last executing test programs: 7m31.275487868s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x8864}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="2833b1656532", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x10, 0x2c, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, {[@hopopts={0x0, 0x0, '\x00', [@padn]}]}}}}}}, 0x4a) 7m30.140933645s ago: executing program 1 (id=12): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') fchdir(r2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024e9e094099041a10"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x145000, 0x2) 7m28.001636662s ago: executing program 1 (id=16): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008010) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) utimes(&(0x7f0000000480)='./cgroup\x00', 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x2, 0x3, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000440)='qnx6\x00', 0x0) 7m12.710727277s ago: executing program 32 (id=16): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008010) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) utimes(&(0x7f0000000480)='./cgroup\x00', 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x2, 0x3, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000440)='qnx6\x00', 0x0) 11.350321595s ago: executing program 4 (id=1661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xfffffffe}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r8, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 6.88385062s ago: executing program 2 (id=1682): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) 6.244442539s ago: executing program 2 (id=1684): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.533256933s ago: executing program 0 (id=1686): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) 5.452707245s ago: executing program 2 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 5.411106601s ago: executing program 5 (id=1689): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d07636a778533c", 0x7}], 0x1}, 0xc804) 4.759889546s ago: executing program 2 (id=1690): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000440)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de525e4a40e81692d09dce2ef8fa93fb0f37db28dba1ced212308d6fa74f07837", 0x3a, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @remote}, 0x14) 4.296619236s ago: executing program 5 (id=1691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 4.205954587s ago: executing program 0 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xa4b, &(0x7f0000000240)="235955deadf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0xa000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.012222297s ago: executing program 3 (id=1693): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8, 0x0) 3.936284324s ago: executing program 4 (id=1694): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) 3.237504854s ago: executing program 5 (id=1695): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.167668193s ago: executing program 2 (id=1696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r0) 3.084396425s ago: executing program 0 (id=1697): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10) 3.028813038s ago: executing program 3 (id=1698): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.932732884s ago: executing program 4 (id=1699): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 2.515652545s ago: executing program 3 (id=1700): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xc8}}, 0x0) 2.421361973s ago: executing program 0 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 2.403084947s ago: executing program 4 (id=1702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d07636a778533c", 0x7}], 0x1}, 0xc804) 2.399869025s ago: executing program 5 (id=1703): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) 2.135790189s ago: executing program 2 (id=1704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xfffffffe}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r8, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 1.836546357s ago: executing program 3 (id=1705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 1.781198788s ago: executing program 0 (id=1706): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000440)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de525e4a40e81692d09dce2ef8fa93fb0f37db28dba1ced212308d6fa74f07837", 0x3a, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.379335185s ago: executing program 4 (id=1707): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xa4b, &(0x7f0000000240)="235955deadf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0xa000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 893.408462ms ago: executing program 5 (id=1708): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8, 0x0) 841.267675ms ago: executing program 3 (id=1709): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) 182.541744ms ago: executing program 4 (id=1710): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 55.417609ms ago: executing program 5 (id=1711): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 54.954122ms ago: executing program 0 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, 0x0, 0x9590f6cc3aa711f2) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x92}, 0x40008020) sendmsg$nl_generic(r0, 0x0, 0x4008094) 0s ago: executing program 3 (id=1713): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 154.986292][ T5761] cgroup: Unknown subsys name 'net' [ 155.128503][ T5761] cgroup: Unknown subsys name 'cpuset' [ 