bearer [ 441.402059][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 441.454755][T11147] netlink: 'syz.2.1858': attribute type 23 has an invalid length. [ 441.744677][T11124] batman_adv: batadv0: Interface deactivated: gretap1 [ 441.772754][ T7181] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.775362][ T78] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.775412][ T78] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.775456][ T78] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.757671][T11190] syzkaller0: entered promiscuous mode [ 442.757701][T11190] syzkaller0: entered allmulticast mode [ 443.602025][T11208] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 444.717264][T11251] smc: net device vlan1 applied user defined pnetid SYZ2 [ 444.951425][T11262] netlink: 'syz.5.1898': attribute type 23 has an invalid length. [ 445.434319][T11281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1904'. [ 445.672011][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 445.672041][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 445.944821][T11265] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.628068][T11265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.704905][T11265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.612485][ T5919] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.612683][ T5919] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.612732][ T5919] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.612764][ T5919] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.612807][ T5919] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.612840][ T5919] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.612884][ T5919] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.612915][ T5919] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.617335][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 447.617357][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 448.193933][T11325] syzkaller0: entered promiscuous mode [ 448.193963][T11325] syzkaller0: entered allmulticast mode [ 448.220164][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 448.264348][T11338] smc: net device vlan1 applied user defined pnetid SYZ2 [ 448.489909][T11351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1923'. [ 448.518246][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1925'. [ 448.518272][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1925'. [ 450.023096][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1925'. [ 450.287002][T11375] netlink: 'syz.3.1932': attribute type 16 has an invalid length. [ 450.287031][T11375] netlink: 'syz.3.1932': attribute type 17 has an invalid length. [ 450.287047][T11375] netlink: 'syz.3.1932': attribute type 27 has an invalid length. [ 450.678736][T11392] smc: net device vlan1 applied user defined pnetid SYZ2 [ 450.796232][T11394] lo: entered promiscuous mode [ 450.796431][T11394] tunl0: entered promiscuous mode [ 450.796598][T11394] gre0: entered promiscuous mode [ 450.796730][T11394] gretap0: entered promiscuous mode [ 450.796861][T11394] erspan0: entered promiscuous mode [ 450.796997][T11394] ip_vti0: entered promiscuous mode [ 450.797206][T11394] ip6_vti0: entered promiscuous mode [ 450.797336][T11394] sit0: entered promiscuous mode [ 450.797726][T11394] ip6tnl0: entered promiscuous mode [ 450.797861][T11394] ip6gre0: entered promiscuous mode [ 450.797989][T11394] syz_tun: entered promiscuous mode [ 450.798161][T11394] ip6gretap0: entered promiscuous mode [ 450.798287][T11394] bridge0: entered promiscuous mode [ 450.798428][T11394] vcan0: entered promiscuous mode [ 450.798588][T11394] bond0: entered promiscuous mode [ 450.798847][T11394] team0: entered promiscuous mode [ 450.799008][T11394] nlmon0: entered promiscuous mode [ 450.800792][T11394] batadv0: entered promiscuous mode [ 450.800960][T11394] vxcan0: entered promiscuous mode [ 450.801128][T11394] vxcan1: entered promiscuous mode [ 450.801282][T11394] veth0: entered promiscuous mode [ 450.801440][T11394] veth1: entered promiscuous mode [ 450.801598][T11394] wg0: entered promiscuous mode [ 450.801866][T11394] wg1: entered promiscuous mode [ 450.802037][T11394] wg2: entered promiscuous mode [ 450.893756][T11394] veth0_to_bridge: entered promiscuous mode [ 450.893944][T11394] bridge_slave_0: entered promiscuous mode [ 450.894178][T11394] veth1_to_bridge: entered promiscuous mode [ 450.894343][T11394] bridge_slave_1: entered promiscuous mode [ 450.894507][T11394] veth0_to_bond: entered promiscuous mode [ 450.897155][T11394] bond_slave_0: entered promiscuous mode [ 450.897340][T11394] veth1_to_bond: entered promiscuous mode [ 450.897505][T11394] bond_slave_1: entered promiscuous mode [ 450.906263][T11394] veth0_to_team: entered promiscuous mode [ 450.906440][T11394] team_slave_0: entered promiscuous mode [ 450.906626][T11394] veth1_to_team: entered promiscuous mode [ 450.906789][T11394] team_slave_1: entered promiscuous mode [ 450.906952][T11394] veth0_to_batadv: entered promiscuous mode [ 450.908412][T11394] batadv_slave_0: entered promiscuous mode [ 450.908591][T11394] veth1_to_batadv: entered promiscuous mode [ 450.916365][T11394] batadv_slave_1: entered promiscuous mode [ 450.916548][T11394] xfrm0: entered promiscuous mode [ 450.916711][T11394] veth0_to_hsr: entered promiscuous mode [ 450.917016][T11394] veth1_to_hsr: entered promiscuous mode [ 450.917318][T11394] hsr0: entered promiscuous mode [ 450.919908][T11394] veth1_virt_wifi: entered promiscuous mode [ 450.925924][T11394] veth0_virt_wifi: entered promiscuous mode [ 450.926096][T11394] virt_wifi0: entered promiscuous mode [ 450.926421][T11394] vlan0: entered promiscuous mode [ 450.926907][T11394] vlan1: entered promiscuous mode [ 450.927230][T11394] macvlan0: entered promiscuous mode [ 450.927392][T11394] macvlan1: entered promiscuous mode [ 450.934446][T11394] ipvlan0: entered promiscuous mode [ 450.934771][T11394] ipvlan1: entered promiscuous mode [ 450.935226][T11394] macvtap0: entered promiscuous mode [ 450.935392][T11394] macsec0: entered promiscuous mode [ 450.935523][T11394] geneve0: entered promiscuous mode [ 450.939255][T11394] geneve1: entered promiscuous mode [ 450.941760][T11394] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 450.941923][T11394] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 450.942065][T11394] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 450.944242][T11394] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 450.944394][T11394] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 450.944566][T11394] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 450.944731][T11394] bond1: entered promiscuous mode [ 450.944872][T11394] sit1: entered promiscuous mode [ 450.951067][T11394] macvlan2: entered promiscuous mode [ 450.951241][T11394] ip6tnl1: entered promiscuous mode [ 450.951509][T11394] ip6gretap1: entered promiscuous mode [ 450.951649][T11394] macvlan3: entered promiscuous mode [ 450.951816][T11394] gretap1: entered promiscuous mode [ 450.963575][T11394] dummy0: entered promiscuous mode [ 450.963763][T11394] macvlan4: entered promiscuous mode [ 450.963930][T11394] bond2: entered promiscuous mode [ 450.970977][T11394] macvlan5: entered promiscuous mode [ 451.071165][T11399] __nla_validate_parse: 1 callbacks suppressed [ 451.071197][T11399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1941'. [ 451.397261][T11405] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1942'. [ 451.418515][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 451.476240][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 451.476264][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 451.526797][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1947'. [ 451.552469][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 451.552496][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 451.674306][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 451.676839][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 451.714425][T11417] nbd0: detected capacity change from 63 to 0 [ 452.167670][ T78] IPVS: starting estimator thread 0... [ 452.252578][T11436] IPVS: using max 26 ests per chain, 62400 per kthread [ 452.329731][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.048890][T11468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.623651][T11492] tipc: Enabling of bearer rejected, failed to enable media [ 454.498826][T11532] syzkaller0: entered promiscuous mode [ 454.498857][T11532] syzkaller0: entered allmulticast mode [ 455.591548][T11589] syzkaller0: entered promiscuous mode [ 455.591577][T11589] syzkaller0: entered allmulticast mode [ 456.419984][T11622] __nla_validate_parse: 6 callbacks suppressed [ 456.420009][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2026'. [ 456.789270][T11635] Unknown options in mask 6 [ 456.789619][T11635] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 456.789640][T11635] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2030'. [ 457.071563][T11643] syzkaller0: entered promiscuous mode [ 457.071598][T11643] syzkaller0: entered allmulticast mode [ 457.370730][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2039'. [ 458.428589][T11684] Unknown options in mask 6 [ 458.584378][T11684] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 458.584406][T11684] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2049'. [ 458.728095][T11703] lo: entered promiscuous mode [ 458.728304][T11703] tunl0: entered promiscuous mode [ 458.728433][T11703] gre0: entered promiscuous mode [ 458.728561][T11703] gretap0: entered promiscuous mode [ 458.728679][T11703] erspan0: entered promiscuous mode [ 458.728814][T11703] ip_vti0: entered promiscuous mode [ 458.728927][T11703] ip6_vti0: entered promiscuous mode [ 458.729803][T11703] sit0: entered promiscuous mode [ 458.729939][T11703] ip6tnl0: entered promiscuous mode [ 458.730072][T11703] ip6gre0: entered promiscuous mode [ 458.730211][T11703] syz_tun: entered promiscuous mode [ 458.730377][T11703] ip6gretap0: entered promiscuous mode [ 458.730716][T11703] vcan0: entered promiscuous mode [ 458.754918][T11703] bond0: entered promiscuous mode [ 458.754945][T11703] bond_slave_0: entered promiscuous mode [ 458.755192][T11703] bond_slave_1: entered promiscuous mode [ 458.766330][T11703] team0: entered promiscuous mode [ 458.766356][T11703] team_slave_0: entered promiscuous mode [ 458.766555][T11703] team_slave_1: entered promiscuous mode [ 458.766885][T11703] dummy0: entered promiscuous mode [ 458.767063][T11703] nlmon0: entered promiscuous mode [ 458.767364][T11703] vxcan0: entered promiscuous mode [ 458.767537][T11703] vxcan1: entered promiscuous mode [ 458.771182][T11703] veth0: entered promiscuous mode [ 458.771347][T11703] veth1: entered promiscuous mode [ 458.771507][T11703] wg0: entered promiscuous mode [ 458.771664][T11703] wg1: entered promiscuous mode [ 458.771828][T11703] wg2: entered promiscuous mode [ 458.771986][T11703] veth0_to_bridge: entered promiscuous mode [ 458.774774][T11703] veth1_to_bridge: entered promiscuous mode [ 458.777458][T11703] veth0_to_bond: entered promiscuous mode [ 458.777785][T11703] veth1_to_bond: entered promiscuous mode [ 458.778143][T11703] veth0_to_team: entered promiscuous mode [ 458.778447][T11703] veth1_to_team: entered promiscuous mode [ 458.789249][T11703] veth0_to_batadv: entered promiscuous mode [ 458.789443][T11703] batadv_slave_0: entered promiscuous mode [ 458.789612][T11703] veth1_to_batadv: entered promiscuous mode [ 458.789783][T11703] batadv_slave_1: entered promiscuous mode [ 458.789947][T11703] xfrm0: entered promiscuous mode [ 458.790115][T11703] veth0_to_hsr: entered promiscuous mode [ 458.793284][T11703] veth1_to_hsr: entered promiscuous mode [ 458.801924][T11703] hsr0: entered promiscuous mode [ 458.802105][T11703] veth1_virt_wifi: entered promiscuous mode [ 458.802477][T11703] veth0_virt_wifi: entered promiscuous mode [ 458.802681][T11703] virt_wifi0: entered promiscuous mode [ 458.803144][T11703] vlan0: entered promiscuous mode [ 458.816888][T11703] vlan1: entered promiscuous mode [ 458.818608][T11703] macvlan0: entered promiscuous mode [ 458.818787][T11703] macvlan1: entered promiscuous mode [ 458.818952][T11703] ipvlan0: entered promiscuous mode [ 458.819120][T11703] ipvlan1: entered promiscuous mode [ 458.830694][T11703] macvtap0: entered promiscuous mode [ 458.830863][T11703] macsec0: entered promiscuous mode [ 458.831130][T11703] geneve0: entered promiscuous mode [ 458.831303][T11703] geneve1: