last executing test programs: 4m5.876193479s ago: executing program 3 (id=1428): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 4m4.204393728s ago: executing program 3 (id=1442): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x1, 0xb}, {0xe, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0xfffffff9, 0x80000001, 0x80, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x48090) 4m2.94027807s ago: executing program 3 (id=1446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="150004000400000003030000918a76e1efa19e9105"], 0x44}}, 0x0) 4m2.266118639s ago: executing program 3 (id=1454): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x44c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x3e68, 0x0, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8081, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x405, 0xb, 0x5, 0xbfc3, 0x3, 0x8, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x1ff, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x7e, 0x6, 0xfffffff2, 0x2b1f, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x3ff, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x0, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x44c}}, 0x0) 4m2.013130926s ago: executing program 3 (id=1457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 4m1.814352856s ago: executing program 3 (id=1460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000866b00000044ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3m46.705557781s ago: executing program 32 (id=1460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000866b00000044ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 12.269911961s ago: executing program 0 (id=3751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) 11.562292405s ago: executing program 4 (id=3757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x4808) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}}, 0x4000000) 10.379107769s ago: executing program 0 (id=3759): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf", @ANYRES32, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 10.199316019s ago: executing program 4 (id=3760): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000004000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10.003058045s ago: executing program 4 (id=3761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000001c0)=@arm64) 9.902175824s ago: executing program 0 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x2, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0xb}], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @netfilter=0xcfe790add3798f2b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x10001, 0xd33}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x2, 0x7, 0x5}, {0x4, 0x1, 0xe, 0x3}, {0x4, 0x5, 0x0, 0x9}, {0x0, 0x4, 0x4, 0x4}, {0x4, 0x5, 0x3, 0x4}, {0x2, 0x1, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x7}, {0x5, 0x1, 0xc, 0xa}, {0x1, 0x3, 0x3, 0x9}], 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa", 0x47}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) poll(&(0x7f0000000040)=[{r3, 0x4020}], 0x1, 0x8) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3f000000010000", 0x7) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 9.881857877s ago: executing program 5 (id=3763): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r3], 0x44}}, 0x0) 8.909171299s ago: executing program 5 (id=3765): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x149a82, 0x10) write$cgroup_int(r0, 0x0, 0x0) 8.84767707s ago: executing program 0 (id=3766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) shutdown(r4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req={0x400, 0x3, 0xac2, 0x7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 8.828536796s ago: executing program 2 (id=3767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x64000600) 8.81506238s ago: executing program 4 (id=3768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) 8.710032154s ago: executing program 1 (id=3769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) 8.652421429s ago: executing program 5 (id=3770): bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r4, 0x0) 8.470912324s ago: executing program 1 (id=3771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000004000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 7.140492852s ago: executing program 1 (id=3772): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf", @ANYRES32, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 7.125994672s ago: executing program 4 (id=3773): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 6.931530837s ago: executing program 5 (id=3774): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) read$FUSE(r5, &(0x7f0000001680)={0x2020}, 0x2020) setgroups(0x1, &(0x7f0000000000)=[0x0]) getgid() 5.867517149s ago: executing program 0 (id=3775): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r3], 0x44}}, 0x0) 5.625170468s ago: executing program 1 (id=3776): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x2, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0xb}], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @netfilter=0xcfe790add3798f2b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x10001, 0xd33}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x2, 0x7, 0x5}, {0x4, 0x1, 0xe, 0x3}, {0x4, 0x5, 0x0, 0x9}, {0x0, 0x4, 0x4, 0x4}, {0x4, 0x5, 0x3, 0x4}, {0x2, 0x1, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x7}, {0x5, 0x1, 0xc, 0xa}, {0x1, 0x3, 0x3, 0x9}], 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa", 0x47}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) poll(&(0x7f0000000040)=[{r3, 0x4020}], 0x1, 0x8) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3f000000010000", 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 5.395679861s ago: executing program 2 (id=3777): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="090100001800000008000a0084"], 0x30}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) 5.155869613s ago: executing program 0 (id=3778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000001c0)=@arm64) 5.108614731s ago: executing program 1 (id=3779): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x23b, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 4.981961635s ago: executing program 2 (id=3780): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x149a82, 0x10) write$cgroup_int(r0, 0x0, 0x0) 4.825465822s ago: executing program 2 (id=3781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) 4.675537834s ago: executing program 2 (id=3782): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r5, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7c, 0x10, 0x0, {0x3, 0x6, 0x4030cf82, 0x1, 0x8, 0x4, 0x80000000, 0x8, 0xe26, 0x2000, 0xfffffffe, 0x0, 0x0, 0xd8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r9, 0x0, 0x2) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl(r9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.527730302s ago: executing program 5 (id=3783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) 3.313558236s ago: executing program 4 (id=3784): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000001640), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x36}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) 1.494870914s ago: executing program 5 (id=3785): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000580)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfeca4f2bf5c6c8d40f7a", 0xf}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 1.026496679s ago: executing program 1 (id=3786): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf", @ANYRES32, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 0s ago: executing program 2 (id=3787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="66b9800000c00f326635008200000f3066b98804000066b89d6800006a17580000000000300fc76c000f224466b9800000c00f3266350100000066b85100000066ba0000000f3066b82d006600d3d3ba000000000f30f0281dba4000b006ee67dad5660f3880360400", 0x69}], 0x1, 0x40, 0x0, 0x14) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fe8000/0x1000)=nil) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x10, 0x800000008, 0x4, 0x2, 0x4000000000005e, 0x9, 0xfffffffffffffffd, 0x200005, 0xa, 0x0, 0x8, 0x4, 0x80000100962, 0x8, 0xc, 0x8], 0x100000, 0x132d0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): ] audit: type=1107 audit(1767681178.985:1138): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 202.492497][ T37] audit: type=1326 audit(1767681179.295:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8889 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb07f749 code=0x7ffc0000 [ 202.492838][ T37] audit: type=1326 audit(1767681179.295:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8889 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dcb07f749 code=0x7ffc0000 [ 202.513090][ T37] audit: type=1326 audit(1767681179.305:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8889 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb07f749 code=0x7ffc0000 [ 203.786516][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.813326][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.817862][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.819328][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.820193][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.089151][ T8936] wg1 speed is unknown, defaulting to 1000 [ 204.127096][ T8936] lo speed is unknown, defaulting to 1000 [ 204.404354][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1353'. [ 204.740308][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 204.740329][ T37] audit: type=1326 audit(1767681181.545:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 204.740544][ T37] audit: type=1326 audit(1767681181.545:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 204.757402][ T37] audit: type=1326 audit(1767681181.555:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 204.757465][ T37] audit: type=1326 audit(1767681181.555:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 204.757513][ T37] audit: type=1326 audit(1767681181.555:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 204.803158][ T37] audit: type=1326 audit(1767681181.615:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 204.803214][ T37] audit: type=1326 audit(1767681181.615:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40e15ef783 code=0x7ffc0000 [ 205.298370][ T37] audit: type=1326 audit(1767681182.105:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f40e15ef807 code=0x7ffc0000 [ 205.299401][ T37] audit: type=1326 audit(1767681182.105:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f40e15a6bdd code=0x7ffc0000 [ 205.299881][ T37] audit: type=1326 audit(1767681182.105:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f40e1623e89 code=0x7ffc0000 [ 205.511955][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1359'. [ 205.908215][ T6554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.943880][ T5806] Bluetooth: hci5: command tx timeout [ 205.997107][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1366'. [ 206.212028][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1374'. [ 206.212054][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 206.414815][ T6554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.456921][ T8936] chnl_net:caif_netlink_parms(): no params data found [ 206.790302][ T6554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.238962][ T6554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.300633][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'. [ 207.480182][ T9037] vlan2: entered allmulticast mode [ 208.013083][ T5806] Bluetooth: hci5: command tx timeout [ 208.082247][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.082824][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.084080][ T8936] bridge_slave_0: entered allmulticast mode [ 208.087087][ T8936] bridge_slave_0: entered promiscuous mode [ 208.143295][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.144210][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.144435][ T8936] bridge_slave_1: entered allmulticast mode [ 208.148565][ T8936] bridge_slave_1: entered promiscuous mode [ 209.287293][ T9075] wg1 speed is unknown, defaulting to 1000 [ 209.289426][ T9075] lo speed is unknown, defaulting to 1000 [ 209.374035][ T9078] geneve2: entered promiscuous mode [ 209.374067][ T9078] geneve2: entered allmulticast mode [ 209.764393][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.768794][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.933670][ T6554] bridge_slave_1: left allmulticast mode [ 209.933903][ T6554] bridge_slave_1: left promiscuous mode [ 209.936953][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.004798][ T6554] bridge_slave_0: left allmulticast mode [ 210.004830][ T6554] bridge_slave_0: left promiscuous mode [ 210.005119][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.093161][ T5806] Bluetooth: hci5: command tx timeout [ 210.642431][ T37] kauditd_printk_skb: 173 callbacks suppressed [ 210.642450][ T37] audit: type=1326 audit(1767681187.445:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.654311][ T37] audit: type=1326 audit(1767681187.455:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.658668][ T37] audit: type=1326 audit(1767681187.465:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.662362][ T37] audit: type=1326 audit(1767681187.465:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.667096][ T37] audit: type=1326 audit(1767681187.475:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.668718][ T37] audit: type=1326 audit(1767681187.475:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.668840][ T37] audit: type=1326 audit(1767681187.475:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.670086][ T37] audit: type=1326 audit(1767681187.475:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 210.670790][ T37] audit: type=1326 audit(1767681187.475:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 211.853992][ T6554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.913892][ T6554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.936319][ T6554] bond0 (unregistering): Released all slaves [ 212.083841][ T9105] batadv0: entered promiscuous mode [ 212.088390][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.151577][ T9126] tipc: Enabling of bearer rejected, failed to enable media [ 212.165270][ T8936] team0: Port device team_slave_0 added [ 212.169120][ T8936] team0: Port device team_slave_1 added [ 212.173313][ T5806] Bluetooth: hci5: command tx timeout [ 214.810381][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 214.810419][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 214.959240][ T37] audit: type=1326 audit(1767681191.765:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 214.965062][ T9168] wg1 speed is unknown, defaulting to 1000 [ 214.972124][ T9168] lo speed is unknown, defaulting to 1000 [ 215.274418][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.274436][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.274464][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.706495][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 215.790264][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.790282][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.790310][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.101416][ T6554] hsr_slave_0: left promiscuous mode [ 216.133588][ T6554] hsr_slave_1: left promiscuous mode [ 216.134801][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.134990][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.205188][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.205218][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.271756][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 216.326624][ T6554] veth0_macvtap: left promiscuous mode [ 216.326953][ T6554] veth1_vlan: left promiscuous mode [ 216.327804][ T6554] veth0_vlan: left promiscuous mode [ 216.816407][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 218.183842][ T6554] team0 (unregistering): Port device team_slave_1 removed [ 218.364806][ T6554] team0 (unregistering): Port device team_slave_0 removed [ 220.378236][ T9220] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 220.378281][ T9220] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 220.378302][ T9220] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 220.528116][ T9222] syzkaller0: entered promiscuous mode [ 220.528145][ T9222] syzkaller0: entered allmulticast mode [ 221.937903][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 221.939944][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 221.940217][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 231.509586][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.525570][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.527315][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.528506][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.529767][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.881948][ T9249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1471'. [ 231.971389][ T8936] hsr_slave_0: entered promiscuous mode [ 231.983559][ T8936] hsr_slave_1: entered promiscuous mode [ 231.984816][ T8936] debugfs: 'hsr0' already exists in 'hsr' [ 231.984841][ T8936] Cannot create hsr debugfs directory [ 231.985638][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1472'. [ 232.388260][ T9246] wg1 speed is unknown, defaulting to 1000 [ 232.811428][ T9246] lo speed is unknown, defaulting to 1000 [ 233.034289][ T9276] siw: device registration error -23 [ 233.792613][ T9275] wg1 speed is unknown, defaulting to 1000 [ 233.795440][ T9275] lo speed is unknown, defaulting to 1000 [ 233.876912][ T5116] Bluetooth: hci4: command tx timeout [ 235.382858][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 235.390228][ T37] audit: type=1326 audit(1767681212.185:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.390293][ T37] audit: type=1326 audit(1767681212.195:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.439168][ T37] audit: type=1326 audit(1767681212.245:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.439511][ T37] audit: type=1326 audit(1767681212.245:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.439561][ T37] audit: type=1326 audit(1767681212.245:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f686f02df90 code=0x7ffc0000 [ 235.440129][ T37] audit: type=1326 audit(1767681212.245:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.440564][ T37] audit: type=1326 audit(1767681212.245:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.440763][ T37] audit: type=1326 audit(1767681212.245:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.440953][ T37] audit: type=1326 audit(1767681212.245:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.441132][ T37] audit: type=1326 audit(1767681212.245:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9289 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 235.933172][ T5116] Bluetooth: hci4: command tx timeout [ 236.138587][ T9300] PID 9300 killed due to inadequate hugepage pool [ 237.968080][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 238.013375][ T5116] Bluetooth: hci4: command tx timeout [ 239.003178][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 240.071824][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.072046][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.072262][ T9246] bridge_slave_0: entered allmulticast mode [ 240.093228][ T5116] Bluetooth: hci4: command tx timeout [ 240.107336][ T9381] fuse: Bad value for 'fd' [ 240.108808][ T9246] bridge_slave_0: entered promiscuous mode [ 240.156890][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.157174][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.157754][ T9246] bridge_slave_1: entered allmulticast mode [ 240.172729][ T9246] bridge_slave_1: entered promiscuous mode [ 240.407852][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 240.905335][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.938208][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 240.938228][ T37] audit: type=1326 audit(1767681217.745:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.4.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 240.938279][ T37] audit: type=1326 audit(1767681217.745:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.4.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 240.938326][ T37] audit: type=1326 audit(1767681217.745:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.4.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 240.938372][ T37] audit: type=1326 audit(1767681217.745:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.4.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 240.938418][ T37] audit: type=1326 audit(1767681217.745:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.4.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 241.069732][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.138090][ T9411] fuse: Bad value for 'fd' [ 241.378301][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1538'. [ 241.453323][ T805] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 60 sec [ 241.597421][ T9246] team0: Port device team_slave_0 added [ 241.601722][ T9246] team0: Port device team_slave_1 added [ 241.804262][ T8936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.006560][ T8936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.166537][ T6554] bridge_slave_1: left allmulticast mode [ 242.166566][ T6554] bridge_slave_1: left promiscuous mode [ 242.166825][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.224665][ T6554] bridge_slave_0: left allmulticast mode [ 242.224695][ T6554] bridge_slave_0: left promiscuous mode [ 242.224984][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.768686][ T9449] netlink: 'syz.4.1552': attribute type 39 has an invalid length. [ 244.253720][ T6554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.334194][ T6554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.375507][ T6554] bond0 (unregistering): Released all slaves [ 244.414192][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.414205][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.414225][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.415713][ T8936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.767283][ T9461] batadv_slave_0: entered promiscuous mode [ 244.799948][ T9471] bridge0: port 4(ipvlan2) entered blocking state [ 244.800780][ T9471] bridge0: port 4(ipvlan2) entered disabled state [ 244.800924][ T9471] ipvlan2: entered allmulticast mode [ 244.800935][ T9471] bridge0: entered allmulticast mode [ 244.829636][ T9471] ipvlan2: left allmulticast mode [ 244.829699][ T9471] bridge0: left allmulticast mode [ 244.944595][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.944613][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.944641][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.945366][ T8936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.109147][ T9479] netlink: 'syz.0.1566': attribute type 13 has an invalid length. [ 245.487367][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.505403][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.052686][ T9503] fuse: Bad value for 'fd' [ 246.287717][ T9479] veth1_macvtap: left allmulticast mode [ 246.308509][ T9511] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1577'. [ 246.315998][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 246.772374][ T9479] macsec0: left allmulticast mode [ 246.772394][ T9479] macsec0: left promiscuous mode [ 246.871112][ T8031] lo speed is unknown, defaulting to 1000 [ 246.871235][ T8031] syz2: Port: 1 Link DOWN [ 246.950244][ T9511] bridge_slave_1: left allmulticast mode [ 246.950274][ T9511] bridge_slave_1: left promiscuous mode [ 246.950717][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.066232][ T9511] bridge_slave_0: left allmulticast mode [ 247.066254][ T9511] bridge_slave_0: left promiscuous mode [ 247.066478][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.329658][ T3597] tipc: Subscription rejected, illegal request [ 247.413483][ T71] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.581543][ T9539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1589'. [ 247.648296][ T71] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.837452][ T71] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.008065][ T71] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.040531][ T9246] hsr_slave_0: entered promiscuous mode [ 248.060017][ T9246] hsr_slave_1: entered promiscuous mode [ 248.064279][ T9246] debugfs: 'hsr0' already exists in 'hsr' [ 248.064354][ T9246] Cannot create hsr debugfs directory [ 248.335688][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1602'. [ 248.385280][ T6554] hsr_slave_0: left promiscuous mode [ 248.423216][ T6554] hsr_slave_1: left promiscuous mode [ 250.007973][ T37] audit: type=1326 audit(1767681226.815:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.010142][ T37] audit: type=1326 audit(1767681226.815:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.011268][ T37] audit: type=1326 audit(1767681226.815:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.011622][ T37] audit: type=1326 audit(1767681226.815:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.011670][ T37] audit: type=1326 audit(1767681226.815:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.012629][ T37] audit: type=1326 audit(1767681226.815:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.053028][ T37] audit: type=1326 audit(1767681226.815:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.100882][ T37] audit: type=1326 audit(1767681226.875:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.101037][ T37] audit: type=1326 audit(1767681226.875:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.101165][ T37] audit: type=1326 audit(1767681226.875:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f686f02f749 code=0x7ffc0000 [ 250.833750][ T6554] team0 (unregistering): Port device team_slave_1 removed [ 251.065011][ T6554] team0 (unregistering): Port device team_slave_0 removed [ 253.336593][ T9578] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 253.462643][ T9618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.509193][ T9619] vlan2: entered allmulticast mode [ 253.509210][ T9619] bond1: entered allmulticast mode [ 254.005714][ T9641] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1636'. [ 254.036599][ T9641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.211550][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 255.067630][ T9649] team0 (unregistering): Port device team_slave_0 removed [ 255.107303][ T9649] team0 (unregistering): Port device team_slave_1 removed [ 255.568863][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 255.823527][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 255.823545][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 255.990719][ T6554] IPVS: stop unused estimator thread 0... [ 256.303505][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.357150][ T9246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.448319][ T9246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.511221][ T9246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.569133][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.581231][ T9246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.640970][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.652373][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.682028][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.693800][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.783319][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034777400: rx timeout, send abort [ 257.089381][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.142338][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.171412][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.171650][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.216910][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.217513][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.288137][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034777400: abort rx timeout. Force session deactivation [ 257.290231][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034777c00: rx timeout, send abort [ 257.790325][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034777c00: abort rx timeout. Force session deactivation [ 257.871560][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.044459][ T8936] veth0_vlan: entered promiscuous mode [ 258.052846][ T8936] veth1_vlan: entered promiscuous mode [ 258.262298][ T8936] veth0_macvtap: entered promiscuous mode [ 258.286134][ T8936] veth1_macvtap: entered promiscuous mode [ 258.313642][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.418444][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.446740][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.530435][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.530838][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.562448][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.578201][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.654702][ T37] kauditd_printk_skb: 62 callbacks suppressed [ 258.654723][ T37] audit: type=1326 audit(1767681235.465:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.654855][ T37] audit: type=1326 audit(1767681235.465:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.656293][ T37] audit: type=1326 audit(1767681235.465:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.658167][ T37] audit: type=1326 audit(1767681235.465:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.658320][ T37] audit: type=1326 audit(1767681235.465:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.686826][ T37] audit: type=1326 audit(1767681235.485:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.686883][ T37] audit: type=1326 audit(1767681235.485:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.686925][ T37] audit: type=1326 audit(1767681235.485:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.686971][ T37] audit: type=1326 audit(1767681235.495:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 258.687019][ T37] audit: type=1326 audit(1767681235.495:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 259.253378][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 259.314296][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.314318][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.674340][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.674374][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.837416][ T9246] veth0_vlan: entered promiscuous mode [ 259.895880][ T9246] veth1_vlan: entered promiscuous mode [ 259.952052][ T9246] veth0_macvtap: entered promiscuous mode [ 259.967326][ T9246] veth1_macvtap: entered promiscuous mode [ 260.074860][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.107984][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 260.208868][ T9804] netlink: 'syz.1.1697': attribute type 39 has an invalid length. [ 260.229518][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.541052][ T3545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.542083][ T3545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.576155][ T3545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.581156][ T3545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.820649][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.820744][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.899131][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 261.220472][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.220494][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.320360][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.320381][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.404393][ T9849] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1716'. [ 261.570854][ T9857] netlink: 'syz.1.1720': attribute type 13 has an invalid length. [ 261.894491][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.895787][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.417140][ T9857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.447975][ T9857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.579007][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.594102][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.623466][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.623519][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.811420][ T9898] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1736'. [ 264.021347][ T9911] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 264.076065][ T9911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.229803][ T9913] bond1: (slave veth7): Enslaving as an active interface with a down link [ 264.286698][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 264.289531][ T9911] bond1: (slave batadv4): making interface the new active one [ 264.291111][ T9911] batadv4: entered promiscuous mode [ 264.312372][ T9911] bond1: (slave batadv4): Enslaving as an active interface with an up link [ 264.424888][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 264.424916][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.466109][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.776741][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1746'. [ 264.913587][ T9931] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1750'. [ 265.223605][ T5806] Bluetooth: hci3: command 0x1003 tx timeout [ 265.223960][ T5116] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 266.050250][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 266.687037][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'. [ 267.008889][T10032] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1799'. [ 267.516898][T10054] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1810'. [ 267.745071][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 268.402797][T10099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1832'. [ 268.469348][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'. [ 269.114819][T10127] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 269.844074][T10153] __nla_validate_parse: 3 callbacks suppressed [ 269.844096][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1857'. [ 269.927113][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1857'. [ 269.927183][T10152] bond1: option mode: unable to set because the bond device is up [ 269.996110][T10152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.063218][T10152] bond1: (slave macvlan2): making interface the new active one [ 270.063246][T10152] macvlan2: entered allmulticast mode [ 270.063266][T10152] bond0: entered allmulticast mode [ 270.063289][T10152] bond_slave_0: entered allmulticast mode [ 270.063314][T10152] bond_slave_1: entered allmulticast mode [ 270.065716][T10152] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 270.295544][T10165] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1862'. [ 270.484150][T10174] bond0: (slave bond_slave_0): Releasing backup interface [ 270.663221][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 271.047039][T10174] bond0: (slave bond_slave_1): Releasing backup interface [ 271.232701][T10174] team0: Port device team_slave_0 removed [ 271.303349][T10174] team0: Port device team_slave_1 removed [ 271.307773][T10174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.307804][T10174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.362220][T10174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.362251][T10174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.427875][ T5876] wg1 speed is unknown, defaulting to 1000 [ 271.474723][T10184] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 271.474772][T10184] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 271.474793][T10184] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 271.664847][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 272.269217][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 272.713786][T10251] netlink: 'syz.5.1899': attribute type 3 has an invalid length. [ 272.874372][T10256] netlink: 'syz.5.1903': attribute type 39 has an invalid length. [ 273.193175][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.201462][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.459396][T10280] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.502372][T10289] netlink: 'syz.4.1916': attribute type 3 has an invalid length. [ 273.945187][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 274.107252][T10317] netlink: 'syz.4.1929': attribute type 3 has an invalid length. [ 275.615293][ T6554] batadv4: left promiscuous mode [ 276.326003][T10405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'. [ 277.578906][T10415] wg1 speed is unknown, defaulting to 1000 [ 277.581851][T10415] lo speed is unknown, defaulting to 1000 [ 277.590020][T10410] siw: device registration error -23 [ 277.824102][T10422] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1970'. [ 277.952317][T10421] netlink: 'syz.4.1972': attribute type 3 has an invalid length. [ 278.413959][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1980'. [ 278.767442][T10459] smc: net device gre0 applied user defined pnetid SYZ1 [ 278.794735][T10459] smc: net device gre0 erased user defined pnetid SYZ1 [ 278.970028][T10463] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1986'. [ 279.148173][T10469] netlink: 'syz.1.1987': attribute type 39 has an invalid length. [ 279.245615][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 279.245633][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 279.317165][ T3467] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.321946][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 279.321970][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 279.326037][ T3467] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.326163][ T3467] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.326260][ T3467] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.501893][T10484] bridge0: port 3(macsec0) entered blocking state [ 279.502083][T10484] bridge0: port 3(macsec0) entered disabled state [ 279.517274][T10484] macsec0: entered allmulticast mode [ 279.517291][T10484] veth1_macvtap: entered allmulticast mode [ 279.521803][T10484] macsec0: entered promiscuous mode [ 279.628805][T10489] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1998'. [ 279.869727][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'. [ 280.747490][ T3467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.747759][ T3467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.747801][ T3467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.747840][ T3467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.495913][T10568] __nla_validate_parse: 5 callbacks suppressed [ 281.495936][T10568] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2023'. [ 281.588510][T10572] netlink: 'syz.5.2025': attribute type 39 has an invalid length. [ 281.855226][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 282.271511][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 282.363159][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 283.206186][T10656] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2065'. [ 284.089492][T10692] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2077'. [ 284.118087][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 284.118111][T10692] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2077'. [ 284.118130][T10692] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2077'. [ 284.136585][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 284.325627][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f25bc00: rx timeout, send abort [ 284.527400][T10705] netlink: 'syz.4.2082': attribute type 39 has an invalid length. [ 284.825707][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f25bc00: abort rx timeout. Force session deactivation [ 284.825858][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f25b000: rx timeout, send abort [ 285.211430][T10737] warning: `syz.1.2097' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.325937][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f25b000: abort rx timeout. Force session deactivation [ 285.819962][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f596c00: rx timeout, send abort [ 286.320036][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f596c00: abort rx timeout. Force session deactivation [ 286.320720][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f595000: rx timeout, send abort [ 286.605733][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 286.820789][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f595000: abort rx timeout. Force session deactivation [ 287.012004][T10824] netlink: 'syz.1.2137': attribute type 3 has an invalid length. [ 287.254580][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2143'. [ 287.254617][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2143'. [ 287.254634][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2143'. [ 287.286101][T10820] lo: entered allmulticast mode [ 287.303795][T10820] tunl0: entered allmulticast mode [ 287.340526][T10820] gre0: entered allmulticast mode [ 287.396921][T10820] gretap0: entered allmulticast mode [ 287.453890][T10820] erspan0: entered allmulticast mode [ 287.478046][T10820] ip_vti0: entered allmulticast mode [ 287.482465][T10820] ip6_vti0: entered allmulticast mode [ 287.500037][T10820] sit0: entered allmulticast mode [ 287.520971][T10820] ip6tnl0: entered allmulticast mode [ 287.532246][T10820] ip6gre0: entered allmulticast mode [ 287.566766][T10820] syz_tun: entered allmulticast mode [ 287.603981][T10820] ip6gretap0: entered allmulticast mode [ 287.616377][T10820] bridge0: entered allmulticast mode [ 287.622430][T10820] vcan0: entered allmulticast mode [ 287.656918][T10820] bond0: entered allmulticast mode [ 287.656942][T10820] bond_slave_0: entered allmulticast mode [ 287.656961][T10820] bond_slave_1: entered allmulticast