155.142297][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.408075][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.003030][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.009616][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.387718][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.402075][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.422210][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.435321][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.446268][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.501271][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.510783][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.529042][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.538263][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.572769][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.582815][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.591124][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.601502][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.611943][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.620959][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.630023][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.645106][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.647224][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.671081][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.708237][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.772201][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.785375][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.795693][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.835039][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.861036][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.984529][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 166.106855][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 166.187010][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 166.246685][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 166.511170][ T5792] Bluetooth: hci0: command tx timeout [ 166.543481][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 166.672041][ T5792] Bluetooth: hci1: command tx timeout [ 166.750227][ T5792] Bluetooth: hci2: command tx timeout [ 166.750623][ T50] Bluetooth: hci3: command tx timeout [ 166.808740][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.820155][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.851008][ T5788] bridge_slave_0: entered allmulticast mode [ 166.871808][ T5788] bridge_slave_0: entered promiscuous mode [ 166.902012][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.909653][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.910100][ T50] Bluetooth: hci4: command tx timeout [ 166.950419][ T5788] bridge_slave_1: entered allmulticast mode [ 166.999341][ T5788] bridge_slave_1: entered promiscuous mode [ 167.243771][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.262259][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.325165][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.332903][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.344039][ T5783] bridge_slave_0: entered allmulticast mode [ 167.353452][ T5783] bridge_slave_0: entered promiscuous mode [ 167.400059][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.407489][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.415936][ T5787] bridge_slave_0: entered allmulticast mode [ 167.424833][ T5787] bridge_slave_0: entered promiscuous mode [ 167.435668][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.443238][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.451015][ T5797] bridge_slave_0: entered allmulticast mode [ 167.459239][ T5797] bridge_slave_0: entered promiscuous mode [ 167.470538][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.477968][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.485971][ T5783] bridge_slave_1: entered allmulticast mode [ 167.495122][ T5783] bridge_slave_1: entered promiscuous mode [ 167.526034][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.534031][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.542019][ T5787] bridge_slave_1: entered allmulticast mode [ 167.550396][ T5787] bridge_slave_1: entered promiscuous mode [ 167.559244][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.566817][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.575234][ T5797] bridge_slave_1: entered allmulticast mode [ 167.583250][ T5797] bridge_slave_1: entered promiscuous mode [ 167.663125][ T5788] team0: Port device team_slave_0 added [ 167.782981][ T5788] team0: Port device team_slave_1 added [ 167.796362][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.813927][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.823846][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.831424][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.839143][ T5781] bridge_slave_0: entered allmulticast mode [ 167.847849][ T5781] bridge_slave_0: entered promiscuous mode [ 167.865522][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.910956][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.928307][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.938616][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.946153][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.954427][ T5781] bridge_slave_1: entered allmulticast mode [ 167.963571][ T5781] bridge_slave_1: entered promiscuous mode [ 167.981433][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.149037][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.156929][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.183914][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.287130][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.294473][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.320787][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.338319][ T5787] team0: Port device team_slave_0 added [ 168.351595][ T5797] team0: Port device team_slave_0 added [ 168.365173][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.382309][ T5783] team0: Port device team_slave_0 added [ 168.410471][ T5787] team0: Port device team_slave_1 added [ 168.423380][ T5797] team0: Port device team_slave_1 added [ 168.435032][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.451182][ T5783] team0: Port device team_slave_1 added [ 168.590097][ T50] Bluetooth: hci0: command tx timeout [ 168.660167][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.667260][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.693746][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.707384][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.714636][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.740864][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.751760][ T50] Bluetooth: hci1: command tx timeout [ 168.761026][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.768522][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.795209][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.814310][ T5781] team0: Port device team_slave_0 added [ 168.830212][ T50] Bluetooth: hci2: command tx timeout [ 168.840177][ T50] Bluetooth: hci3: command tx timeout [ 168.849577][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.857139][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.883519][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.898221][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.905517][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.931808][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.945339][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.952467][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.979219][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.990292][ T50] Bluetooth: hci4: command tx timeout [ 169.013276][ T5781] team0: Port device team_slave_1 added [ 169.029173][ T5788] hsr_slave_0: entered promiscuous mode [ 169.038121][ T5788] hsr_slave_1: entered promiscuous mode [ 169.157904][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.165134][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.191471][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.276511][ T5787] hsr_slave_0: entered promiscuous mode [ 169.284879][ T5787] hsr_slave_1: entered promiscuous mode [ 169.292934][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 169.298769][ T5787] Cannot create hsr debugfs directory [ 169.307199][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.314653][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.340753][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.533679][ T5797] hsr_slave_0: entered promiscuous mode [ 169.542658][ T5797] hsr_slave_1: entered promiscuous mode [ 169.550570][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 169.556411][ T5797] Cannot create hsr debugfs directory [ 169.596123][ T5783] hsr_slave_0: entered promiscuous mode [ 169.604515][ T5783] hsr_slave_1: entered promiscuous mode [ 169.612489][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 169.618295][ T5783] Cannot create hsr debugfs directory [ 169.905395][ T5781] hsr_slave_0: entered promiscuous mode [ 169.913924][ T5781] hsr_slave_1: entered promiscuous mode [ 169.921808][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 169.927627][ T5781] Cannot create hsr debugfs directory [ 170.670225][ T50] Bluetooth: hci0: command tx timeout [ 170.830258][ T50] Bluetooth: hci1: command tx timeout [ 170.836233][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.872701][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.892118][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.920689][ T50] Bluetooth: hci3: command tx timeout [ 170.920866][ T5792] Bluetooth: hci2: command tx timeout [ 170.932342][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.013546][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.062373][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.071950][ T5792] Bluetooth: hci4: command tx timeout [ 171.100383][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.135831][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.267729][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.292173][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.334332][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.378819][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.632749][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.657026][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.674800][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.704153][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.987645][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.017669][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.037953][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.068337][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.126837][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.332098][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.417044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.424596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.460407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.467855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.515274][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.560658][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.635159][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.697779][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.705158][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.750089][ T5792] Bluetooth: hci0: command tx timeout [ 172.773419][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.781020][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.864977][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.910208][ T5792] Bluetooth: hci1: command tx timeout [ 172.932822][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.963270][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.970707][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.990258][ T5792] Bluetooth: hci3: command tx timeout [ 172.990333][ T50] Bluetooth: hci2: command tx timeout [ 173.024070][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.031562][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.144098][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.151173][ T5792] Bluetooth: hci4: command tx timeout [ 173.292906][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.300461][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.387408][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.394765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.505118][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.745007][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.838150][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.845813][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.968860][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.976400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.077766][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.610761][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.794399][ T5788] veth0_vlan: entered promiscuous mode [ 175.040591][ T5788] veth1_vlan: entered promiscuous mode [ 