entered promiscuous mode [ 458.831473][T11703] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 458.831639][T11703] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 458.831804][T11703] gretap1: entered promiscuous mode [ 458.836138][T11703] ip6tnl1: entered promiscuous mode [ 458.836322][T11703] dummy1: entered promiscuous mode [ 458.836493][T11703] netdevsim netdevsim4 eth0: entered promiscuous mode [ 458.836664][T11703] netdevsim netdevsim4 eth1: entered promiscuous mode [ 458.836833][T11703] netdevsim netdevsim4 eth2: entered promiscuous mode [ 458.836998][T11703] netdevsim netdevsim4 eth3: entered promiscuous mode [ 458.925275][T11703] vxlan0: entered promiscuous mode [ 458.935393][T11703] macvlan2: entered promiscuous mode [ 458.943570][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.943618][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.943695][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.943742][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.922845][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 460.055797][T11744] Unknown options in mask 6 [ 461.553475][T11737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.557795][T11744] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 461.557816][T11744] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2069'. [ 461.986102][T11772] bond1: option updelay: invalid value (18446744073709518847) [ 461.986135][T11772] bond1: option updelay: allowed values 0 - 2147483647 [ 462.024710][T11772] bond1 (unregistering): Released all slaves [ 462.384735][T11782] syzkaller0: entered promiscuous mode [ 462.384764][T11782] syzkaller0: entered allmulticast mode [ 462.716431][T11809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2087'. [ 465.326628][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2102'. [ 465.779329][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 466.526322][T11889] ip_tables: iptables: counters copy to user failed while replacing table [ 466.776561][T11904] netlink: 'syz.0.2121': attribute type 3 has an invalid length. [ 467.727526][T11927] lo: entered allmulticast mode [ 468.084697][T11945] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2133'. [ 468.143585][T11944] syzkaller0: entered promiscuous mode [ 468.143621][T11944] syzkaller0: entered allmulticast mode [ 468.193400][T11948] netlink: 'syz.3.2137': attribute type 3 has an invalid length. [ 468.543587][T11923] lo: left allmulticast mode [ 468.608005][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 468.975860][T11980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2149'. [ 468.975902][T11980] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2149'. [ 469.040773][T11982] netlink: 'syz.5.2149': attribute type 1 has an invalid length. [ 469.040799][T11982] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2149'. [ 469.041148][T11983] gretap0: entered allmulticast mode [ 469.603043][T12008] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2159'. [ 469.907707][T12018] syzkaller0: entered promiscuous mode [ 469.907737][T12018] syzkaller0: entered allmulticast mode [ 469.940423][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 470.001004][T12022] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 470.001700][T12022] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 470.482316][T12042] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2175'. [ 471.096088][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2182'. [ 471.439248][T12070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2185'. [ 471.525153][T12071] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 472.666814][T12119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.871525][T12126] 8021q: VLANs not supported on nlmon0 [ 473.023835][T12132] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 473.113736][T12132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.124604][T12139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.129303][T12139] bond1: (slave batadv0): making interface the new active one [ 473.147328][T12139] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 473.232007][T12144] __nla_validate_parse: 4 callbacks suppressed [ 473.232032][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2216'. [ 473.257237][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2216'. [ 473.394825][T12132] bond1: (slave batadv0): Releasing active interface [ 473.399289][T12132] bridge_slave_1: left allmulticast mode [ 473.399314][T12132] bridge_slave_1: left promiscuous mode [ 473.399570][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.428091][T12132] bond0: (slave bond_slave_0): Releasing backup interface [ 473.438422][T12132] bond0: (slave bond_slave_1): Releasing backup interface [ 473.450192][T12132] team0: Port device team_slave_0 removed [ 473.458858][T12132] team0: Port device team_slave_1 removed [ 473.459384][T12132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.460275][T12132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.461200][T12132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 473.965837][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 473.965866][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2225'. [ 474.036292][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 474.036320][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2225'. [ 474.567753][T12196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2235'. [ 474.882048][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 475.196876][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2244'. [ 475.328687][T12216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.405073][T12224] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2247'. [ 475.718715][T12234] vlan2: entered promiscuous mode [ 475.718744][T12234] dummy0: entered promiscuous mode [ 476.077267][T12252] syzkaller0: entered promiscuous mode [ 476.077295][T12252] syzkaller0: entered allmulticast mode [ 476.498229][T12269] 0: reclassify loop, rule prio 0, protocol 800 [ 476.758277][T12276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.804100][T12276] bond2: (slave wlan1): Enslaving as an active interface with an up link [ 477.906652][T12324] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 477.907772][T12324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.909266][T12324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 478.636456][T12362] netlink: 'syz.1.2302': attribute type 1 has an invalid length. [ 478.716424][T12362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.871061][T12359] bond2: (slave geneve2): making interface the new active one [ 478.880695][T12359] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 478.885006][ T1013] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.885314][ T1013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.885891][ T1013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.886053][ T1013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.268544][T12387] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 479.447562][T12397] __nla_validate_parse: 5 callbacks suppressed [ 479.447586][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 480.151530][T12412] syzkaller0: entered promiscuous mode [ 480.151561][T12412] syzkaller0: entered allmulticast mode [ 482.450649][T12466] syzkaller0: entered promiscuous mode [ 482.450677][T12466] syzkaller0: entered allmulticast mode [ 482.473708][T12466] tipc: Enabled bearer , priority 0 [ 482.493154][T12464] tipc: Resetting bearer [ 482.626173][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 482.631842][T12464] tipc: Disabling bearer [ 482.887127][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 482.907972][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 482.937328][T12492] 8021q: VLANs not supported on nlmon0 [ 483.024011][T12491] tipc: New replicast peer: 127.0.0.1 [ 483.024441][T12491] tipc: Enabled bearer , priority 10 [ 483.028686][ T13] tipc: Subscription rejected, illegal request [ 483.116983][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.117009][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.185231][T12502] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2357'. [ 483.314407][T12505] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.386799][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 483.483647][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2360'. [ 483.656513][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2366'. [ 483.658600][T12522] 8021q: VLANs not supported on nlmon0 [ 483.732664][T12505] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.811727][T12505] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.197959][T12505] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.911991][T11317] tipc: Node number set to 2425994604 [ 485.915233][T12529] syzkaller0: entered promiscuous mode [ 485.915255][T12529] syzkaller0: entered allmulticast mode [ 485.916886][T12535] tipc: Enabled bearer , priority 0 [ 485.997159][T12558] tipc: Resetting bearer [ 486.019435][T12528] tipc: Resetting bearer [ 486.079867][T12528] tipc: Disabling bearer [ 486.317209][T12582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2382'. [ 486.317241][T12582] nbd: couldn't find a device at index 64 [ 486.476389][T12585] syzkaller0: entered promiscuous mode [ 486.476420][T12585] syzkaller0: entered allmulticast mode [ 486.973987][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 486.974978][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'. [ 487.081269][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 487.164588][T12618] Bluetooth: hci0: unsupported parameter 5135 [ 487.164616][T12618] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 489.166564][T12609] smc: net device vlan1 applied user defined pnetid SYZ2 [ 489.168647][T12611] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 489.342504][ T5919] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.342559][ T5919] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.342601][ T5919] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.342643][ T5919] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.717094][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 489.721609][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2413'. [ 490.099622][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 490.099650][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 490.101677][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 490.101699][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 490.316192][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.316220][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.354813][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.354840][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.967146][T12732] tipc: Enabling of bearer rejected, already enabled [ 492.261320][T12786] __nla_validate_parse: 3 callbacks suppressed [ 492.261346][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 492.299882][T12786] tipc: Enabling of bearer rejected, already enabled [ 492.802761][T12810] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2454'. [ 493.913510][T12861] team_slave_0: entered allmulticast mode [ 494.197447][T12864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2472'. [ 494.197490][T12864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2472'. [ 494.227881][T12864] netlink: 'syz.2.2472': attribute type 1 has an invalid length. [ 494.227900][T12864] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2472'. [ 494.522403][T12879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2480'. [ 494.624025][T12884] syzkaller0: entered promiscuous mode [ 494.624054][T12884] syzkaller0: entered allmulticast mode [ 494.637915][T12885] xt_hashlimit: size too large, truncated to 1048576 [ 494.650885][T12884] tipc: Enabled bearer , priority 0 [ 494.664710][T12880] tipc: Resetting bearer [ 494.765968][T12880] tipc: Disabling bearer [ 494.838996][T12895] bridge_slave_0 (unregistering): left allmulticast mode [ 494.839121][T12895] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.981340][T12897] lo: entered allmulticast mode [ 494.999545][T12904] ip_tables: iptables: counters copy to user failed while replacing table [ 495.458715][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2493'. [ 495.512255][T12889] lo: left allmulticast mode [ 495.689742][T12930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2497'. [ 496.333818][T12951] syzkaller0: entered promiscuous mode [ 