mode [ 287.720391][T10820] team0: entered allmulticast mode [ 287.720414][T10820] team_slave_0: entered allmulticast mode [ 287.720433][T10820] team_slave_1: entered allmulticast mode [ 287.747951][T10820] dummy0: entered allmulticast mode [ 287.813325][T10820] nlmon0: entered allmulticast mode [ 287.816436][T10820] caif0: entered allmulticast mode [ 287.817185][T10820] batadv0: entered allmulticast mode [ 287.833160][T10820] vxcan0: entered allmulticast mode [ 287.848112][T10820] vxcan1: entered allmulticast mode [ 287.860285][T10820] veth0: entered allmulticast mode [ 287.880644][T10820] veth1: entered allmulticast mode [ 288.014733][T10820] wg0: entered allmulticast mode [ 288.113300][T10820] wg1: entered allmulticast mode [ 288.193402][T10820] wg2: entered allmulticast mode [ 288.197041][T10820] veth0_to_bridge: entered allmulticast mode [ 288.217905][T10820] veth1_to_bridge: entered allmulticast mode [ 288.236317][T10820] veth0_to_bond: entered allmulticast mode [ 288.242691][T10820] veth1_to_bond: entered allmulticast mode [ 288.259333][T10820] veth0_to_team: entered allmulticast mode [ 288.274094][T10820] veth1_to_team: entered allmulticast mode [ 288.295064][T10820] veth0_to_batadv: entered allmulticast mode [ 288.300982][T10820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.301706][T10820] batadv_slave_0: entered allmulticast mode [ 288.326168][T10820] veth1_to_batadv: entered allmulticast mode [ 288.332239][T10820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.361152][T10820] batadv_slave_1: entered allmulticast mode [ 288.375541][T10820] xfrm0: entered allmulticast mode [ 288.380729][T10820] veth0_to_hsr: entered allmulticast mode [ 288.400050][T10820] hsr_slave_0: entered allmulticast mode [ 288.407987][T10820] veth1_to_hsr: entered allmulticast mode [ 288.417937][T10820] hsr_slave_1: entered allmulticast mode [ 288.433877][T10820] hsr0: entered allmulticast mode [ 288.442002][T10820] veth1_virt_wifi: entered allmulticast mode [ 288.459649][T10820] veth0_virt_wifi: entered allmulticast mode [ 288.474143][T10820] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 288.475386][T10820] veth1_vlan: entered allmulticast mode [ 288.497515][T10820] veth0_vlan: entered allmulticast mode [ 288.527416][T10820] vlan0: entered allmulticast mode [ 288.527591][T10820] vlan1: entered allmulticast mode [ 288.576902][T10820] macvlan0: entered allmulticast mode [ 288.613168][T10820] macvlan1: entered allmulticast mode [ 288.619218][T10820] ipvlan0: entered allmulticast mode [ 288.619431][T10820] ipvlan1: entered allmulticast mode [ 288.644173][T10820] veth0_macvtap: entered allmulticast mode [ 288.723147][T10820] macvtap0: entered allmulticast mode [ 288.823209][T10820] geneve0: entered allmulticast mode [ 288.913433][T10820] geneve1: entered allmulticast mode [ 288.977476][T10820] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 289.053248][T10820] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 289.136868][T10820] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 289.253386][T10820] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 289.397246][T10820] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 289.521058][T10820] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 289.608763][T10820] vxlan0: entered allmulticast mode [ 289.646355][ T1129] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.646394][ T1129] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.646709][ T1129] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.646739][ T1129] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.646778][ T1129] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.646805][ T1129] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.646843][ T1129] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.646871][ T1129] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.214551][T10891] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2166'. [ 290.327855][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2169'. [ 290.327895][T10897] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2169'. [ 290.791399][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.448943][T10944] netlink: 'syz.5.2192': attribute type 10 has an invalid length. [ 291.457511][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.470793][T10944] bridge_slave_1: left allmulticast mode [ 291.470825][T10944] bridge_slave_1: left promiscuous mode [ 291.471107][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.542245][T10944] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 292.268438][T10979] netlink: 'syz.1.2207': attribute type 10 has an invalid length. [ 292.350448][T10979] bridge_slave_1: left allmulticast mode [ 292.350489][T10979] bridge_slave_1: left promiscuous mode [ 292.350762][T10979] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.445269][T10979] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 293.057851][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2222'. [ 293.113083][T11013] netlink: 'syz.0.2221': attribute type 10 has an invalid length. [ 293.192321][T11013] bridge_slave_1: left allmulticast mode [ 293.192343][T11013] bridge_slave_1: left promiscuous mode [ 293.192562][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.300509][T11013] bridge_slave_1: entered allmulticast mode [ 293.301232][T11013] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 293.535199][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2230'. [ 293.795695][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 293.800918][T11042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2237'. [ 294.231641][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 294.409026][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 294.450246][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2253'. [ 295.741640][T11147] syzkaller0: entered promiscuous mode [ 295.741669][T11147] syzkaller0: entered allmulticast mode [ 296.519590][T11188] netlink: 'syz.5.2297': attribute type 10 has an invalid length. [ 296.754239][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ef45c00: rx timeout, send abort [ 297.254324][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ef45c00: abort rx timeout. Force session deactivation [ 297.254469][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ef46400: rx timeout, send abort [ 297.754770][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ef46400: abort rx timeout. Force session deactivation [ 298.213722][T11263] netlink: 'syz.0.2328': attribute type 39 has an invalid length. [ 299.000650][T11289] wg1 speed is unknown, defaulting to 1000 [ 299.003537][T11289] lo speed is unknown, defaulting to 1000 [ 299.008584][T11300] siw: device registration error -23 [ 299.625444][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 299.625483][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 299.920309][T11326] netlink: 'syz.2.2353': attribute type 39 has an invalid length. [ 300.087088][T11330] wg1 speed is unknown, defaulting to 1000 [ 300.089890][T11330] lo speed is unknown, defaulting to 1000 [ 301.126695][T11379] siw: device registration error -23 [ 301.182077][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 301.190845][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 301.247297][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 301.247337][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 301.546033][T11378] wg1 speed is unknown, defaulting to 1000 [ 301.584254][T11382] bond2: entered promiscuous mode [ 301.584699][T11382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.585273][T11378] lo speed is unknown, defaulting to 1000 [ 301.771430][T11385] bond2: (slave xfrm1): refused to change device type [ 302.182287][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 302.500472][T11413] wg1 speed is unknown, defaulting to 1000 [ 302.503339][T11413] lo speed is unknown, defaulting to 1000 [ 303.108816][T11437] netlink: 'syz.4.2394': attribute type 39 has an invalid length. [ 303.412778][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 304.193875][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2411'. [ 304.646861][T11498] netlink: 'syz.1.2415': attribute type 39 has an invalid length. [ 305.045333][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 305.139749][T11517] syzkaller0: entered promiscuous mode [ 305.139778][T11517] syzkaller0: entered allmulticast mode [ 305.833758][T11545] netlink: 'syz.2.2433': attribute type 39 has an invalid length. [ 306.038842][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 306.416490][T11573] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2443'. [ 306.416537][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2443'. [ 306.639407][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 306.666926][T11581] netlink: 'syz.4.2447': attribute type 39 has an invalid length. [ 306.777693][ T3467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.777969][ T3467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.778031][ T3467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.778070][ T3467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.443826][T11612] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2462'. [ 307.494247][T11612] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2462'. [ 307.582264][T11616] netlink: 'syz.1.2463': attribute type 39 has an invalid length. [ 308.533348][T11645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2475'. [ 308.600656][T11647] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2475'. [ 308.763476][T11653] siw: device registration error -23 [ 308.777357][T11654] netlink: 'syz.2.2476': attribute type 39 has an invalid length. [ 309.073776][T11646] wg1 speed is unknown, defaulting to 1000 [ 309.076581][T11646] lo speed is unknown, defaulting to 1000 [ 309.689569][T11682] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2489'. [ 310.348821][T11697] netlink: 'syz.1.2495': attribute type 39 has an invalid length. [ 310.392267][T11701] __nla_validate_parse: 1 callbacks suppressed [ 310.392289][T11701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2497'. [ 310.757135][T11711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2501'. [ 310.822003][T11713] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2501'. [ 312.125477][T11750] batadv_slave_0: entered promiscuous mode [ 312.158171][T11750] batman_adv: batadv0: Adding interface: macsec1 [ 312.158197][T11750] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.158228][T11750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.158245][T11750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.158260][T11750] batman_adv: batadv0: Interface activated: macsec1 [ 312.584398][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 313.191057][T11779] siw: device registration error -23 [ 313.276419][T11776] wg1 speed is unknown, defaulting to 1000 [ 313.290334][T11776] lo speed is unknown, defaulting to 1000 [ 314.015959][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 316.650455][T11859] wg1 speed is unknown, defaulting to 1000 [ 316.673017][T11859] lo speed is unknown, defaulting to 1000 [ 316.677063][T11860] siw: device registration error -23 [ 316.964829][T11848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.240702][T11883] netlink: 'syz.1.2571': attribute type 5 has an invalid length. [ 318.398795][T11889] tipc: Enabling of bearer rejected, failed to enable media [ 320.012823][T11933] wg1 speed is unknown, defaulting to 1000 [ 320.021983][T11933] lo speed is unknown, defaulting to 1000 [ 320.084614][T11939] siw: device registration error -23 [ 320.209485][T11934] wg1 speed is unknown, defaulting to 1000 [ 320.363049][T11934] lo speed is unknown, defaulting to 1000 [ 320.652509][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2594'. [ 322.259578][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.259638][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.388273][T12013] netlink: 'syz.2.2617': attribute type 10 has an invalid length. [ 322.388585][T12013] bridge_slave_1: left allmulticast mode [ 322.388614][T12013] bridge_slave_1: left promiscuous mode [ 322.388873][T12013] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.504192][T12013] bridge_slave_1: entered allmulticast mode [ 322.504665][T12013] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 323.605320][T12063] siw: device registration error -23 [ 323.835995][T12058] wg1 speed is unknown, defaulting to 1000 [ 323.861578][T12058] lo speed is unknown, defaulting to 1000 [ 324.866373][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 325.634384][T12127] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2658'. [ 325.903554][T12141] netlink: 'syz.5.2662': attribute type 10 has an invalid length. [ 326.060629][T12145] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 326.182285][T12146] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 326.592330][T12171] netlink: 'syz.2.2677': attribute type 10 has an invalid length. [ 326.905869][T12185] geneve2: entered promiscuous mode [ 326.928125][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.931371][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.931441][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.931482][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.077441][T12189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2684'. [ 327.532824][T12210] netlink: 'syz.1.2691': attribute type 10 has an invalid length. [ 327.835855][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 327.835902][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 329.460749][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 329.795398][T12286] 8021q: VLANs not supported on gre0 [ 330.558497][T12326] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2744'. [ 330.968636][ T37] kauditd_printk_skb: 110 callbacks suppressed [ 330.968656][ T37] audit: type=1326 audit(1767681307.775:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12341 comm="syz.1.