175.207978][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.258975][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.367593][ T5787] veth0_vlan: entered promiscuous mode [ 175.427038][ T5787] veth1_vlan: entered promiscuous mode [ 175.641056][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.655902][ T5788] veth0_macvtap: entered promiscuous mode [ 175.675422][ T5788] veth1_macvtap: entered promiscuous mode [ 175.887038][ T5787] veth0_macvtap: entered promiscuous mode [ 175.932890][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.956015][ T5797] veth0_vlan: entered promiscuous mode [ 175.979182][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.014801][ T5787] veth1_macvtap: entered promiscuous mode [ 176.094586][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.205251][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.224824][ T5797] veth1_vlan: entered promiscuous mode [ 176.246347][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.267231][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.407352][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.458672][ T5781] veth0_vlan: entered promiscuous mode [ 176.503841][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.638827][ T5781] veth1_vlan: entered promiscuous mode [ 176.663303][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.688311][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.720286][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.783868][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.933004][ T5797] veth0_macvtap: entered promiscuous mode [ 176.958384][ T5783] veth0_vlan: entered promiscuous mode [ 177.015906][ T5797] veth1_macvtap: entered promiscuous mode [ 177.124912][ T5783] veth1_vlan: entered promiscuous mode [ 177.286102][ T5781] veth0_macvtap: entered promiscuous mode [ 177.377178][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.394531][ T5781] veth1_macvtap: entered promiscuous mode [ 177.495708][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.656641][ T1125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.705141][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.740432][ T1125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.771852][ T5783] veth0_macvtap: entered promiscuous mode [ 177.799812][ T1125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.820765][ T1125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.849392][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.921787][ T5783] veth1_macvtap: entered promiscuous mode [ 178.041814][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.104197][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.158082][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.214678][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.255328][ T1125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.318308][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.484538][ T1125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.583210][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.652543][ T1125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.710257][ T1125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.720607][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.728624][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.896785][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.905056][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.364308][ T5788] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 181.755491][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.763591][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.044259][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.052623][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.086294][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.095027][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.278676][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.290136][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.641948][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.650587][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.898397][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.908095][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.662423][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.676024][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.048973][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.057452][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.070257][ T5833] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 188.360370][ T5833] usb 2-1: no configurations [ 188.365170][ T5833] usb 2-1: can't read configurations, error -22 [ 191.131688][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 191.830716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 191.842996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 192.124307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 192.458194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.661214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.011611][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 193.159440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 193.260894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 193.271539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 193.762189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.772595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 196.415852][ T5840] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 196.706177][ T5840] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.715113][ T5840] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 196.725599][ T5840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.803899][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 196.815358][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 196.943665][ T5840] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.955945][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.965705][ T5840] usb 5-1: Product: syz [ 196.970550][ T5840] usb 5-1: Manufacturer: syz [ 197.075679][ T5840] cdc_wdm 5-1:1.0: skipping garbage [ 197.081278][ T5840] cdc_wdm 5-1:1.0: skipping garbage [ 197.145227][ T5840] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 197.156508][ T5840] cdc_wdm 5-1:1.0: Unknown control protocol [ 198.078871][ T5833] usb 5-1: USB disconnect, device number 2 [ 198.306418][ T6059] tipc: Started in network mode [ 198.311596][ T6059] tipc: Node identity 1a4c9d0df475, cluster identity 4711 [ 198.319305][ T6059] tipc: Enabled bearer , priority 0 [ 198.453846][ T6059] syzkaller0: entered promiscuous mode [ 198.459529][ T6059] syzkaller0: entered allmulticast mode [ 198.696479][ T6058] tipc: Resetting bearer [ 198.761712][ T6057] tipc: Resetting bearer [ 198.842569][ T6057] tipc: Disabling bearer [ 202.572031][ T6078] Bluetooth: MGMT ver 1.23 [ 203.157959][ T6086] fuse: Unknown parameter 'fd0x0000000000000004' [ 203.664241][ T6085] evm: overlay not supported [ 204.162103][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 204.278291][ T6091] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 205.497668][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.510159][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.523129][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.559017][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.571673][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.242427][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 207.615499][ T6116] Zero length message leads to an empty skb [ 207.631128][ T50] Bluetooth: hci5: command tx timeout [ 208.561634][ T6121] fuse: Unknown parameter 'fd0x0000000000000004' [ 208.807229][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.814881][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.845974][ T6100] bridge_slave_0: entered allmulticast mode [ 208.867939][ T6100] bridge_slave_0: entered promiscuous mode [ 208.941767][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.949226][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.010984][ T6100] bridge_slave_1: entered allmulticast mode [ 209.212461][ T6100] bridge_slave_1: entered promiscuous mode [ 209.578257][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.728679][ T50] Bluetooth: hci5: command tx timeout [ 209.817157][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.346896][ T6100] team0: Port device team_slave_0 added [ 210.436371][ T6100] team0: Port device team_slave_1 added [ 210.774937][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.782360][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.809024][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.972379][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.981092][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.017000][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.402695][ T6100] hsr_slave_0: entered promiscuous mode [ 211.469604][ T6100] hsr_slave_1: entered promiscuous mode [ 211.517604][ T6100] debugfs: 'hsr0' already exists in 'hsr' [ 211.524078][ T6100] Cannot create hsr debugfs directory [ 211.791399][ T50] Bluetooth: hci5: command tx timeout [ 211.890665][ T6155] fuse: Unknown parameter 'fd0x0000000000000004' [ 213.249211][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 213.285446][ T6100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.391852][ T6100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.440214][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 213.442134][ T6100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.463409][ T5833] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.473617][ T5833] usb 1-1: config 1 has no interface number 1 [ 213.519168][ T5833] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.528927][ T6100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.530377][ T5833] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 213.581106][ T5833] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.602055][ T5833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.611603][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.619768][ T5833] usb 1-1: Product: syz [ 213.624437][ T5833] usb 1-1: Manufacturer: syz [ 213.629199][ T5833] usb 1-1: SerialNumber: syz [ 213.870620][ T50] Bluetooth: hci5: command tx timeout [ 214.097638][ T5833] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 214.843133][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.168681][ T6100] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.309926][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.317462][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.364497][ T5833] usb 1-1: USB disconnect, device number 2 [ 215.515520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.523064][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.915291][ T6173] udevd[6173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.205705][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.405100][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.646118][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.839219][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.551215][ T12] bridge_slave_1: left allmulticast mode [ 218.558665][ T12] bridge_slave_1: left promiscuous mode [ 218.565438][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.664147][ T12] bridge_slave_0: left allmulticast mode [ 218.672590][ T12] bridge_slave_0: left promiscuous mode [ 218.679143][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.503744][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.556123][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.587825][ T12] bond0 (unregistering): Released all slaves [ 220.615944][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.065799][ T12] hsr_slave_0: left promiscuous mode [ 221.093966][ T12] hsr_slave_1: left promiscuous mode [ 221.131874][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.139663][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.192837][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.200746][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.282176][ T12] veth1_macvtap: left promiscuous mode [ 221.302849][ T12] veth0_macvtap: left promiscuous mode [ 221.308978][ T12] veth1_vlan: left promiscuous mode [ 221.353461][ T12] veth0_vlan: left promiscuous mode [ 222.987687][ T12] team0 (unregistering): Port device team_slave_1 removed [ 223.052761][ T12] team0 (unregistering): Port device team_slave_0 removed [ 223.653267][ T6237] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 