496.333848][T12951] syzkaller0: entered allmulticast mode [ 496.400531][T12958] bridge_slave_0 (unregistering): left allmulticast mode [ 496.400563][T12958] bridge_slave_0 (unregistering): left promiscuous mode [ 496.400656][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.294296][T13003] nbd1: detected capacity change from 0 to 6 [ 497.323275][ T5870] block nbd1: Dead connection, failed to find a fallback [ 497.460432][T13007] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2522'. [ 497.492500][T13007] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2522'. [ 497.597669][T13009] xt_CT: No such helper "snmp" [ 497.833947][T13011] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 498.799601][T12969] lo: entered allmulticast mode [ 498.799846][T12969] lo: left allmulticast mode [ 499.070059][T13027] netlink: 'syz.3.2526': attribute type 1 has an invalid length. [ 499.169824][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 499.600856][T13022] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.768340][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 499.768373][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 499.814084][T13022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.820619][T13022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.024610][T13057] tipc: Enabled bearer , priority 0 [ 500.025824][T13054] syzkaller0: entered promiscuous mode [ 500.025846][T13054] syzkaller0: entered allmulticast mode [ 500.029381][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 500.029403][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 500.030716][T13068] tipc: Resetting bearer [ 500.080577][T13033] tipc: Resetting bearer [ 500.128838][T13033] tipc: Disabling bearer [ 500.269622][T13076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2534'. [ 500.283516][ T78] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.283592][ T78] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.283631][ T78] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.283669][ T78] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.400600][T13081] lo: entered allmulticast mode [ 500.643240][T13085] syzkaller0: entered promiscuous mode [ 500.643270][T13085] syzkaller0: entered allmulticast mode [ 500.785140][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.101248][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'. [ 501.605077][T13128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2550'. [ 502.999159][T13080] lo: left allmulticast mode [ 503.067408][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 503.067435][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'. [ 503.068243][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 503.068264][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'. [ 503.152297][T13128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.476132][T13146] xt_CT: No such helper "snmp" [ 504.025251][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 504.107045][T13185] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2564'. [ 504.307623][T13191] tipc: Enabled bearer , priority 0 [ 504.390447][T13189] tipc: Disabling bearer [ 504.692476][T13195] syzkaller0: entered promiscuous mode [ 504.692507][T13195] syzkaller0: entered allmulticast mode [ 506.672034][T13246] tipc: Enabling of bearer rejected, already enabled [ 506.796504][T13253] tipc: Enabled bearer , priority 0 [ 506.798825][T13253] tipc: Resetting bearer [ 506.831488][T13252] tipc: Disabling bearer [ 506.934305][ T5610] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 507.057099][T13265] gtp0: entered promiscuous mode [ 507.057127][T13265] gtp0: entered allmulticast mode [ 507.674370][T13281] syzkaller0: entered promiscuous mode [ 507.674400][T13281] syzkaller0: entered allmulticast mode [ 507.678469][T13285] tipc: Enabling of bearer rejected, already enabled [ 507.829220][T13297] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2601'. [ 508.136012][T13306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2605'. [ 509.625817][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.422662][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2625'. [ 510.429286][T13355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.712391][T13361] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 510.846760][T13365] xt_hashlimit: size too large, truncated to 1048576 [ 511.018886][T13369] bridge_slave_0 (unregistering): left allmulticast mode [ 511.018998][T13369] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.914447][ T5618] block nbd2: Receive control failed (result -32) [ 511.915745][ T5610] block nbd2: Receive control failed (result -32) [ 511.994062][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'. [ 512.853137][T13429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.977136][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 512.977164][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 512.977830][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 512.977851][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 513.095583][T13437] syzkaller0: entered promiscuous mode [ 513.095610][T13437] syzkaller0: entered allmulticast mode [ 513.127640][T13437] tipc: Enabled bearer , priority 0 [ 513.139123][T13436] tipc: Resetting bearer [ 513.181375][T13436] tipc: Disabling bearer [ 513.529771][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 513.851050][T13471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.265349][T13483] syzkaller0: entered promiscuous mode [ 514.265376][T13483] syzkaller0: entered allmulticast mode [ 514.284360][T13483] tipc: Enabled bearer , priority 0 [ 514.448198][T13482] tipc: Resetting bearer [ 514.459922][T13504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2680'. [ 514.501350][T13482] tipc: Disabling bearer [ 515.070648][ T5637] udevd[5637]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.120299][ T5625] udevd[5625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.186937][T13507] syzkaller0: entered promiscuous mode [ 515.186967][T13507] syzkaller0: entered allmulticast mode [ 515.446165][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 515.446201][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2693'. [ 517.092546][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 517.092571][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2693'. [ 517.094170][T13533] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 517.094219][T13533] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 517.094249][T13533] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 517.239734][T13547] tipc: Enabling of bearer rejected, failed to enable media [ 517.560423][T13575] tipc: Enabled bearer , priority 0 [ 517.571228][T13575] tipc: Resetting bearer [ 517.619470][T13571] tipc: Disabling bearer [ 517.765619][T13578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2702'. [ 517.800050][T13582] bridge1: entered promiscuous mode [ 517.838542][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 517.838567][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2707'. [ 517.975332][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 518.008453][ T7181] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.008537][ T7181] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.008579][ T7181] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.008619][ T7181] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.397287][T13606] lo: entered allmulticast mode [ 518.405146][ T5625] udevd[5625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.409895][ T5625] udevd[5625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.453596][T13609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.617118][T13615] xt_hashlimit: size too large, truncated to 1048576 [ 518.723100][T13604] lo: left allmulticast mode [ 519.231922][T13630] syzkaller0: entered promiscuous mode [ 519.231953][T13630] syzkaller0: entered allmulticast mode [ 519.809193][T13665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.843265][T13699] __nla_validate_parse: 2 callbacks suppressed [ 521.843289][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 521.843308][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2741'. [ 521.886878][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 521.886903][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2741'. [ 521.992749][ T7180] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.992802][ T7180] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.992844][ T7180] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.992885][ T7180] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.287127][T13716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.290024][T13717] block nbd4: not configured, cannot reconfigure [ 522.458357][T13720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2751'. [ 522.458400][T13720] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2751'. [ 522.462023][T13720] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 522.462043][T13720] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2751'. [ 522.556239][T13725] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2753'. [ 523.514784][T13769] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 523.591046][T13773] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2772'. [ 523.712928][T13777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 523.856313][T13785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.367991][ T5625] udevd[5625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 525.590165][T13859] macvlan3: entered promiscuous mode [ 525.590193][T13859] vlan4: entered promiscuous mode [ 525.590209][T13859] syz_tun: entered promiscuous mode [ 525.628480][T13859] vlan4: left promiscuous mode [ 525.628505][T13859] syz_tun: left promiscuous mode [ 525.738648][T13871] lo: entered allmulticast mode [ 525.915379][T13865] lo: left allmulticast mode [ 527.032986][T13929] netlink: 'syz.0.2820': attribute type 8 has an invalid length. [ 527.064402][T13929] __nla_validate_parse: 3 callbacks suppressed [ 527.064428][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 527.193103][T13929] veth3: entered allmulticast mode [ 527.460665][T13941] syzkaller1: entered promiscuous mode [ 527.460693][T13941] syzkaller1: entered allmulticast mode [ 527.518214][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 527.802031][T13960] erspan0: left promiscuous mode [ 527.802882][T13960] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2831'. [ 527.867837][T13963] xt_hashlimit: size too large, truncated to 1048576 [ 528.420446][T13986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.600533][T13993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2845'. [ 529.820584][T14050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2858'. [ 530.452530][ T5610] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 530.468473][T14079] nbd: must specify a device to reconfigure [ 530.476812][T14074] syzkaller0: entered promiscuous mode [ 530.476834][T14074] syzkaller0: entered allmulticast mode [ 530.493212][T14074] tipc: Enabled bearer , priority 0 [ 530.496593][T14072] tipc: Resetting bearer [ 530.571227][T14072] tipc: Disabling bearer [ 530.725097][T14086] netlink: 'syz.3.2874': attribute type 8 has an invalid length. [ 531.045388][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2878'. [ 531.551540][T14125] nbd: must specify a device to reconfigure [ 531.618643][T14129] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.096470][T14194] ip_tables: iptables: counters copy to user failed while replacing table [ 534.052684][ T5610] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 534.335414][T14249] xt_hashlimit: size too large, truncated to 1048576 [ 535.854251][T14221] syzkaller0: entered promiscuous mode [ 535.854273][T14221] syzkaller0: entered allmulticast mode [ 535.972246][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'. [ 536.045219][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2919'. [ 536.145084][T14262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.988967][T14293] ip_tables: iptables: counters copy to user failed while replacing table [ 538.547273][T14323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.626321][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2936'. [ 538.628531][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 538.697832][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2937'. [ 538.697876][T14330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2937'. [ 