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 330.969724][ T37] audit: type=1326 audit(1767681307.775:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12341 comm="syz.1.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 330.970014][ T37] audit: type=1326 audit(1767681307.775:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12341 comm="syz.1.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 331.061441][ T37] audit: type=1326 audit(1767681307.775:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12341 comm="syz.1.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 331.633869][T12377] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2761'. [ 332.760444][T12421] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2778'. [ 333.798323][T12463] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2791'. [ 334.556580][T12480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.747283][T12503] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2806'. [ 334.826633][T12480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.119098][T12480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.488964][T12480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.709136][T12536] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2818'. [ 335.892067][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.023741][ T6554] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.066496][ T1129] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.122413][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.134164][T12591] netlink: 'syz.2.2842': attribute type 10 has an invalid length. [ 338.349417][T12629] netlink: 'syz.0.2857': attribute type 10 has an invalid length. [ 338.603582][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2860'. [ 338.781942][T12643] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2860'. [ 338.993398][T12643] bond3 (unregistering): Released all slaves [ 339.432680][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2878'. [ 339.450774][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2878'. [ 339.450802][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2878'. [ 339.450830][T12675] netlink: 'syz.5.2878': attribute type 7 has an invalid length. [ 340.021824][ T37] audit: type=1326 audit(1767681316.825:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.023551][ T37] audit: type=1326 audit(1767681316.835:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.030757][ T37] audit: type=1326 audit(1767681316.835:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.033334][ T37] audit: type=1326 audit(1767681316.845:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.034833][ T37] audit: type=1326 audit(1767681316.845:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.035233][ T37] audit: type=1326 audit(1767681316.845:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.035515][ T37] audit: type=1326 audit(1767681316.845:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.035786][ T37] audit: type=1326 audit(1767681316.845:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.036146][ T37] audit: type=1326 audit(1767681316.845:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.036847][ T37] audit: type=1326 audit(1767681316.845:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12701 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 340.346261][T12711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2893'. [ 340.852169][T12739] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2906'. [ 341.495827][T12764] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2918'. [ 341.930995][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2928'. [ 341.976005][T12789] netlink: 'syz.0.2929': attribute type 10 has an invalid length. [ 342.063527][T12793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2930'. [ 342.539531][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.557261][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.558501][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.560120][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.560889][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.634388][T12811] bridge_slave_0: left allmulticast mode [ 342.634421][T12811] bridge_slave_0: left promiscuous mode [ 342.634779][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.768432][T12811] bond0: (slave bridge_slave_1): Releasing backup interface [ 342.833796][T12811] bond0: (slave bond_slave_0): Releasing backup interface [ 342.855279][T12824] netlink: 'syz.4.2942': attribute type 10 has an invalid length. [ 342.911805][T12811] bond0: (slave bond_slave_1): Releasing backup interface [ 342.958820][T12811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.025693][T12830] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 343.169816][T12824] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 343.599957][T12812] wg1 speed is unknown, defaulting to 1000 [ 343.679960][T12812] lo speed is unknown, defaulting to 1000 [ 344.102130][T12812] chnl_net:caif_netlink_parms(): no params data found [ 344.304512][T12861] __nla_validate_parse: 7 callbacks suppressed [ 344.304534][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2952'. [ 344.361476][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 344.573244][ T5806] Bluetooth: hci3: command tx timeout [ 344.575873][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.576100][T12812] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.576367][T12812] bridge_slave_0: entered allmulticast mode [ 344.579110][T12812] bridge_slave_0: entered promiscuous mode [ 344.639985][T12879] netlink: 'syz.4.2955': attribute type 10 has an invalid length. [ 344.680124][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.682431][T12812] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.682635][T12812] bridge_slave_1: entered allmulticast mode [ 344.704344][T12812] bridge_slave_1: entered promiscuous mode [ 344.802731][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2957'. [ 344.894118][T12888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2957'. [ 344.908378][T12884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.043978][T12881] netlink: 'syz.5.2956': attribute type 1 has an invalid length. [ 345.135776][T12888] bond1: entered allmulticast mode [ 345.179285][T12884] dummy0: entered allmulticast mode [ 345.179810][T12884] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 345.200791][T12812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.242551][T12812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.599791][T12812] team0: Port device team_slave_0 added [ 345.608519][T12812] team0: Port device team_slave_1 added [ 345.900516][T12812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.900536][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.900565][T12812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.950077][T12812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.950096][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.950126][T12812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.167126][T12919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2970'. [ 346.277050][T12812] hsr_slave_0: entered promiscuous mode [ 346.279834][T12812] hsr_slave_1: entered promiscuous mode [ 346.280513][T12812] debugfs: 'hsr0' already exists in 'hsr' [ 346.280531][T12812] Cannot create hsr debugfs directory [ 346.358655][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 346.358694][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2972'. [ 346.409344][ T3545] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.544192][ T3545] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.544323][ T3545] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.544367][ T3545] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.656842][ T5806] Bluetooth: hci3: command tx timeout [ 347.003365][T12951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2982'. [ 347.229474][T12812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.526218][T12812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.695735][T12812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.703078][T12981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2994'. [ 347.839113][T12812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.888240][T12990] siw: device registration error -23 [ 348.087601][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 348.240067][T12812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.277348][T12812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.317646][T12812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.351675][T12812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.511820][T13016] batman_adv: batadv0: Adding interface: macsec1 [ 348.511841][T13016] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.512274][T13016] batman_adv: batadv0: Interface activated: macsec1 [ 348.733192][ T5806] Bluetooth: hci3: command tx timeout [ 348.818421][T12812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.847776][T12812] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.871100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.883540][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.891850][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.925937][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.763461][T12812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.896526][T12812] veth0_vlan: entered promiscuous mode [ 349.917678][T12812] veth1_vlan: entered promiscuous mode [ 350.041849][T12812] veth0_macvtap: entered promiscuous mode [ 350.069261][T12812] veth1_macvtap: entered promiscuous mode [ 350.178411][T12812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.240766][T12812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.308875][ T3597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.311404][ T3597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.319077][ T3597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.326263][ T991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.637769][T13081] __nla_validate_parse: 1 callbacks suppressed [ 350.637793][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3031'. [ 350.815068][ T5806] Bluetooth: hci3: command tx timeout [ 350.947173][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.947196][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.069878][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.069902][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.470793][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 351.470815][ T37] audit: type=1326 audit(1767681328.275:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.471927][ T37] audit: type=1326 audit(1767681328.275:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.472412][ T37] audit: type=1326 audit(1767681328.275:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.546467][ T37] audit: type=1326 audit(1767681328.355:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.546716][ T37] audit: type=1326 audit(1767681328.355:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.548529][ T37] audit: type=1326 audit(1767681328.355:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.565612][ T37] audit: type=1326 audit(1767681328.375:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.583275][ T37] audit: type=1326 audit(1767681328.375:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.583341][ T37] audit: type=1326 audit(1767681328.375:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 351.583387][ T37] audit: type=1326 audit(1767681328.375:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13093 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a894f749 code=0x7ffc0000 [ 352.707132][T13118] wg1 speed is unknown, defaulting to 1000 [ 352.710540][T13118] lo speed is unknown, defaulting to 1000 [ 353.367629][T13140] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3051'. [ 353.367670][T13140] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3051'. [ 355.018755][T13215] bridge_slave_0: left promiscuous mode [ 355.019085][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.146008][T13215] bond0: (slave bridge_slave_1): Releasing backup interface [ 355.184665][T13215] bridge_slave_1: left allmulticast mode [ 355.208237][T13215] bond0: (slave bond_slave_0): Releasing backup interface [ 355.263919][T13215] bond0: (slave bond_slave_1): Releasing backup interface [ 355.345258][T13215] team0: Port device team_slave_0 removed [ 355.364167][T13215] team0: Port device team_slave_1 removed [ 355.364659][T13215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.404825][T13215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.424207][T13215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.220500][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.258489][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.259870][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.261019][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.261763][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.454304][T13250] wg1 speed is unknown, defaulting to 1000 [ 356.468183][T13250] lo speed is unknown, defaulting to 1000 [ 357.051558][ T5806] block nbd0: Receive control failed (result -32) [ 357.186489][T13250] chnl_net:caif_netlink_parms(): no params data found [ 357.370667][ T71] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.939565][ T71] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.110295][ T71] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.256308][T13300] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3110'. [ 358.333357][ T5806] Bluetooth: hci0: command tx timeout [ 358.449464][ T71] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.490882][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.491122][T13250] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.491398][T13250] bridge_slave_0: entered allmulticast mode [ 358.517235][T13250] bridge_slave_0: entered promiscuous mode [ 358.535192][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.540537][T13250] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.540815][T13250] bridge_slave_1: entered allmulticast mode [ 358.567762][T13250] bridge_slave_1: entered promiscuous mode [ 358.899573][T13250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.900101][T13321] syzkaller0: entered promiscuous mode [ 358.900130][T13321] syzkaller0: entered allmulticast mode [ 358.929946][T13250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.489031][T13344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3123'. [ 359.506634][T13326] syzkaller0: entered promiscuous mode [ 359.506789][T13326] syzkaller0: entered allmulticast mode [ 359.683325][T13250] team0: Port device team_slave_0 added [ 360.155435][T13250] team0: Port device team_slave_1 added [ 360.416793][ T5806] Bluetooth: hci0: command tx timeout [ 360.434186][T13370] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3133'. [ 360.506265][T13250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.506286][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.506316][T13250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.565568][T13250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.565589][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.565622][T13250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.830558][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 360.878154][ T71] batadv1: left allmulticast mode [ 360.878189][ T71] batadv1: left promiscuous mode [ 360.878513][ T71] bridge0: port 3(batadv1) entered disabled state [ 361.605704][T13391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3141'. [ 362.503170][ T5806] Bluetooth: hci0: command tx timeout [ 363.467644][ T71] bond0 (unregistering): Released all slaves [ 364.344116][ T71] bond1 (unregistering): (slave veth7): Releasing active interface [ 364.344300][ T71] batadv4: entered promiscuous mode [ 364.434139][ T71] bond1 (unregistering): (slave batadv4): Releasing active interface [ 364.486195][ T71] bond1 (unregistering): Released all slaves [ 364.583261][ T5806] Bluetooth: hci0: command tx timeout [ 364.788207][T13250] hsr_slave_0: entered promiscuous mode [ 364.800427][T13250] hsr_slave_1: entered promiscuous mode [ 364.809050][T13250] debugfs: 'hsr0' already exists in 'hsr' [ 364.809082][T13250] Cannot create hsr debugfs directory [ 365.138684][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 365.138704][ T37] audit: type=1326 audit(1767681341.945:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192303][ T37] audit: type=1326 audit(1767681341.945:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192360][ T37] audit: type=1326 audit(1767681341.945:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192405][ T37] audit: type=1326 audit(1767681341.945:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192450][ T37] audit: type=1326 audit(1767681341.945:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192496][ T37] audit: type=1326 audit(1767681341.945:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192686][ T37] audit: type=1326 audit(1767681341.945:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192720][ T37] audit: type=1326 audit(1767681341.945:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192753][ T37] audit: type=1326 audit(1767681341.945:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.192785][ T37] audit: type=1326 audit(1767681341.945:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13402 comm="syz.0.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71eff749 code=0x7ffc0000 [ 365.887282][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3151'. [ 366.527086][ T71] batman_adv: batadv0: Interface deactivated: macsec1 [ 366.527118][ T71] batman_adv: batadv0: Removing interface: macsec1 [ 366.703043][ T71] hsr_slave_0: left promiscuous mode [ 366.744485][ T71] hsr_slave_1: left promiscuous mode [ 373.249708][ T10] wg1 speed is unknown, defaulting to 1000 [ 373.249750][ T10] syz0: Port: 1 Link DOWN [ 373.249753][ T1129] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.307293][ T1129] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.345614][ T1129] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.345712][ T1129] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.762144][T13484] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3174'. [ 374.256292][T13498] netlink: 'syz.2.3179': attribute type 29 has an invalid length. [ 374.330231][T13509] wg1 speed is unknown, defaulting to 1000 [ 374.341303][T13509] lo speed is unknown, defaulting to 1000 [ 375.263091][T13530] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3186'. [ 375.686197][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3191'. [ 376.025841][T13250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.192680][T13250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.263875][T13250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.412420][T13250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.880991][T13539] wg1 speed is unknown, defaulting to 1000 [ 376.916294][T13539] lo speed is unknown, defaulting to 1000 [ 376.948823][T13576] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3198'. [ 377.122344][T13582] batadv_slave_0: entered promiscuous mode [ 377.139494][T13582] batman_adv: batadv0: Adding interface: macsec1 [ 377.139513][T13582] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.139544][T13582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.139563][T13582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.139579][T13582] batman_adv: batadv0: Interface activated: macsec1 [ 377.249265][T13250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.460477][T13250] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.488394][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.488653][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.535400][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.535622][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.509696][T13250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.795554][T13623] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3209'. [ 378.883438][T13250] veth0_vlan: entered promiscuous mode [ 378.891674][T13250] veth1_vlan: entered promiscuous mode [ 378.935325][T13628] lo: left allmulticast mode [ 378.966594][T13628] tunl0: left allmulticast mode [ 378.967343][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3212'. [ 378.968601][T13628] gre0: left allmulticast mode [ 378.996961][T13628] gretap0: left allmulticast mode [ 378.999544][T13628] erspan0: left allmulticast mode [ 379.001758][T13628] ip_vti0: left allmulticast mode [ 379.029491][T13628] ip6_vti0: left allmulticast mode [ 379.032758][T13628] sit0: left allmulticast mode [ 379.123405][T13628] ip6tnl0: left allmulticast mode [ 379.125863][T13628] ip6gre0: left allmulticast mode [ 379.128006][T13628] ip6gretap0: left allmulticast mode [ 379.132064][T13628] bridge0: left allmulticast mode [ 379.185881][T13628] vcan0: left allmulticast mode [ 379.253949][T13628] bond0: left allmulticast mode [ 379.256088][T13628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.257224][T13628] team0: left allmulticast mode [ 379.258175][T13628] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.259222][T13628] dummy0: left allmulticast mode [ 379.309621][T13628] nlmon0: left allmulticast mode [ 379.328438][T13642] Bluetooth: MGMT ver 1.23 [ 379.333050][T13628] caif0: left allmulticast mode [ 379.333074][T13628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.569909][T13250] veth0_macvtap: entered promiscuous mode [ 379.594172][T13250] veth1_macvtap: entered promiscuous mode [ 379.726654][T13250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.808385][T13250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.890440][ T1129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.891820][ T1129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.892298][ T1129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.921659][ T1129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.101437][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 380.227396][T13670] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3222'. [ 380.654080][T13679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3224'. [ 380.657291][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.657314][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.881129][ T6554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.881152][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.621155][T13718] fuse: Invalid rootmode [ 382.012715][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3241'. [ 382.012743][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3241'. [ 382.012776][T13732] netlink: 'syz.4.3241': attribute type 13 has an invalid length. [ 382.446231][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 382.446383][ T37] audit: type=1326 audit(1767681359.255:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.446443][ T37] audit: type=1326 audit(1767681359.255:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.446573][ T37] audit: type=1326 audit(1767681359.255:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.452002][ T37] audit: type=1326 audit(1767681359.255:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.452468][ T37] audit: type=1326 audit(1767681359.255:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.656456][ T37] audit: type=1326 audit(1767681359.465:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.656794][ T37] audit: type=1326 audit(1767681359.465:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.657095][ T37] audit: type=1326 audit(1767681359.465:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.657417][ T37] audit: type=1326 audit(1767681359.465:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 382.657707][ T37] audit: type=1326 audit(1767681359.465:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13744 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e15ef749 code=0x7ffc0000 [ 383.009588][T13757] fuse: Bad value for 'rootmode' [ 383.248990][T13738] mpoa:mpoad_close: () going down [ 383.344819][T13768] syzkaller0: entered promiscuous mode [ 383.344847][T13768] syzkaller0: entered allmulticast mode [ 383.407296][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 383.716510][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.967491][T13794] netlink: 'syz.2.3264': attribute type 3 has an invalid length. [ 384.124135][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3270'. [ 384.466028][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3277'. [ 384.530125][T13825] netlink: 'syz.2.3280': attribute type 3 has an invalid length. [ 384.541680][T13821] nbd: must specify at least one socket [ 384.681795][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3282'. [ 384.840388][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 384.840417][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3287'. [ 385.031704][T13845] netlink: 'syz.5.3291': attribute type 3 has an invalid length. [ 385.196333][T13852] nbd: must specify at least one socket [ 385.199225][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3293'. [ 385.338934][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'. [ 385.963306][T13883] netlink: 'syz.2.3304': attribute type 3 has an invalid length. [ 386.111840][T13889] nbd: must specify at least one socket [ 386.337768][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3309'. [ 386.443463][T13902] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3310'. [ 386.448358][T13902] block nbd0: reconnected socket [ 386.448380][T13902] nbd: socks must be embedded in a SOCK_ITEM attr [ 386.480383][ T5806] block nbd0: Receive control failed (result -32) [ 386.657872][T13910] geneve2: entered promiscuous mode [ 386.753640][T13912] bridge_slave_0: left allmulticast mode [ 386.753674][T13912] bridge_slave_0: left promiscuous mode [ 386.753963][T13912] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.824164][T13917] netlink: 'syz.1.3317': attribute type 3 has an invalid length. [ 386.936982][T13912] bond0: (slave bridge_slave_1): Releasing backup interface [ 386.975202][T13912] bond0: (slave bond_slave_0): Releasing backup interface [ 387.045941][T13912] bond0: (slave bond_slave_1): Releasing backup interface [ 387.129257][ T5806] block nbd1: Receive control failed (result -32) [ 387.193926][T13930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 387.204000][T13912] team0: Port device team_slave_0 removed [ 387.285836][T13912] team0: Port device team_slave_1 removed [ 387.305495][T13912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.305531][T13912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.361612][T13912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.361649][T13912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.421973][T13912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.396464][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.401677][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.422432][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.438012][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.439192][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.479220][T13961] netlink: 'syz.0.3329': attribute type 3 has an invalid length. [ 388.558586][T13959] wg1 speed is unknown, defaulting to 1000 [ 388.561269][T13959] lo speed is unknown, defaulting to 1000 [ 389.394591][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 389.394613][ T37] audit: type=1326 audit(1767681366.195:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13987 comm="syz.2.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 389.398003][ T37] audit: type=1326 audit(1767681366.205:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13987 comm="syz.2.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 389.398342][ T37] audit: type=1326 audit(1767681366.205:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13987 comm="syz.2.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 389.453828][ T37] audit: type=1326 audit(1767681366.205:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13987 comm="syz.2.