224.462552][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.469118][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.193316][ T6256] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3790085950 (485131001600 ns) > initial count (67164740224 ns). Using initial count to start timer. [ 225.506806][ T6100] veth0_vlan: entered promiscuous mode [ 225.645168][ T6100] veth1_vlan: entered promiscuous mode [ 225.979536][ T6100] veth0_macvtap: entered promiscuous mode [ 226.087968][ T6100] veth1_macvtap: entered promiscuous mode [ 226.372268][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.472982][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.602303][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.725737][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.758089][ T136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.843320][ T136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.395288][ T6305] binder: BINDER_SET_CONTEXT_MGR already set [ 230.422576][ T6305] binder: 6304:6305 ioctl 4018620d 80004a80 returned -16 [ 233.091637][ T6341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.456819][ T6363] binder: BINDER_SET_CONTEXT_MGR already set [ 234.487471][ T6363] binder: 6361:6363 ioctl 4018620d 80004a80 returned -16 [ 235.128927][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.137703][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.677283][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.685388][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.215451][ T6384] tipc: Started in network mode [ 237.223961][ T6384] tipc: Node identity 6ee00fa55fbd, cluster identity 4711 [ 237.234964][ T6384] tipc: Enabled bearer , priority 0 [ 237.335155][ T6384] syzkaller0: entered promiscuous mode [ 237.341106][ T6384] syzkaller0: entered allmulticast mode [ 237.443911][ T6384] tipc: Resetting bearer [ 237.490697][ T6382] tipc: Resetting bearer [ 237.557650][ T6382] tipc: Disabling bearer [ 239.326834][ T5837] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 239.521593][ T5837] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 239.591820][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.640179][ T5837] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.652611][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 239.738094][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.838434][ T5837] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.850664][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.853350][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.814145][ T5837] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.825494][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.863487][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.880097][ T5837] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.891350][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.181735][ T5837] usb 4-1: unable to read config index 4 descriptor/start: -71 [ 242.189554][ T5837] usb 4-1: can't read configurations, error -71 [ 243.131866][ T6444] tipc: Enabled bearer , priority 0 [ 243.146599][ T6441] syzkaller0: entered promiscuous mode [ 243.152608][ T6441] syzkaller0: entered allmulticast mode [ 243.341260][ T6441] tipc: Resetting bearer [ 243.374433][ T6437] tipc: Resetting bearer [ 243.416954][ T6437] tipc: Disabling bearer [ 245.570662][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.149'. [ 248.031004][ T6497] tipc: Enabled bearer , priority 0 [ 248.204907][ T6493] syzkaller0: entered promiscuous mode [ 248.210817][ T6493] syzkaller0: entered allmulticast mode [ 248.315277][ T6493] tipc: Resetting bearer [ 248.416891][ T6492] tipc: Resetting bearer [ 248.467218][ T6492] tipc: Disabling bearer [ 248.944524][ T6513] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 253.686060][ T6558] tipc: Enabled bearer , priority 0 [ 253.742390][ T6555] syzkaller0: entered promiscuous mode [ 253.748156][ T6555] syzkaller0: entered allmulticast mode [ 253.958854][ T6555] tipc: Resetting bearer [ 253.990614][ T6552] tipc: Resetting bearer [ 254.007212][ T6552] tipc: Disabling bearer [ 255.174787][ T6572] binder: BINDER_SET_CONTEXT_MGR already set [ 255.213064][ T6572] binder: 6571:6572 ioctl 4018620d 80004a80 returned -16 [ 255.766862][ T6577] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 260.169558][ T5840] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 260.315357][ T5840] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 260.490163][ T6623] binder: BINDER_SET_CONTEXT_MGR already set [ 260.580568][ T6623] binder: 6622:6623 ioctl 4018620d 80004a80 returned -16 [ 260.927432][ T6632] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 262.076340][ T6629] fido_id[6629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 263.818660][ T6674] binder: BINDER_SET_CONTEXT_MGR already set [ 263.830066][ T6674] binder: 6673:6674 ioctl 4018620d 80004a80 returned -16 [ 264.722738][ T6683] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 268.275234][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 268.602606][ T6726] loop6: detected capacity change from 0 to 2640 [ 268.659725][ T6726] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.668296][ T6726] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.717998][ T6726] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.782135][ T6726] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.831974][ T6726] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.871167][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.879407][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.000344][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.008605][ T6726] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.095422][ T6726] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.154098][ T6726] ldm_validate_partition_table(): Disk read failed. [ 269.170686][ T6726] Dev loop6: unable to read RDB block 0 [ 269.237923][ T6726] loop6: unable to read partition table [ 269.329553][ T6726] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 270.189268][ T6734] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 273.910236][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 273.937870][ T6779] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 274.100381][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 