538.699015][T14330] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 538.699038][T14330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2937'. [ 538.939323][T14338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.028984][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2941'. [ 539.283914][T14350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.704945][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2951'. [ 539.727432][T14372] ip_tables: iptables: counters copy to user failed while replacing table [ 539.972922][ T5610] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 540.020460][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2956'. [ 540.288558][T14394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.335366][T14390] syzkaller0: entered promiscuous mode [ 540.335391][T14390] syzkaller0: entered allmulticast mode [ 541.127630][T14428] __nla_validate_parse: 3 callbacks suppressed [ 541.127655][T14428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2964'. [ 543.354494][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 543.446043][T14491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.491917][T14495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2974'. [ 543.492879][T14495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2974'. [ 543.847407][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'. [ 544.159567][T14527] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2989'. [ 544.178936][T14527] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2989'. [ 544.286229][T14531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2991'. [ 544.395667][T14531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2991'. [ 544.574302][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2993'. [ 544.858816][T14555] netlink: 'syz.2.2997': attribute type 1 has an invalid length. [ 545.829364][T14591] syzkaller0: entered promiscuous mode [ 545.829394][T14591] syzkaller0: entered allmulticast mode [ 545.844337][T14588] xt_CT: No such helper "snmp" [ 545.856568][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.877475][T14591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.245048][T14615] __nla_validate_parse: 9 callbacks suppressed [ 546.245071][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3021'. [ 546.400006][T14621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3025'. [ 546.759102][T14631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.001580][T14643] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3034'. [ 547.563017][T14657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3040'. [ 547.729474][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3042'. [ 547.729502][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3042'. [ 547.729664][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3042'. [ 547.729683][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3042'. [ 547.899262][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3044'. [ 548.127867][T14674] syzkaller0: entered promiscuous mode [ 548.127895][T14674] syzkaller0: entered allmulticast mode [ 548.364677][T14684] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 548.548524][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 548.713051][T14705] netlink: 'syz.3.3060': attribute type 1 has an invalid length. [ 548.944470][T14713] tipc: Enabled bearer , priority 0 [ 548.996579][T14712] tipc: Disabling bearer [ 549.669109][T14734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.893965][T14750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.968320][T14743] syzkaller0: entered promiscuous mode [ 549.968349][T14743] syzkaller0: entered allmulticast mode [ 551.150541][ T5625] udevd[5625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 552.533813][ T5610] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 552.841467][T14792] lo: entered promiscuous mode [ 552.841654][T14792] tunl0: entered promiscuous mode [ 552.841820][T14792] gre0: entered promiscuous mode [ 552.841951][T14792] gretap0: entered promiscuous mode [ 552.842204][T14792] erspan0: entered promiscuous mode [ 552.842353][T14792] ip_vti0: entered promiscuous mode [ 552.842514][T14792] ip6_vti0: entered promiscuous mode [ 552.842641][T14792] sit0: entered promiscuous mode [ 552.842767][T14792] ip6tnl0: entered promiscuous mode [ 552.842893][T14792] ip6gre0: entered promiscuous mode [ 552.843017][T14792] syz_tun: entered promiscuous mode [ 552.843212][T14792] ip6gretap0: entered promiscuous mode [ 552.843345][T14792] bridge0: entered promiscuous mode [ 552.843486][T14792] bond0: entered promiscuous mode [ 552.843504][T14792] bond_slave_0: entered promiscuous mode [ 552.843690][T14792] bond_slave_1: entered promiscuous mode [ 552.844006][T14792] team0: entered promiscuous mode [ 552.844023][T14792] team_slave_0: entered promiscuous mode [ 552.844202][T14792] team_slave_1: entered promiscuous mode [ 552.844670][T14792] nlmon0: entered promiscuous mode [ 552.844825][T14792] batadv0: entered promiscuous mode [ 552.844982][T14792] vxcan0: entered promiscuous mode [ 552.845141][T14792] vxcan1: entered promiscuous mode [ 552.845303][T14792] veth0: entered promiscuous mode [ 552.845461][T14792] veth1: entered promiscuous mode [ 552.845615][T14792] wg0: entered promiscuous mode [ 552.845800][T14792] wg1: entered promiscuous mode [ 552.845965][T14792] wg2: entered promiscuous mode [ 552.846117][T14792] veth0_to_bridge: entered promiscuous mode [ 552.846399][T14792] veth1_to_bridge: entered promiscuous mode [ 552.846675][T14792] veth0_to_bond: entered promiscuous mode [ 552.846979][T14792] veth1_to_bond: entered promiscuous mode [ 552.847275][T14792] veth0_to_team: entered promiscuous mode [ 552.847581][T14792] veth1_to_team: entered promiscuous mode [ 552.900489][T14792] veth0_to_batadv: entered promiscuous mode [ 552.900691][T14792] batadv_slave_0: entered promiscuous mode [ 552.900863][T14792] veth1_to_batadv: entered promiscuous mode [ 552.901031][T14792] batadv_slave_1: entered promiscuous mode [ 552.901205][T14792] xfrm0: entered promiscuous mode [ 552.901366][T14792] veth0_to_hsr: entered promiscuous mode [ 552.901527][T14792] hsr_slave_0: entered promiscuous mode [ 552.908077][T14792] veth1_to_hsr: entered promiscuous mode [ 552.908308][T14792] hsr_slave_1: entered promiscuous mode [ 552.908473][T14792] veth1_virt_wifi: entered promiscuous mode [ 552.908638][T14792] veth0_virt_wifi: entered promiscuous mode [ 552.908799][T14792] virt_wifi0: entered promiscuous mode [ 552.909261][T14792] vlan0: entered promiscuous mode [ 552.909582][T14792] vlan1: entered promiscuous mode [ 552.917746][T14792] macvlan0: entered promiscuous mode [ 552.917930][T14792] macvlan1: entered promiscuous mode [ 552.918096][T14792] ipvlan0: entered promiscuous mode [ 552.918269][T14792] ipvlan1: entered promiscuous mode [ 552.918718][T14792] macvtap0: entered promiscuous mode [ 552.920599][T14792] macsec0: entered promiscuous mode [ 552.920739][T14792] geneve0: entered promiscuous mode [ 552.920905][T14792] geneve1: entered promiscuous mode [ 552.921078][T14792] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 552.921227][T14792] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 552.921364][T14792] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 552.921497][T14792] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 552.921637][T14792] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 552.921803][T14792] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 552.921984][T14792] ip6tnl1: entered promiscuous mode [ 552.925289][T14792] sit1: entered promiscuous mode [ 552.925453][T14792] macvlan2: entered promiscuous mode [ 552.925623][T14792] macvlan3: entered promiscuous mode [ 552.925810][T14792] dummy1: entered promiscuous mode [ 552.926012][T14792] gre1: entered promiscuous mode [ 552.926147][T14792] vxlan0: entered promiscuous mode [ 552.931286][T14792] bridge1: entered promiscuous mode [ 553.349345][T14811] xt_CT: No such helper "snmp" [ 554.384936][T14853] syzkaller0: entered promiscuous mode [ 554.384965][T14853] syzkaller0: entered allmulticast mode [ 555.491369][T14896] batman_adv: batadv0: Adding interface: gretap1 [ 555.491393][T14896] batman_adv: batadv0: The MTU of interface gretap1 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.528630][T14896] batman_adv: batadv0: Interface activated: gretap1 [ 555.691458][T14903] netlink: 'syz.0.3132': attribute type 1 has an invalid length. [ 555.880403][T14903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.011425][T14912] bond3: (slave geneve2): making interface the new active one [ 556.034319][T14912] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 556.053341][ T7181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.112300][ T7181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.112358][ T7181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.112407][ T7181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.599653][T14939] __nla_validate_parse: 5 callbacks suppressed [ 556.599679][T14939] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3143'. [ 556.631005][T14939] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3143'. [ 556.779176][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3146'. [ 556.779217][T14949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3146'. [ 556.828723][T14954] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3149'. [ 556.968369][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 556.968397][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 556.968564][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 556.968583][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 557.972016][T14882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.025179][T14949] netlink: 'syz.3.3146': attribute type 1 has an invalid length. [ 558.025205][T14949] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3146'. [ 559.058070][T15026] syzkaller0: entered promiscuous mode [ 559.058100][T15026] syzkaller0: entered allmulticast mode [ 559.062053][ T7181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.100748][T15026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.500876][T15038] netlink: 'syz.4.3177': attribute type 1 has an invalid length. [ 559.787264][T15044] lo: entered allmulticast mode [ 560.108700][T15058] erspan0: entered promiscuous mode [ 560.122886][T15058] dummy2: entered promiscuous mode [ 560.123074][T15058] dummy3: entered promiscuous mode [ 560.123244][T15058] netdevsim netdevsim4 eth0: entered promiscuous mode [ 560.123418][T15058] netdevsim netdevsim4 eth1: entered promiscuous mode [ 560.123587][T15058] netdevsim netdevsim4 eth2: entered promiscuous mode [ 560.123765][T15058] netdevsim netdevsim4 eth3: entered promiscuous mode [ 560.135043][T15058] bridge1: entered promiscuous mode [ 560.140465][T15058] sit1: entered promiscuous mode [ 560.200137][T15043] lo: left allmulticast mode [ 560.448127][T15073] netlink: 'syz.5.3191': attribute type 8 has an invalid length. [ 560.943691][T15097] macvlan3: entered promiscuous mode [ 560.943880][T15097] bond2: entered promiscuous mode [ 560.944206][T15097] dummy1: entered promiscuous mode [ 560.944367][T15097] macvlan4: entered promiscuous mode [ 560.950463][T15097] bridge2: entered promiscuous mode [ 560.995070][T15097] bridge3: entered promiscuous mode [ 561.028731][T15097] dummy2: entered promiscuous mode [ 561.028946][T15097] netdevsim netdevsim5 eth0: entered promiscuous mode [ 561.029125][T15097] netdevsim netdevsim5 eth1: entered promiscuous mode [ 561.029292][T15097] netdevsim netdevsim5 eth2: entered promiscuous mode [ 561.029463][T15097] netdevsim netdevsim5 eth3: entered promiscuous mode [ 561.030915][T15097] gre1: entered promiscuous mode [ 561.369395][T15101] syzkaller0: entered promiscuous mode [ 561.369422][T15101] syzkaller0: entered allmulticast mode [ 562.223976][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.492807][T15135] syzkaller0: entered promiscuous mode [ 563.492835][T15135] syzkaller0: entered allmulticast mode [ 563.615229][T15151] __nla_validate_parse: 9 callbacks suppressed [ 563.615252][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3217'. [ 563.615272][T15151] openvswitch: netlink: Message has 1 unknown bytes. [ 563.654115][T15148] gretap0: left promiscuous mode [ 563.654272][T15148] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3216'. [ 563.890912][T15157] Bluetooth: MGMT ver 1.23 [ 563.918484][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 