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 389.551300][ T37] audit: type=1326 audit(1767681366.355:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13987 comm="syz.2.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 389.551368][ T37] audit: type=1326 audit(1767681366.355:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13987 comm="syz.2.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 389.586167][ T37] audit: type=1326 audit(1767681366.365:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13987 comm="syz.2.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150503f749 code=0x7ffc0000 [ 389.744140][T13959] chnl_net:caif_netlink_parms(): no params data found [ 389.984959][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3344'. [ 390.493072][ T5806] Bluetooth: hci1: command tx timeout [ 390.683312][T14034] nbd: must specify a size in bytes for the device [ 390.710873][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.711103][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.711387][T13959] bridge_slave_0: entered allmulticast mode [ 390.738621][T13959] bridge_slave_0: entered promiscuous mode [ 390.756836][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.760299][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.760611][T13959] bridge_slave_1: entered allmulticast mode [ 390.787880][T13959] bridge_slave_1: entered promiscuous mode [ 390.918772][T14040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3357'. [ 391.004013][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3360'. [ 391.004045][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3360'. [ 391.117908][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.160453][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.346269][T14058] netlink: 'syz.2.3362': attribute type 39 has an invalid length. [ 391.430897][T14061] nbd: must specify a size in bytes for the device [ 391.613413][T13959] team0: Port device team_slave_0 added [ 391.620119][T13959] team0: Port device team_slave_1 added [ 391.636209][T14070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3370'. [ 391.789386][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 391.789414][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 391.789444][T14075] netlink: 'syz.1.3372': attribute type 13 has an invalid length. [ 391.826944][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3369'. [ 392.438010][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.438030][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.438061][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.440718][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.440737][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.440767][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.574233][ T5806] Bluetooth: hci1: command tx timeout [ 392.964208][T14103] netlink: 'syz.0.3380': attribute type 39 has an invalid length. [ 393.389652][T13959] hsr_slave_0: entered promiscuous mode [ 393.392251][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3383'. [ 393.392279][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'. [ 393.423912][T13959] hsr_slave_1: entered promiscuous mode [ 394.653035][ T5806] Bluetooth: hci1: command tx timeout [ 395.059097][T14171] __nla_validate_parse: 5 callbacks suppressed [ 395.059113][T14171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3407'. [ 395.059125][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'. [ 395.746340][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3415'. [ 395.972174][T14195] tipc: Started in network mode [ 395.972210][T14195] tipc: Node identity 361e2cc9a829, cluster identity 4711 [ 396.025145][T14195] tipc: Enabled bearer , priority 0 [ 396.025581][T14198] syzkaller0: entered promiscuous mode [ 396.025606][T14198] syzkaller0: entered allmulticast mode [ 396.191134][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3420'. [ 396.317416][T14195] tipc: Resetting bearer [ 396.483625][T14194] tipc: Resetting bearer [ 396.610013][T14218] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3427'. [ 396.634125][T14194] tipc: Disabling bearer [ 396.736573][ T5806] Bluetooth: hci1: command tx timeout [ 396.887495][T13959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.942285][T13959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.182630][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 397.213517][T13959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.334052][T13959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.394918][T14233] netlink: 'syz.1.3435': attribute type 1 has an invalid length. [ 397.394941][T14233] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3435'. [ 397.573884][T14244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3439'. [ 397.650315][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 398.085328][T13959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.118640][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 398.175690][T13959] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.196159][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.208945][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.254940][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.255092][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.498728][T14276] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 399.129524][T13959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.374122][T14310] fuse: Unknown parameter '0x0000000000000004' [ 399.473393][T14312] netlink: 'syz.5.3464': attribute type 1 has an invalid length. [ 400.484260][T14342] fuse: Unknown parameter '0x0000000000000004' [ 400.584059][T13959] veth0_vlan: entered promiscuous mode [ 400.688067][T13959] veth1_vlan: entered promiscuous mode [ 400.818417][T14347] __nla_validate_parse: 11 callbacks suppressed [ 400.818441][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3478'. [ 400.865054][T14347] netlink: 'syz.1.3478': attribute type 1 has an invalid length. [ 400.865116][T14347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3478'. [ 400.916690][T13959] veth0_macvtap: entered promiscuous mode [ 400.946498][T13959] veth1_macvtap: entered promiscuous mode [ 401.056109][T13959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.115171][T13959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.151018][T14350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.204966][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.205400][ T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.205719][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.205913][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.343116][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 401.343137][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3483'. [ 401.979958][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.979985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.065198][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.065225][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.238934][T14370] fuse: Unknown parameter '0x0000000000000004' [ 404.697793][T14450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 404.697833][T14450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 406.422147][T14489] kvm: kvm [14488]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 407.199733][T14522] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3555'. [ 407.969913][T14534] cgroup: fork rejected by pids controller in /syz5 [ 408.027032][T14541] batadv_slave_0: entered promiscuous mode [ 408.030085][T14541] batman_adv: batadv0: Adding interface: macsec1 [ 408.030105][T14541] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.030136][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.030154][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.030180][T14541] batman_adv: batadv0: Interface activated: macsec1 [ 408.160268][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3565'. [ 408.361967][T14551] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3568'. [ 408.914905][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 409.609673][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3582'. [ 409.801416][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.829587][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.833993][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.845375][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.846590][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.932069][T14590] netlink: 'syz.4.3582': attribute type 1 has an invalid length. [ 409.932095][T14590] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3582'. [ 409.962676][T14589] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3583'. [ 410.149028][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 410.149058][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3585'. [ 410.413225][T14586] wg1 speed is unknown, defaulting to 1000 [ 410.416376][T14586] lo speed is unknown, defaulting to 1000 [ 411.494739][T14634] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3596'. [ 411.820558][T14586] chnl_net:caif_netlink_parms(): no params data found [ 411.939678][ T5806] Bluetooth: hci2: command tx timeout [ 412.106453][T14657] fuse: Bad value for 'fd' [ 412.696388][T14586] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.696659][T14586] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.696960][T14586] bridge_slave_0: entered allmulticast mode [ 412.704323][T14586] bridge_slave_0: entered promiscuous mode [ 412.719508][T14586] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.724918][T14586] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.725685][T14586] bridge_slave_1: entered allmulticast mode [ 412.745308][T14586] bridge_slave_1: entered promiscuous mode [ 412.861806][T14686] fuse: Bad value for 'fd' [ 413.124551][T14586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.141495][T14586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.327778][ T37] audit: type=1326 audit(1767681390.135:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14691 comm="syz.4.3621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2910af749 code=0x0 [ 414.419255][ T5806] Bluetooth: hci2: command tx timeout [ 415.794126][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'. [ 415.976659][T14722] fuse: Bad value for 'fd' [ 416.000258][T14712] wg2: entered promiscuous mode [ 416.000289][T14712] wg2: entered allmulticast mode [ 416.138807][T14720] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3628'. [ 416.138851][T14720] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3628'. [ 416.267830][T14586] team0: Port device team_slave_0 added [ 416.520338][ T5116] Bluetooth: hci2: command tx timeout [ 416.597130][T14586] team0: Port device team_slave_1 added [ 417.251002][T14752] fuse: Unknown parameter '0x0000000000000004' [ 417.321607][T14586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.321634][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.321666][T14586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.377578][T14586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.377598][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.377632][T14586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.925325][T14586] hsr_slave_0: entered promiscuous mode [ 417.926992][T14586] hsr_slave_1: entered promiscuous mode [ 417.928035][T14586] debugfs: 'hsr0' already exists in 'hsr' [ 417.928062][T14586] Cannot create hsr debugfs directory [ 418.499069][T14784] fuse: Unknown parameter '0x0000000000000004' [ 418.573630][ T5116] Bluetooth: hci2: command tx timeout [ 418.827568][T14792] binder: BINDER_SET_CONTEXT_MGR already set [ 418.827588][T14792] binder: 14791:14792 ioctl 4018620d 2000000002c0 returned -16 [ 419.257519][T14808] fuse: Unknown parameter '0x0000000000000004' [ 419.461479][T14586] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.004343][T14586] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.383760][T14840] fuse: Unknown parameter '0x0000000000000004' [ 420.555640][T14829] batadv0: left allmulticast mode [ 420.555886][T14829] vxcan0: left allmulticast mode [ 420.556068][T14829] vxcan1: left allmulticast mode [ 420.556256][T14829] veth0: left allmulticast mode [ 420.556445][T14829] veth1: left allmulticast mode [ 420.556675][T14829] wg0: left allmulticast mode [ 420.556876][T14829] wg1: left allmulticast mode [ 420.557054][T14829] wg2: left allmulticast mode [ 420.557264][T14829] veth0_to_bridge: left allmulticast mode [ 420.557711][T14829] bridge_slave_0: left allmulticast mode [ 420.557905][T14829] veth1_to_bridge: left allmulticast mode [ 420.558278][T14829] veth0_to_bond: left allmulticast mode [ 420.558508][T14829] bond_slave_0: left allmulticast mode [ 420.573281][T14829] veth1_to_bond: left allmulticast mode [ 420.573499][T14829] bond_slave_1: left allmulticast mode [ 420.573677][T14829] veth0_to_team: left allmulticast mode [ 420.573871][T14829] team_slave_0: left allmulticast mode [ 420.574046][T14829] veth1_to_team: left allmulticast mode [ 420.616537][T14829] team_slave_1: left allmulticast mode [ 420.617411][T14829] veth0_to_batadv: left allmulticast mode [ 420.617979][T14829] batadv_slave_0: left allmulticast mode [ 420.646123][T14829] veth1_to_batadv: left allmulticast mode [ 420.646808][T14829] batadv_slave_1: left allmulticast mode [ 420.657108][T14829] xfrm0: left allmulticast mode [ 420.657678][T14829] veth0_to_hsr: left allmulticast mode [ 420.671247][T14829] veth1_to_hsr: left allmulticast mode [ 420.673849][T14829] hsr0: left allmulticast mode [ 420.673920][T14829] hsr_slave_0: left allmulticast mode [ 420.673989][T14829] hsr_slave_1: left allmulticast mode [ 420.674567][T14829] veth1_virt_wifi: left allmulticast mode [ 420.737894][T14829] veth0_virt_wifi: left allmulticast mode [ 420.738074][T14829] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 420.738287][T14829] veth1_vlan: left allmulticast mode [ 420.738580][T14829] vlan0: left allmulticast mode [ 420.738715][T14829] vlan1: left allmulticast