274.117176][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.125927][ T10] usb 4-1: config 0 has no interface number 0 [ 274.167616][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 274.177331][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.185680][ T10] usb 4-1: Product: syz [ 274.190164][ T10] usb 4-1: Manufacturer: syz [ 274.194902][ T10] usb 4-1: SerialNumber: syz [ 274.283601][ T10] usb 4-1: config 0 descriptor?? [ 274.345898][ T10] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 274.358391][ T10] usb 4-1: selecting invalid altsetting 1 [ 274.366456][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 274.502515][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 274.546896][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 274.616580][ T10] usb 4-1: media controller created [ 274.908326][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.634245][ T6776] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 275.674605][ T10] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 275.682082][ T10] zl10353_read_register: readreg error (reg=127, ret==-32) [ 275.758747][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 276.400184][ T10] usb 4-1: USB disconnect, device number 4 [ 276.407207][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 276.545204][ T6815] netlink: 104 bytes leftover after parsing attributes in process `syz.2.239'. [ 276.555420][ T6815] netlink: 104 bytes leftover after parsing attributes in process `syz.2.239'. [ 277.201066][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 277.382772][ T6829] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 279.574817][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.254'. [ 280.163207][ T6871] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 281.654078][ T6902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.378066][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.266'. [ 283.033523][ T6919] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 285.163591][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.282'. [ 285.300638][ T6964] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 285.888447][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.895210][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.950234][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 287.956451][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 287.965114][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 287.971469][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 288.879218][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 289.634419][ T7019] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 292.064600][ T7047] tls_set_device_offload: netdev not found [ 293.454851][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 294.368614][ T7065] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 295.472652][ T7068] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 296.092164][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 297.523896][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.320'. [ 297.990982][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 298.019743][ T7101] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 298.027964][ T7101] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 298.390865][ T7108] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 298.425653][ T7109] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 298.993350][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 299.111627][ T7113] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 299.850725][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.331'. [ 300.744401][ T7152] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 300.753588][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 301.680747][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 304.849471][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 305.830597][ T7220] binder: 7219:7220 ioctl 4018620d 0 returned -22 [ 308.321704][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 309.428665][ T7262] netlink: 'syz.2.372': attribute type 3 has an invalid length. [ 311.120898][ T7265] binder: 7264:7265 ioctl 4018620d 0 returned -22 [ 315.815797][ T7257] Set syz1 is full, maxelem 65536 reached [ 316.465151][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 318.233539][ T7317] binder: 7316:7317 ioctl 4018620d 0 returned -22 [ 320.488093][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 321.510875][ T7363] binder: BINDER_SET_CONTEXT_MGR already set [ 321.537778][ T7363] binder: 7362:7363 ioctl 4018620d 80004a80 returned -16 [ 324.871548][ T7397] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 324.971771][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 325.984665][ T7415] binder: BINDER_SET_CONTEXT_MGR already set [ 326.008787][ T7415] binder: 7413:7415 ioctl 4018620d 80004a80 returned -16 [ 326.725788][ T7423] syzkaller1: entered promiscuous mode [ 326.731634][ T7423] syzkaller1: entered allmulticast mode [ 328.912716][ T5794] Bluetooth: hci5: command 0x0406 tx timeout [ 330.102705][ T7443] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 331.511307][ T7463] binder: BINDER_SET_CONTEXT_MGR already set [ 331.576946][ T7463] binder: 7462:7463 ioctl 4018620d 80004a80 returned -16 [ 334.315452][ T7465] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 335.363272][ T7484] syzkaller0: entered promiscuous mode [ 335.368945][ T7484] syzkaller0: entered allmulticast mode [ 335.585547][ T7494] tipc: Started in network mode [ 335.590956][ T7494] tipc: Node identity 4ef441000ae6, cluster identity 4711 [ 335.609509][ T7494] tipc: Enabled bearer , priority 0 [ 336.088752][ T7495] tipc: Resetting bearer [ 336.144452][ T7490] tipc: Disabling bearer [ 336.880976][ T7524] binder: 7523:7524 ioctl c0306201 0 returned -14 [ 340.264437][ T7557] tipc: Started in network mode [ 340.269549][ T7557] tipc: Node identity 961184483f28, cluster identity 4711 [ 340.277679][ T7557] tipc: Enabled bearer , priority 0 [ 340.384030][ T7557] tipc: Resetting bearer [ 340.457301][ T7555] tipc: Disabling bearer [ 341.100238][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 341.181564][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.463'. [ 341.381798][ T7578] binder: 