564.201884][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 564.751642][T15181] tipc: Enabling of bearer rejected, already enabled [ 565.034566][T15184] syzkaller0: entered promiscuous mode [ 565.034596][T15184] syzkaller0: entered allmulticast mode [ 565.134720][T15194] syzkaller0: entered promiscuous mode [ 565.134749][T15194] syzkaller0: entered allmulticast mode [ 568.665508][T15196] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 568.666445][T15204] syzkaller0: entered promiscuous mode [ 568.666468][T15204] syzkaller0: entered allmulticast mode [ 568.667994][T15211] gretap0: left promiscuous mode [ 568.668132][T15211] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3235'. [ 568.986329][T15232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.154072][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3244'. [ 569.154110][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3244'. [ 569.317354][T15248] tipc: Enabling of bearer rejected, already enabled [ 569.497720][T15250] 9p: Bad value for 'wfdno' [ 570.235972][T15258] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3252'. [ 570.590485][T15270] syzkaller0: entered promiscuous mode [ 570.590514][T15270] syzkaller0: entered allmulticast mode [ 570.614746][T15270] tipc: Enabled bearer , priority 0 [ 570.638672][T15270] tipc: Resetting bearer [ 570.650655][T15269] tipc: Resetting bearer [ 570.674976][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 570.726100][T15269] tipc: Disabling bearer [ 570.750360][T15279] tipc: Enabling of bearer rejected, already enabled [ 570.912515][T15284] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 571.100351][T15295] erspan0: left promiscuous mode [ 571.100518][T15295] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3268'. [ 571.324913][T15293] syzkaller0: entered promiscuous mode [ 571.324941][T15293] syzkaller0: entered allmulticast mode [ 571.327347][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.392146][T15303] 9p: Bad value for 'wfdno' [ 571.500397][T15293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.301060][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3276'. [ 572.887482][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 572.887523][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3280'. [ 573.001145][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 573.006790][ T143] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.006851][ T143] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.006896][ T143] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.006940][ T143] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.178843][T15335] lo: entered allmulticast mode [ 573.535677][T15350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.964988][T15354] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 574.965052][T15354] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 574.965077][T15354] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 575.145153][T15359] __nla_validate_parse: 1 callbacks suppressed [ 575.145178][T15359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3290'. [ 575.373016][T15366] netlink: 'syz.5.3294': attribute type 1 has an invalid length. [ 575.373043][T15366] netlink: 'syz.5.3294': attribute type 3 has an invalid length. [ 575.373060][T15366] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3294'. [ 575.490681][T15375] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3298'. [ 575.611158][T15378] lo: left promiscuous mode [ 575.611364][T15378] tunl0: left promiscuous mode [ 575.611566][T15378] gre0: left promiscuous mode [ 575.611808][T15378] erspan0: left promiscuous mode [ 575.611936][T15378] ip_vti0: left promiscuous mode [ 575.613913][T15378] ip6_vti0: left promiscuous mode [ 575.614050][T15378] sit0: left promiscuous mode [ 575.614180][T15378] ip6tnl0: left promiscuous mode [ 575.614316][T15378] ip6gre0: left promiscuous mode [ 575.626020][T15378] syz_tun: left promiscuous mode [ 575.626191][T15378] ip6gretap0: left promiscuous mode [ 575.626329][T15378] bridge0: left promiscuous mode [ 575.626477][T15378] vcan0: left promiscuous mode [ 575.629096][T15378] bond0: left promiscuous mode [ 575.629608][T15378] team0: left promiscuous mode [ 575.636025][T15363] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 575.679202][T15378] dummy0: left promiscuous mode [ 575.685861][T15378] nlmon0: left promiscuous mode [ 575.686028][T15378] batadv0: left promiscuous mode [ 575.686188][T15378] vxcan0: left promiscuous mode [ 575.687919][T15378] vxcan1: left promiscuous mode [ 575.688232][T15378] veth1: left promiscuous mode [ 575.688397][T15378] wg0: left promiscuous mode [ 575.694676][T15378] wg1: left promiscuous mode [ 575.696445][T15378] wg2: left promiscuous mode [ 575.696606][T15378] veth1_to_bridge: left promiscuous mode [ 575.696908][T15378] veth0_to_bond: left promiscuous mode [ 575.697073][T15378] bond_slave_0: left promiscuous mode [ 575.697233][T15378] veth1_to_bond: left promiscuous mode [ 575.704685][T15378] bond_slave_1: left promiscuous mode [ 575.704862][T15378] veth0_to_team: left promiscuous mode [ 575.710169][T15378] team_slave_0: left promiscuous mode [ 575.710347][T15378] veth1_to_team: left promiscuous mode [ 575.710515][T15378] team_slave_1: left promiscuous mode [ 575.710676][T15378] veth0_to_batadv: left promiscuous mode [ 575.710838][T15378] batadv_slave_0: left promiscuous mode [ 575.710998][T15378] veth1_to_batadv: left promiscuous mode [ 575.717333][T15378] batadv_slave_1: left promiscuous mode [ 575.717509][T15378] xfrm0: left promiscuous mode [ 575.721285][T15378] veth0_to_hsr: left promiscuous mode [ 575.721620][T15378] veth1_to_hsr: left promiscuous mode [ 575.721927][T15378] hsr0: left promiscuous mode [ 575.726629][T15378] veth1_virt_wifi: left promiscuous mode [ 575.726892][T15378] veth0_virt_wifi: left promiscuous mode [ 575.727060][T15378] virt_wifi0: left promiscuous mode [ 575.738380][T15378] vlan0: left promiscuous mode [ 575.738732][T15378] vlan1: left promiscuous mode [ 575.739090][T15378] macvlan0: left promiscuous mode [ 575.739259][T15378] macvlan1: left promiscuous mode [ 575.739464][T15378] ipvlan0: left promiscuous mode [ 575.739632][T15378] ipvlan1: left promiscuous mode [ 575.754612][T15378] macvtap0: left promiscuous mode [ 575.754780][T15378] macsec0: left promiscuous mode [ 575.754912][T15378] geneve0: left promiscuous mode [ 575.755114][T15378] geneve1: left promiscuous mode [ 575.755451][T15378] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 575.762239][T15378] bond1: left promiscuous mode [ 575.762397][T15378] mac80211_hwsim hwsim14 wlan2: left promiscuous mode [ 575.763468][T15378] vxlan0: left promiscuous mode [ 575.763696][T15378] sit1: left promiscuous mode [ 575.763836][T15378] ip6tnl1: left promiscuous mode [ 575.763965][T15378] bridge1: left promiscuous mode [ 575.764109][T15378] macvlan2: left promiscuous mode [ 575.764272][T15378] vxlan1: left promiscuous mode [ 575.764425][T15378] ip6gre1: left promiscuous mode [ 575.775715][T15378] macvlan3: left promiscuous mode [ 575.775898][T15378] bond2: left promiscuous mode [ 575.775921][T15378] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 575.776398][T15378] dummy1: left promiscuous mode [ 575.776568][T15378] macvlan4: left promiscuous mode [ 575.777743][T15378] bridge2: left promiscuous mode [ 575.779174][T15378] bridge3: left promiscuous mode [ 575.779329][T15378] dummy2: left promiscuous mode [ 575.779922][T15378] netdevsim netdevsim5 eth0: left promiscuous mode [ 575.781839][T15378] netdevsim netdevsim5 eth1: left promiscuous mode [ 575.782020][T15378] netdevsim netdevsim5 eth2: left promiscuous mode [ 575.787153][T15378] netdevsim netdevsim5 eth3: left promiscuous mode [ 575.787371][T15378] gre1: left promiscuous mode [ 576.071714][T15389] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3300'. [ 576.098784][T15389] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3300'. [ 576.120648][T15394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.421725][T15418] syzkaller0: entered promiscuous mode [ 578.421748][T15418] syzkaller0: entered allmulticast mode [ 578.624072][T15434] xt_CT: No such helper "snmp" [ 578.688097][T15439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3315'. [ 578.756002][T15442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.891370][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3317'. [ 578.930830][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3317'. [ 579.766867][ T1013] tipc: Subscription rejected, illegal request [ 580.225736][T15482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.519636][T15493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3335'. [ 580.731005][T15498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3337'. [ 580.950105][ T5919] tipc: Subscription rejected, illegal request [ 581.200236][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3342'. [ 581.287225][T15507] syzkaller0: entered promiscuous mode [ 581.287273][T15507] syzkaller0: entered allmulticast mode [ 581.317132][T15507] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 581.397645][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3342'. [ 581.793828][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3348'. [ 582.020281][T15537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3352'. [ 582.207655][T15552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3354'. [ 582.367628][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 582.471779][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 584.187374][T15588] syzkaller0: entered promiscuous mode [ 584.187404][T15588] syzkaller0: entered allmulticast mode [ 584.206488][T15588] tipc: Enabled bearer , priority 0 [ 584.226848][T15588] tipc: Resetting bearer [ 584.241751][T15586] tipc: Resetting bearer [ 584.292040][T15586] tipc: Disabling bearer [ 584.627144][T15595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.213541][T15618] syzkaller0: entered promiscuous mode [ 586.213569][T15618] syzkaller0: entered allmulticast mode [ 587.108685][T15657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.821065][T15703] syzkaller0: entered promiscuous mode [ 589.821096][T15703] syzkaller0: entered allmulticast mode [ 592.511500][T15755] syzkaller0: entered promiscuous mode [ 592.511528][T15755] syzkaller0: entered allmulticast mode [ 592.727648][T15769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.844837][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3426'. [ 593.101694][T15777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 593.293427][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 593.298655][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 593.300855][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 593.309761][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 593.317643][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 593.440690][T15782] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 593.679074][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 593.968093][T15799] syzkaller0: entered promiscuous mode [ 593.968122][T15799] syzkaller0: entered allmulticast mode [ 594.068386][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 594.068415][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3440'. [ 594.068581][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 594.068600][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3440'. [ 595.429125][ T5610] Bluetooth: hci6: command tx timeout [ 596.194164][T15847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3453'. [ 596.255572][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'. [ 596.255599][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 596.255758][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'. [ 596.335776][T15844] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 597.492537][ T5610] Bluetooth: hci6: command tx timeout [ 597.524601][T15866] syzkaller0: entered promiscuous mode [ 597.524632][T15866] syzkaller0: entered allmulticast mode [ 599.348928][T15897] __nla_validate_parse: 1 callbacks suppressed [ 599.348951][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3465'. [ 599.407226][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3465'. [ 599.572435][ T5610] Bluetooth: hci6: command tx timeout [ 599.726244][T15783] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.726361][T15783] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.726509][T15783] bridge_slave_0: entered allmulticast mode [ 599.731848][T15783] bridge_slave_0: entered