mode [ 420.738838][T14829] macvlan0: left allmulticast mode [ 420.739122][T14829] macvlan1: left allmulticast mode [ 420.739256][T14829] ipvlan0: left allmulticast mode [ 420.739379][T14829] ipvlan1: left allmulticast mode [ 420.739390][T14829] veth0_vlan: left allmulticast mode [ 420.739522][T14829] veth1_macvtap: left allmulticast mode [ 420.739659][T14829] veth0_macvtap: left allmulticast mode [ 420.739785][T14829] macvtap0: left allmulticast mode [ 420.740008][T14829] geneve0: left allmulticast mode [ 420.740131][T14829] geneve1: left allmulticast mode [ 420.740265][T14829] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 420.740445][T14829] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 420.740577][T14829] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 420.740712][T14829] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 420.740843][T14829] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 420.741005][T14829] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 420.741135][T14829] vxlan0: left allmulticast mode [ 421.325964][ T991] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.326005][ T991] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.327732][ T991] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.327769][ T991] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.327814][ T991] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.327842][ T991] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.327880][ T991] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.327908][ T991] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.546278][T14586] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.579198][T14874] tipc: Started in network mode [ 427.579237][T14874] tipc: Node identity 1aad57272145, cluster identity 4711 [ 427.579453][T14874] tipc: Enabled bearer , priority 10 [ 428.243180][ T804] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 429.206119][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.206159][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.206186][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.206247][ T804] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 429.206274][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.285020][ T804] usb 3-1: config 0 descriptor?? [ 429.431052][T14586] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.509788][ T805] tipc: Node number set to 1005082407 [ 429.895068][ T804] cypress 0003:04B4:DE64.0001: unknown main item tag 0x0 [ 429.895118][ T804] cypress 0003:04B4:DE64.0001: unknown main item tag 0x4 [ 429.895307][ T804] cypress 0003:04B4:DE64.0001: global environment stack underflow [ 429.895319][ T804] cypress 0003:04B4:DE64.0001: item 0 0 1 11 parsing failed [ 429.897909][ T804] cypress 0003:04B4:DE64.0001: parse failed [ 429.897997][ T804] cypress 0003:04B4:DE64.0001: probe with driver cypress failed with error -22 [ 430.073857][ T5982] usb 3-1: USB disconnect, device number 2 [ 430.252140][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.255059][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.416382][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.431149][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.438391][T14890] tipc: Resetting bearer [ 432.233751][T14890] geneve2: left promiscuous mode [ 432.480744][ T58] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.496956][ T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.497009][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.497047][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.949757][T14586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.017237][T14586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 433.098864][T14586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 433.184771][T14586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 433.776443][T14586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.842105][T14586] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.870223][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.870474][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.925911][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.926084][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.448739][T14946] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.450766][T14946] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.527491][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'. [ 435.254263][T14946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.276099][T14946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.450306][T14946] batman_adv: batadv0: Interface deactivated: macsec1 [ 436.478453][ T991] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.496146][ T991] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.514552][ T991] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.514611][ T991] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.071830][T14984] netlink: 'syz.2.3728': attribute type 11 has an invalid length. [ 437.071856][T14984] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3728'. [ 437.371642][T14586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.727495][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 439.258272][T14586] veth0_vlan: entered promiscuous mode [ 439.321898][T14586] veth1_vlan: entered promiscuous mode [ 439.426440][T14586] veth0_macvtap: entered promiscuous mode [ 439.441363][T14586] veth1_macvtap: entered promiscuous mode [ 439.535771][T14586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.622048][T14586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.708393][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.708720][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.708765][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.708806][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.347873][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'. [ 443.757117][T15030] bridge2: entered promiscuous mode [ 443.757148][T15030] bridge2: entered allmulticast mode [ 445.916798][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.073642][ T6554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.073665][ T6554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.338147][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.338173][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.308585][ T804] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 453.463788][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 453.468295][ T804] usb 2-1: config 9 has an invalid interface number: 164 but max is 2 [ 453.468327][ T804] usb 2-1: config 9 has an invalid interface number: 208 but max is 2 [ 453.468350][ T804] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 453.468370][ T804] usb 2-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 453.468393][ T804] usb 2-1: config 9 has no interface number 0 [ 453.468408][ T804] usb 2-1: config 9 has no interface number 1 [ 453.468527][ T804] usb 2-1: config 9 interface 164 altsetting 14 endpoint 0x6 has an invalid bInterval 36, changing to 9 [ 453.468573][ T804] usb 2-1: config 9 interface 208 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.468602][ T804] usb 2-1: config 9 interface 164 has no altsetting 0 [ 453.468622][ T804] usb 2-1: config 9 interface 208 has no altsetting 0 [ 453.483401][ T804] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=9b.d0 [ 453.483436][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.483458][ T804] usb 2-1: Product: syz [ 453.483474][ T804] usb 2-1: Manufacturer: syz [ 453.483491][ T804] usb 2-1: SerialNumber: syz [ 456.568972][ T804] cdc_ether 2-1:9.208: skipping garbage [ 456.568998][ T804] cdc_ether 2-1:9.208: skipping garbage [ 456.569013][ T804] cdc_ether 2-1:9.208: skipping garbage [ 456.569028][ T804] cdc_ether 2-1:9.208: skipping garbage [ 456.569050][ T804] usb 2-1: bad CDC descriptors [ 457.973669][ T804] usb 2-1: USB disconnect, device number 5 [ 458.709200][ T5982] ------------[ cut here ]------------ [ 458.709219][ T5982] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 458.709246][ T5982] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#0: kworker/0:8/5982 [ 458.709302][ T5982] Modules linked in: [ 458.709342][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.709368][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.709385][ T5982] Workqueue: events drm_fb_helper_damage_work [ 458.709421][ T5982] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 458.709448][ T5982] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 458.709469][ T5982] RSP: 0018:ffffc9000522f860 EFLAGS: 00010246 [ 458.709494][ T5982] RAX: 1ffff110281e7800 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 458.709512][ T5982] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 458.709530][ T5982] RBP: ffffc9000522f948 R08: 0000000000000000 R09: 0000000000000000 [ 458.709545][ T5982] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 458.709570][ T5982] R13: ffff888140f3c000 R14: 1ffff92000a45f10 R15: ffffffff8b569b80 [ 458.709589][ T5982] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 458.709608][ T5982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.709625][ T5982] CR2: 0000001b34316ff8 CR3: 000000003bf6a000 CR4: 00000000003526f0 [ 458.709645][ T5982] Call Trace: [ 458.709658][ T5982] [ 458.709676][ T5982] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 458.709702][ T5982] ? rt_spin_unlock+0x150/0x200 [ 458.709735][ T5982] ? __pfx_autoremove_wake_function+0x10/0x10 [ 458.709770][ T5982] ? rt_spin_unlock+0x161/0x200 [ 458.709807][ T5982] ? drm_vblank_get+0x147/0x260 [ 458.709836][ T5982] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 458.709879][ T5982] drm_fb_helper_damage_work+0xc9/0x650 [ 458.709911][ T5982] ? process_scheduled_works+0x9ef/0x1770 [ 458.709944][ T5982] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 458.709979][ T5982] ? process_scheduled_works+0x9ef/0x1770 [ 458.710004][ T5982] ? process_scheduled_works+0x9ef/0x1770 [ 458.710034][ T5982] process_scheduled_works+0xad1/0x1770 [ 458.710100][ T5982] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.710124][ T5982] ? do_raw_spin_lock+0x121/0x290 [ 458.710173][ T5982] worker_thread+0x8a0/0xda0 [ 458.710235][ T5982] kthread+0x711/0x8a0 [ 458.710274][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 458.710302][ T5982] ? __pfx_kthread+0x10/0x10 [ 458.710333][ T5982] ? rt_spin_unlock+0x150/0x200 [ 458.710371][ T5982] ? rt_spin_unlock+0x161/0x200 [ 458.710401][ T5982] ? __pfx_kthread+0x10/0x10 [ 458.710437][ T5982] ret_from_fork+0x510/0xa50 [ 458.710468][ T5982] ? __pfx_ret_from_fork+0x10/0x10 [ 458.710492][ T5982] ? __switch_to+0xc9e/0x1480 [ 458.710535][ T5982] ? __pfx_kthread+0x10/0x10 [ 458.710576][ T5982] ret_from_fork_asm+0x1a/0x30 [ 458.710636][ T5982] [ 458.710656][ T5982] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 458.710672][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.710697][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.710717][ T5982] Workqueue: events drm_fb_helper_damage_work [ 458.710743][ T5982] Call Trace: [ 458.710751][ T5982] [ 458.710761][ T5982] vpanic+0x1e0/0x670 [ 458.710799][ T5982] panic+0xb9/0xc0 [ 458.710832][ T5982] ? __pfx_panic+0x10/0x10 [ 458.710879][ T5982] ? ret_from_fork_asm+0x1a/0x30 [ 458.710924][ T5982] __warn+0x317/0x4b0 [ 458.710955][ T5982] ? drm_wait_one_vblank+0x39a/0x5c0 [ 458.710986][ T5982] ? drm_wait_one_vblank+0x39a/0x5c0 [ 458.711013][ T5982] __report_bug+0x288/0x500 [ 458.711052][ T5982] ? drm_wait_one_vblank+0x39a/0x5c0 [ 458.711086][ T5982] ? __pfx___report_bug+0x10/0x10 [ 458.711152][ T5982] report_bug_entry+0x19a/0x290 [ 458.711204][ T5982] ? drm_wait_one_vblank+0x587/0x5c0 [ 458.711229][ T5982] ? drm_wait_one_vblank+0x58c/0x5c0 [ 458.711255][ T5982] handle_bug+0xca/0x200 [ 458.711286][ T5982] exc_invalid_op+0x1a/0x50 [ 458.711315][ T5982] asm_exc_invalid_op+0x1a/0x20 [ 458.711338][ T5982] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 458.711365][ T5982] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 458.711387][ T5982] RSP: 0018:ffffc9000522f860 EFLAGS: 00010246 [ 458.711406][ T5982] RAX: 1ffff110281e7800 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 458.711442][ T5982] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 458.711460][ T5982] RBP: ffffc9000522f948 R08: 0000000000000000 R09: 0000000000000000 [ 458.711476][ T5982] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 458.711495][ T5982] R13: ffff888140f3c000 R14: 1ffff92000a45f10 R15: ffffffff8b569b80 [ 458.711544][ T5982] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 458.711578][ T5982] ? rt_spin_unlock+0x150/0x200 [ 458.711610][ T5982] ? __pfx_autoremove_wake_function+0x10/0x10 [ 458.711645][ T5982] ? rt_spin_unlock+0x161/0x200 [ 458.711683][ T5982] ? drm_vblank_get+0x147/0x260 [ 458.711713][ T5982] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 458.711755][ T5982] drm_fb_helper_damage_work+0xc9/0x650 [ 458.711786][ T5982] ? process_scheduled_works+0x9ef/0x1770 [ 458.711819][ T5982] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 458.711854][ T5982] ? process_scheduled_works+0x9ef/0x1770 [ 458.711880][ T5982] ? process_scheduled_works+0x9ef/0x1770 [ 458.711910][ T5982] process_scheduled_works+0xad1/0x1770 [ 458.711976][ T5982] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.712001][ T5982] ? do_raw_spin_lock+0x121/0x290 [ 458.712053][ T5982] worker_thread+0x8a0/0xda0 [ 458.712118][ T5982] kthread+0x711/0x8a0 [ 458.712156][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 458.712183][ T5982] ? __pfx_kthread+0x10/0x10 [ 458.712215][ T5982] ? rt_spin_unlock+0x150/0x200 [ 458.712255][ T5982] ? rt_spin_unlock+0x161/0x200 [ 458.712286][ T5982] ? __pfx_kthread+0x10/0x10 [ 458.712323][ T5982] ret_from_fork+0x510/0xa50 [ 458.712353][ T5982] ? __pfx_ret_from_fork+0x10/0x10 [ 458.712378][ T5982] ? __switch_to+0xc9e/0x1480 [ 458.712421][ T5982] ? __pfx_kthread+0x10/0x10 [ 458.712459][ T5982] ret_from_fork_asm+0x1a/0x30 [ 458.712519][ T5982] [ 458.713247][ T5982] Kernel Offset: disabled