promiscuous mode [ 599.739759][T15908] tipc: Enabled bearer , priority 0 [ 599.753406][T15783] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.754705][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.754884][T15783] bridge_slave_1: entered allmulticast mode [ 599.759382][T15783] bridge_slave_1: entered promiscuous mode [ 599.908593][T15908] tipc: Resetting bearer [ 599.949109][T15783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.975168][T15913] syzkaller0: entered promiscuous mode [ 599.975197][T15913] syzkaller0: entered allmulticast mode [ 600.043723][T15783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.044252][T15899] tipc: Resetting bearer [ 600.134341][T15899] tipc: Disabling bearer [ 601.018771][T15920] syzkaller0: entered promiscuous mode [ 601.018800][T15920] syzkaller0: entered allmulticast mode [ 601.658970][ T5610] Bluetooth: hci6: command tx timeout [ 602.091164][T15968] FAULT_INJECTION: forcing a failure. [ 602.091164][T15968] name fail_futex, interval 1, probability 0, space 0, times 1 [ 602.091204][T15968] CPU: 1 UID: 0 PID: 15968 Comm: syz.4.3481 Not tainted syzkaller #0 PREEMPT(full) [ 602.091233][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 602.091248][T15968] Call Trace: [ 602.091258][T15968] [ 602.091269][T15968] dump_stack_lvl+0xe8/0x150 [ 602.091311][T15968] should_fail_ex+0x410/0x560 [ 602.091346][T15968] get_futex_key+0x1b4/0x1580 [ 602.091381][T15968] ? __lock_acquire+0x747/0x2de0 [ 602.091415][T15968] ? __pfx_get_futex_key+0x10/0x10 [ 602.091445][T15968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.091483][T15968] ? __cgroup_account_cputime+0xe8/0x120 [ 602.091517][T15968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.091555][T15968] futex_wait_setup+0x4a/0x590 [ 602.091603][T15968] ? __futex_wait+0xdf/0x400 [ 602.091648][T15968] __futex_wait+0x15f/0x400 [ 602.091696][T15968] ? __pfx___futex_wait+0x10/0x10 [ 602.091741][T15968] ? __pfx_futex_wake_mark+0x10/0x10 [ 602.091787][T15968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.091821][T15968] ? try_to_wake_up+0x8c5/0x14d0 [ 602.091862][T15968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.091898][T15968] futex_wait+0x121/0x390 [ 602.091942][T15968] ? __pfx_futex_wait+0x10/0x10 [ 602.091994][T15968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.092025][T15968] ? vfs_write+0x9d5/0xba0 [ 602.092071][T15968] do_futex+0x3e7/0x4e0 [ 602.092113][T15968] ? __pfx_do_futex+0x10/0x10 [ 602.092159][T15968] __se_sys_futex+0x3a8/0x450 [ 602.092199][T15968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.092229][T15968] ? ksys_write+0x242/0x270 [ 602.092268][T15968] ? __pfx___se_sys_futex+0x10/0x10 [ 602.092304][T15968] ? __pfx_ksys_write+0x10/0x10 [ 602.092350][T15968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.092380][T15968] ? __x64_sys_futex+0x21/0xf0 [ 602.092419][T15968] do_syscall_64+0x166/0x520 [ 602.092449][T15968] ? trace_irq_disable+0x3b/0x140 [ 602.092482][T15968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.092516][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.092542][T15968] RIP: 0033:0x7f9e2559e159 [ 602.092566][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.092588][T15968] RSP: 002b:00007f9e237f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 602.092615][T15968] RAX: ffffffffffffffda RBX: 00007f9e25825fa8 RCX: 00007f9e2559e159 [ 602.092635][T15968] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e25825fa8 [ 602.092652][T15968] RBP: 00007f9e25825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 602.092669][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.092686][T15968] R13: 00007f9e25826038 R14: 00007ffdcd194080 R15: 00007ffdcd194168 [ 602.092726][T15968] [ 605.506357][T15783] team0: Port device team_slave_0 added [ 605.509307][T15783] team0: Port device team_slave_1 added [ 605.711375][T15783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.711396][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.711426][T15783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.761898][T15783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.761928][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.761964][T15783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.823958][T11011] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 605.859659][T15783] hsr_slave_0: entered promiscuous mode [ 605.860931][T15783] hsr_slave_1: entered promiscuous mode [ 605.973631][T11011] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 605.974675][T11011] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 605.974702][T11011] usb 4-1: config 1 has no interface number 0 [ 605.976862][T11011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.976890][T11011] usb 4-1: Product: syz [ 605.976907][T11011] usb 4-1: Manufacturer: syz [ 605.976926][T11011] usb 4-1: SerialNumber: syz [ 606.007070][T11011] usb 4-1: 3:0 : does not exist [ 606.007096][T11011] usb 4-1: 3:0 : does not exist [ 606.129816][T15994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 606.251280][T11011] usb 4-1: USB disconnect, device number 8 [ 606.504263][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 606.957433][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 607.058414][T16018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 607.437394][T16033] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3501'. [ 607.500747][T16025] syzkaller0: entered promiscuous mode [ 607.500778][T16025] syzkaller0: entered allmulticast mode [ 607.532242][T11317] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 607.692170][T11317] usb 6-1: Using ep0 maxpacket: 8 [ 607.693089][T11317] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 607.696781][T11317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.731083][T11317] usb 6-1: config 0 descriptor?? [ 607.742477][T11317] usb 6-1: probing VID:PID(0424:012C) [ 607.744381][T11317] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 607.744414][T11317] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 607.744436][T11317] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 607.744458][T11317] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 607.783142][T11317] vub300 6-1:0.0: probe with driver vub300 failed with error -22 [ 607.804390][T16043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 610.327757][T11317] usb 6-1: USB disconnect, device number 15 [ 611.175996][T16070] netlink: 324 bytes leftover after parsing attributes in process `syz.5.3515'. [ 611.564415][T15783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 611.588338][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.590293][T16074] syzkaller0: entered promiscuous mode [ 611.590550][T16074] syzkaller0: entered allmulticast mode [ 611.645186][T15783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 611.659778][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.833552][T15783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 611.864854][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.867217][T15783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 611.888836][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.931294][T16089] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3522'. [ 611.966364][T16083] syzkaller0: entered promiscuous mode [ 611.966389][T16083] syzkaller0: entered allmulticast mode [ 612.075141][T15783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.117709][T15783] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.148158][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.148270][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.194439][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.194558][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.668067][T16099] syzkaller0: entered promiscuous mode [ 612.668175][T16099] syzkaller0: entered allmulticast mode [ 612.782725][T16114] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3528'. [ 612.906594][T16118] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 613.273405][ T5919] tipc: Subscription rejected, illegal request [ 615.250114][T16161] syzkaller0: entered promiscuous mode [ 615.250142][T16161] syzkaller0: entered allmulticast mode [ 615.481673][T16172] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3545'. [ 617.042329][T16203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.524192][T16209] loop5: detected capacity change from 0 to 512 [ 618.551376][T16209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 618.551506][T16209] System zones: 1-12 [ 618.564927][T16209] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.3556: missing EA_INODE flag [ 618.564957][T16209] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 618.565322][T16209] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3556: error while reading EA inode 12 err=-117 [ 618.565356][T16209] loop5: lost filesystem error report for type 5 error -117 [ 618.565699][T16209] EXT4-fs (loop5): 1 orphan inode deleted [ 618.635182][T16209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.637485][T16213] syzkaller0: entered promiscuous mode [ 618.637507][T16213] syzkaller0: entered allmulticast mode [ 618.640168][T16213] tipc: Enabled bearer , priority 0 [ 618.688083][T16213] tipc: Resetting bearer [ 618.882522][T16208] tipc: Resetting bearer [ 619.397306][T16208] tipc: Disabling bearer [ 619.648584][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.683283][T16226] syzkaller0: entered promiscuous mode [ 619.683312][T16226] syzkaller0: entered allmulticast mode [ 620.045849][T16235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3563'. [ 620.045891][T16235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3563'. [ 620.102460][T16242] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 620.102486][T16242] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3563'. [ 620.271117][T16247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 620.275593][T16245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.410133][T16252] netlink: 'syz.3.3569': attribute type 2 has an invalid length. [ 620.410161][T16252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3569'. [ 620.655872][T15783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.897826][T15783] veth0_vlan: entered promiscuous mode [ 620.930693][T15783] veth1_vlan: entered promiscuous mode [ 621.052474][T16267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 621.310082][T15783] veth0_macvtap: entered promiscuous mode [ 621.408934][T15783] veth1_macvtap: entered promiscuous mode [ 621.517955][T15783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.593793][T15783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.724802][ T5919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.724989][ T5919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.725036][ T5919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.783815][ T7181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.119981][T16278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3580'. [ 622.120026][T16278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 622.171339][T16281] netlink: 'syz.1.3580': attribute type 1 has an invalid length. [ 622.171367][T16281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3580'. [ 622.220180][T16283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.299083][T16287] netlink: 'syz.0.3583': attribute type 2 has an invalid length. [ 622.299110][T16287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3583'. [ 623.213062][ T7181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.213088][ T7181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.655038][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.034913][T16299] vxlan1: entered promiscuous mode [ 624.043275][T16299] sit2: entered promiscuous mode [ 624.062635][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.062685][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.062728][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.062770][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.241780][ T7181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.241804][ T7181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.402375][T16313] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 624.759931][T16325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.918816][T16331] netlink: 'syz.4.3598': attribute type 2 has an invalid length. [ 624.918844][T16331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 625.121985][T16335] loop5: detected capacity change from 0 to 512 [ 625.367303][T16335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 625.368419][T16335] System zones: 1-12 [ 625.394850][T16335] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.3599: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 625.394955][T16335] loop5: lost filesystem error report for type 5 error -117 [ 625.402116][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 625.402138][ C1] EXT4-fs (loop5): initial error at time 1789638207: ext4_xattr_inode_iget:473 [ 625.402164][ C1] EXT4-fs (loop5): last error at time 1789638207: ext4_xattr_inode_iget:473 [ 625.479823][T16335] EXT4-fs (loop5): 1 orphan inode deleted [ 625.500910][T16335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.580224][T16331] : entered promiscuous mode [ 625.595149][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.715303][T16343] syzkaller0: entered promiscuous mode [ 625.715332][T16343] syzkaller0: entered allmulticast mode [ 625.961809][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.968377][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.972838][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 625.986148][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 625.987305][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.136949][T16350] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 627.036956][T16363] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 627.561834][T16369] syzkaller0: entered promiscuous mode [ 627.561866][T16369] syzkaller0: entered allmulticast mode [ 627.860611][T16398] netlink: 'syz.4.3615': attribute type 2 has an invalid length. [ 627.860635][T16398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3615'. [ 628.136729][ T52] Bluetooth: hci0: command tx timeout [ 628.545976][T16407] Bluetooth: MGMT ver 1.23 [ 629.798046][T16383] tipc: Enabling of bearer rejected, failed to enable media [ 629.798495][T16393] syzkaller0: entered promiscuous mode [ 629.798516][T16393] syzkaller0: entered allmulticast mode [ 629.800302][T16397] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 630.213078][ T52] Bluetooth: hci0: command tx timeout [ 630.260800][T16418] netlink: 'syz.2.3619': attribute type 16 has an invalid length. [ 630.260828][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 630.389263][T16426] loop5: detected capacity change from 0 to 512 [ 630.457327][T16426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 630.457471][T16426] System zones: 1-12 [ 630.535299][T16426] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.3622: missing EA_INODE flag [ 630.541673][T16426] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 630.542102][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 630.542126][ C0] EXT4-fs (loop5): initial error at time 1789638213: ext4_xattr_inode_iget:437: inode 12 [ 630.542163][ C0] EXT4-fs (loop5): last error at time 1789638213: ext4_xattr_inode_iget:437: inode 12 [ 630.599817][T16426] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3622: error while reading EA inode 12 err=-117 [ 630.599855][T16426] loop5: lost filesystem error report for type 5 error -117 [ 630.607692][T16429] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 630.632861][T16426] EXT4-fs (loop5): 1 orphan inode deleted [ 630.659345][T16418] veth3: entered allmulticast mode [ 630.663655][T16426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.538971][T16450] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3626'. [ 631.645727][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.802777][T11011] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 631.861770][T16459] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3630'. [ 632.103108][T16460] syzkaller0: entered promiscuous mode [ 632.103139][T16460] syzkaller0: entered allmulticast mode [ 632.163498][T11011] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.164798][T11011] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.164845][T11011] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.164877][T11011] usb 5-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 632.164910][T11011] usb 5-1: config 1 interface 0 has no altsetting 0 [ 632.166127][T11011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 632.166154][T11011] usb 5-1: SerialNumber: syz [ 632.296157][ T52] Bluetooth: hci0: command tx timeout [ 632.849998][T11011] hub 5-1:1.0: bad descriptor, ignoring hub [ 632.850033][T11011] hub 5-1:1.0: probe with driver hub failed with error -5 [ 632.851083][T11011] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 632.851105][T11011] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 632.851129][T11011] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 632.888586][T11011] usb 5-1: USB disconnect, device number 8 [ 634.382430][ T52] Bluetooth: hci0: command tx timeout [ 634.478643][T16466] tipc: Enabling of bearer rejected, failed to enable media [ 634.478916][T16467] syzkaller0: entered promiscuous mode [ 634.478938][T16467] syzkaller0: entered allmulticast mode [ 634.508057][T16475] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 634.990725][T16507] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3640'. [ 635.334140][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.335108][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.335262][T16349] bridge_slave_0: entered allmulticast mode [ 635.347817][T16349] bridge_slave_0: entered promiscuous mode [ 635.358090][T16349] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.362772][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.362947][T16349] bridge_slave_1: entered allmulticast mode [ 635.387398][T16349] bridge_slave_1: entered promiscuous mode [ 635.444346][T16349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.454354][T16349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.819635][T16349] team0: Port device team_slave_0 added [ 635.846797][T16349] team0: Port device team_slave_1 added [ 635.885744][T16521] loop5: detected capacity change from 0 to 32768 [ 635.893726][T16521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3646 (16521) [ 635.929354][T16521] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 635.929390][T16521] BTRFS info (device loop5): using crc32c checksum algorithm [ 635.936602][T16525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 636.056284][T16521] BTRFS info (device loop5): enabling ssd optimizations [ 636.056316][T16521] BTRFS info (device loop5): turning on flush-on-commit [ 636.056336][T16521] BTRFS info (device loop5): enabling free space tree [ 636.056357][T16521] BTRFS info (device loop5): enabling auto defrag [ 636.056379][T16521] BTRFS info (device loop5): use lzo compression, level 1 [ 636.056403][T16521] BTRFS info (device loop5): max_inline set to 4096 [ 636.098424][T16349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.098444][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.098475][T16349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.141086][T16542] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 636.343277][T16349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.343299][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.343330][T16349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.514654][ T5616] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 637.560641][T16349] hsr_slave_0: entered promiscuous mode [ 637.575160][T16349] hsr_slave_1: entered promiscuous mode [ 637.576355][T16349] debugfs: 'hsr0' already exists in 'hsr' [ 637.576376][T16349] Cannot create hsr debugfs directory [ 637.706091][T16567] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 638.663803][T16591] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 640.696562][T16613] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3664'. [ 640.757425][T16620] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3664'. [ 641.059926][T16618] syzkaller0: entered promiscuous mode [ 641.059955][T16618] syzkaller0: entered allmulticast mode [ 641.165224][T16634] tipc: Enabling of bearer rejected, failed to enable media [ 642.310663][T16649] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3673'. [ 642.518443][T16349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.599925][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3672'. [ 642.599966][T16655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3672'. [ 642.702621][T16661] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 642.702648][T16661] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3672'. [ 642.967757][T16656] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 642.984479][T16349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.390683][T16677] loop4: detected capacity change from 0 to 512 [ 643.432015][T16349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.459660][T16677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 643.460867][T16677] System zones: 1-12 [ 643.478624][T16677] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.3678: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 643.478660][T16677] loop4: lost filesystem error report for type 5 error -117 [ 643.482113][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 643.482137][ C1] EXT4-fs (loop4): initial error at time 1789638226: ext4_xattr_inode_iget:473 [ 643.482165][ C1] EXT4-fs (loop4): last error at time 1789638226: ext4_xattr_inode_iget:473 [ 643.500805][T16677] EXT4-fs (loop4): 1 orphan inode deleted [ 643.505793][T16677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.545567][T16669] syzkaller0: entered promiscuous mode [ 643.545596][T16669] syzkaller0: entered allmulticast mode [ 643.573916][T16670] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 643.910703][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.936792][T16687] tipc: Enabled bearer , priority 0 [ 643.939648][T16687] tipc: Resetting bearer [ 644.070496][T16349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.218746][T16685] tipc: Disabling bearer [ 644.333452][T16696] loop4: detected capacity change from 0 to 64 [ 645.031675][ T31] audit: type=1800 audit(1789638227.574:16): pid=16706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3685" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 645.468210][ T31] audit: type=1800 audit(1789638228.014:17): pid=16704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3685" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 645.974168][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3689'. [ 645.974209][T16718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3689'. [ 646.050736][T16723] netlink: 'syz.2.3689': attribute type 1 has an invalid length. [ 646.050763][T16723] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3689'. [ 646.964204][T16735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.141133][T16742] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 647.176667][T16349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 647.216795][T16349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.222705][T16349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 647.260640][T16349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.269635][T16349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 647.302361][T16750] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 647.303612][T16349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.310234][T16349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 647.361836][T16349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.849228][T16349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.878776][T16781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3707'. [ 647.878809][T16781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3707'. [ 647.930254][T16783] netlink: 'syz.2.3707': attribute type 1 has an invalid length. [ 647.930276][T16783] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3707'. [ 647.946976][T16349] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.984595][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.984708][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.106348][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.106460][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.295746][T16786] syzkaller0: entered promiscuous mode [ 648.295936][T16786] syzkaller0: entered allmulticast mode [ 648.631416][T16795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 648.720075][T16349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.025104][T16810] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 649.304787][T16819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3720'. [ 649.304828][T16819] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3720'. [ 649.307223][T16819] netlink: 'syz.5.3720': attribute type 1 has an invalid length. [ 649.307245][T16819] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3720'. [ 649.958375][T16839] ip_tables: iptables: counters copy to user failed while replacing table [ 649.998410][T16349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.120386][T16349] veth0_vlan: entered promiscuous mode [ 650.137490][T16349] veth1_vlan: entered promiscuous mode [ 650.188651][T16349] veth0_macvtap: entered promiscuous mode [ 650.198986][T16349] veth1_macvtap: entered promiscuous mode [ 650.225509][T16349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.233964][T16349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.457423][T11011] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 650.792165][T11011] usb 6-1: device descriptor read/64, error -71 [ 651.105188][ T7180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.105331][ T7180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.105401][ T7180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.105510][ T7180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.402213][T11011] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 651.722157][T11011] usb 6-1: device descriptor read/64, error -71 [ 651.840359][T11011] usb usb6-port1: attempt power cycle [ 652.023253][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.023279][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.159862][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.159888][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.189934][T16861] syzkaller0: entered promiscuous mode [ 652.189961][T16861] syzkaller0: entered allmulticast mode [ 652.514733][ T32] INFO: task kworker/1:2H:5870 blocked for more than 143 seconds. [ 652.514818][ T32] Not tainted syzkaller #0 [ 652.515957][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.515999][ T32] task:kworker/1:2H state:D stack:26120 pid:5870 tgid:5870 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 652.516373][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 652.516472][ T32] Call Trace: [ 652.516509][ T32] [ 652.517443][ T32] __schedule+0x17db/0x58f0 [ 652.517765][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.517860][ T32] ? __pfx___schedule+0x10/0x10 [ 652.517982][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.518084][ T32] ? schedule+0x90/0x2b0 [ 652.518195][ T32] schedule+0x164/0x2b0 [ 652.518304][ T32] schedule_timeout+0x152/0x2c0 [ 652.518489][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 652.518583][ T32] ? __pfx_process_timeout+0x10/0x10 [ 653.212819][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.212863][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.212891][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.212920][ T32] ? prepare_to_wait_event+0x436/0x480 [ 653.212965][ T32] nbd_queue_rq+0x96f/0xff0 [ 653.213008][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 653.213042][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 653.213079][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 653.213118][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 653.213163][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.213193][ T32] ? sbitmap_get+0x229/0x390 [ 653.213272][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 653.213304][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 653.213342][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 653.213398][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 653.213432][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.213462][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 653.213503][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.213532][ T32] ? lock_acquire+0x115/0x350 [ 653.213563][ T32] ? process_scheduled_works+0x97a/0x1630 [ 653.213603][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 653.213638][ T32] ? blk_mq_run_work_fn+0x144/0x300 [ 653.213673][ T32] blk_mq_run_work_fn+0x16c/0x300 [ 653.213710][ T32] ? process_scheduled_works+0x97a/0x1630 [ 653.213744][ T32] process_scheduled_works+0xc3d/0x1630 [ 653.213778][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.213843][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 653.213884][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.213914][ T32] ? assign_work+0x3cf/0x5d0 [ 653.213954][ T32] worker_thread+0xa47/0xfb0 [ 653.213992][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.214039][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.214068][ T32] ? __kthread_parkme+0x71/0x1f0 [ 653.214120][ T32] kthread+0x38b/0x480 [ 653.214146][ T32] ? __pfx_worker_thread+0x10/0x10 [ 653.217967][T11011] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 653.218096][ T32] ? __pfx_kthread+0x10/0x10 [ 653.218128][ T32] ret_from_fork+0x514/0xb70 [ 653.218157][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 653.218181][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.218279][ T32] ? __switch_to+0xc89/0x1420 [ 653.218318][ T32] ? __pfx_kthread+0x10/0x10 [ 653.218345][ T32] ret_from_fork_asm+0x1a/0x30 [ 653.218402][ T32] [ 653.218479][ T32] [ 653.218479][ T32] Showing all locks held in the system: [ 653.218493][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 653.218511][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 653.218582][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 653.218599][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 653.218665][ T32] locks held by kworker/u8:6/143: 3, on CPU#1: [ 653.218683][ T32] #0: ffff888032408140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.218751][ T32] #1: ffffc90002ddfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.218821][ T32] #2: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 653.219074][ T32] locks held by getty/5361: 2, on CPU#1: [ 653.219093][ T32] #0: ffff8880325e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 653.219168][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 653.219314][ T32] locks held by udevd/5621: 1, on CPU#1: [ 653.219332][ T32] #0: ffff888026d48350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 653.219407][ T32] locks held by kworker/1:2H/5870: 4, on CPU#1: [ 653.219424][ T32] #0: ffff88801eac7940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.219493][ T32] #1: ffffc90004f87c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.219566][ T32] #2: ffff888026da2e98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 653.219635][ T32] #3: ffff888046947178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 653.225694][ T32] locks held by kworker/u8:22/7181: 3, on CPU#0: [ 653.225715][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.225789][ T32] #1: ffffc900066cfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.225861][ T32] #2: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 653.225950][ T32] locks held by kworker/1:12/11011: 5, on CPU#1: [ 653.225969][ T32] #0: ffff88802228e540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.226085][ T32] #1: ffffc9000e0dfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.226156][ T32] #2: ffff888029a901d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 653.226221][ T32] #3: ffff888029a94568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 653.226287][ T32] #4: ffff888029954560 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 653.226354][ T32] locks held by kworker/1:15/11014: 2, last CPU#1: [ 653.226372][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.226443][ T32] #1: ffffc9000d9a7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.226513][ T32] locks held by kworker/0:13/11314: 3, last CPU#0: [ 653.226532][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.226602][ T32] #1: ffffc90005cf7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 653.226672][ T32] #2: ffff888029eea250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 653.226781][ T32] locks held by syz-executor/16349: 1, last CPU#1: [ 653.226799][ T32] #0: ffff88805319d5a8 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 653.226881][ T32] locks held by syz.5.3728/16843: 2, last CPU#1: [ 653.226899][ T32] #0: ffff88807e6c1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 653.226971][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 653.227047][ T32] locks held by syz.2.3731/16858: 1, last CPU#1: [ 653.227066][ T32] #0: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 653.238291][ T32] locks held by syz.4.3733/16869: 1, last CPU#1: [ 653.238344][ T32] #0: ffff8880261005f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 653.238424][ T32] locks held by syz.3.3735/16867: 1, last CPU#1: [ 653.238442][ T32] #0: ffff8880256220a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x350/0x1bb0 [ 653.238533][ T32] [ 653.238540][ T32] ============================================= [ 653.238540][ T32] [ 653.238551][ T32] NMI backtrace for cpu 1 [ 653.238571][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 653.238601][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 653.238616][ T32] Call Trace: [ 653.238625][ T32] [ 653.238635][ T32] dump_stack_lvl+0xe8/0x150 [ 653.238674][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 653.238712][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.238755][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 653.238796][ T32] sys_info+0x135/0x170 [ 653.238829][ T32] watchdog+0xfd7/0x1030 [ 653.238863][ T32] ? watchdog+0x1c7/0x1030 [ 653.238896][ T32] kthread+0x38b/0x480 [ 653.238922][ T32] ? __pfx_watchdog+0x10/0x10 [ 653.238945][ T32] ? __pfx_kthread+0x10/0x10 [ 653.238971][ T32] ret_from_fork+0x514/0xb70 [ 653.239000][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 653.239024][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.239052][ T32] ? __switch_to+0xc89/0x1420 [ 653.239091][ T32] ? __pfx_kthread+0x10/0x10 [ 653.239117][ T32] ret_from_fork_asm+0x1a/0x30 [ 653.239174][ T32] [ 653.239264][ T32] Sending NMI from CPU 1 to CPUs 0: [ 653.239290][ C0] NMI backtrace for cpu 0 [ 653.239304][ C0] CPU: 0 UID: 0 PID: 16862 Comm: syz.4.3733 Not tainted syzkaller #0 PREEMPT(full) [ 653.239329][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 653.239343][ C0] RIP: 0033:0x7f9e2546e4f0 [ 653.239364][ C0] Code: c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 66 0f 1f 44 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 <73> 3e 48 89 33 48 89 c6 48 83 c3 08 48 89 08 48 8b 0b 48 8b 55 00 [ 653.239384][ C0] RSP: 002b:00007ffdcd194060 EFLAGS: 00000287 [ 653.239406][ C0] RAX: 00007f9e24cfa770 RBX: 00007f9e24cfa758 RCX: ffffffff851a6a59 [ 653.239423][ C0] RDX: ffffffff851a6a59 RSI: ffffffff851a6a59 RDI: 00007f9e24cfa760 [ 653.239441][ C0] RBP: 00007f9e24cfa700 R08: 00007f9e25810000 R09: 00007f9e25826128 [ 653.239458][ C0] R10: 0000000000000001 R11: 000000000000000a R12: 00007f9e24cfa7c8 [ 653.239472][ C0] R13: 0000000000000013 R14: 0000000000000019 R15: 0000000000000001 [ 653.239487][ C0] FS: 00005555745af500 GS: 0000000000000000 [ 653.240492][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 654.184528][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 654.193630][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 654.203676][ T32] Call Trace: [ 654.206968][ T32] [ 654.209891][ T32] vpanic+0x56d/0xa60 [ 654.213880][ T32] ? __pfx___schedule+0x10/0x10 [ 654.218729][ T32] ? __pfx_vpanic+0x10/0x10 [ 654.223240][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.228878][ T32] panic+0xc5/0xd0 [ 654.232601][ T32] ? __pfx_panic+0x10/0x10 [ 654.237017][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 654.242474][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 654.247859][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 654.254026][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 654.260192][ T32] watchdog+0x1030/0x1030 [ 654.264525][ T32] ? watchdog+0x1c7/0x1030 [ 654.268943][ T32] kthread+0x38b/0x480 [ 654.273019][ T32] ? __pfx_watchdog+0x10/0x10 [ 654.277690][ T32] ? __pfx_kthread+0x10/0x10 [ 654.282272][ T32] ret_from_fork+0x514/0xb70 [ 654.286855][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 654.291953][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.297586][ T32] ? __switch_to+0xc89/0x1420 [ 654.302280][ T32] ? __pfx_kthread+0x10/0x10 [ 654.306865][ T32] ret_from_fork_asm+0x1a/0x30 [ 654.311676][ T32] [ 654.314885][ T32] Kernel Offset: disabled [ 654.319223][ T32] Rebooting in 86400 seconds..