7577:7578 ioctl c0306201 0 returned -14 [ 344.602230][ T7608] tipc: Enabled bearer , priority 0 [ 344.777678][ T7608] tipc: Resetting bearer [ 344.891121][ T7607] tipc: Disabling bearer [ 345.172433][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 345.247055][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 346.328861][ T7639] binder: 7638:7639 ioctl c0306201 0 returned -14 [ 347.404410][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.411181][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.426571][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 348.773854][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 351.145606][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.506'. [ 352.871071][ T7730] fuse: Bad value for 'fd' [ 353.506224][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 355.727785][ T7771] syz.5.533 (7771) used greatest stack depth: 2128 bytes left [ 356.054441][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.537'. [ 358.261123][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 360.034189][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 361.076403][ T7876] tipc: Enabled bearer , priority 0 [ 361.154977][ T7876] tipc: Resetting bearer [ 361.208992][ T7873] tipc: Disabling bearer [ 362.000692][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 363.643277][ T7920] tipc: Enabled bearer , priority 0 [ 364.047229][ T7919] syzkaller0: entered promiscuous mode [ 364.053139][ T7919] syzkaller0: entered allmulticast mode [ 364.081489][ T7933] tipc: Resetting bearer [ 364.142521][ T7915] tipc: Disabling bearer [ 364.294487][ T7934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.572530][ T7970] tipc: Enabled bearer , priority 0 [ 366.707862][ T7969] tipc: Resetting bearer [ 366.745037][ T7974] syzkaller0: entered promiscuous mode [ 366.751109][ T7974] syzkaller0: entered allmulticast mode [ 366.763892][ T7972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.812366][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 366.812568][ T7968] tipc: Disabling bearer [ 368.091009][ T7997] fuse: Bad value for 'fd' [ 368.750591][ T8012] tipc: Enabled bearer , priority 0 [ 368.922289][ T8010] tipc: Resetting bearer [ 368.963719][ T8006] tipc: Disabling bearer [ 369.271381][ T8018] syzkaller0: entered promiscuous mode [ 369.277156][ T8018] syzkaller0: entered allmulticast mode [ 370.116324][ T8030] fuse: Bad value for 'fd' [ 370.652586][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 371.055023][ T8052] tipc: Enabled bearer , priority 0 [ 371.168749][ T8050] tipc: Resetting bearer [ 371.205666][ T8048] tipc: Disabling bearer [ 372.694840][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.649'. [ 373.203778][ T8091] tipc: Enabled bearer , priority 0 [ 373.335114][ T8091] tipc: Resetting bearer [ 373.377518][ T8088] tipc: Disabling bearer [ 375.252814][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 375.814276][ T8137] tipc: Started in network mode [ 375.819403][ T8137] tipc: Node identity eaf1cf2070f2, cluster identity 4711 [ 375.827506][ T8137] tipc: Enabled bearer , priority 0 [ 375.913182][ T8137] syzkaller0: entered promiscuous mode [ 375.919019][ T8137] syzkaller0: entered allmulticast mode [ 376.164304][ T8139] tipc: Resetting bearer [ 376.237086][ T8128] tipc: Resetting bearer [ 376.340001][ T8128] tipc: Disabling bearer [ 377.865418][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 378.586193][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 379.054968][ T8180] syzkaller0: entered promiscuous mode [ 379.060654][ T8180] syzkaller0: entered allmulticast mode [ 379.118029][ T8179] tipc: Enabled bearer , priority 0 [ 379.185108][ T8177] tipc: Resetting bearer [ 379.306934][ T8177] tipc: Disabling bearer [ 379.466675][ T8183] binder: 8181:8183 ioctl 4018620d 0 returned -22 [ 380.914174][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 381.211697][ T8197] syzkaller0: entered promiscuous mode [ 381.217457][ T8197] syzkaller0: entered allmulticast mode [ 381.843081][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 382.073097][ T8212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.434430][ T8222] tipc: Enabled bearer , priority 0 [ 382.491811][ T8220] syzkaller0: entered promiscuous mode [ 382.498644][ T8220] syzkaller0: entered allmulticast mode [ 382.615918][ T8220] tipc: Resetting bearer [ 382.657434][ T8218] tipc: Resetting bearer [ 382.697114][ T8218] tipc: Disabling bearer [ 382.951395][ T8231] binder: 8228:8231 ioctl 4018620d 0 returned -22 [ 383.560326][ T8238] netlink: 100 bytes leftover after parsing attributes in process `syz.0.697'. [ 383.619396][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 384.992997][ T8257] syzkaller0: entered promiscuous mode [ 384.998578][ T8257] syzkaller0: entered allmulticast mode [ 385.031904][ T8258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 386.870107][ T8282] binder: 8280:8282 ioctl 4018620d 0 returned -22 [ 386.977489][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 387.049029][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 387.973971][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 388.552428][ T8300] syzkaller0: entered promiscuous mode [ 388.558135][ T8300] syzkaller0: entered allmulticast mode [ 389.509660][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 389.949163][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.729'. [ 390.245303][ T8323] binder: 8321:8323 ioctl c0306201 0 returned -14 [ 390.877106][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 391.240540][ T8336] syzkaller0: entered promiscuous mode [ 391.246312][ T8336] syzkaller0: entered allmulticast mode [ 391.600398][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 393.061678][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 393.309524][ T8373] binder: 8372:8373 ioctl c0306201 0 returned -14 [ 393.623049][ T8380] syzkaller0: entered promiscuous mode [ 393.629022][ T8380] syzkaller0: entered allmulticast mode [ 393.691220][ T8382] netlink: 'syz.2.753': attribute type 11 has an invalid length. [ 395.528062][ T8412] netlink: 'syz.0.766': attribute type 11 has an invalid length. [ 395.904776][ T8414] syzkaller0: entered promiscuous mode [ 395.914010][ T8414] syzkaller0: entered allmulticast mode [ 395.934779][ T8420] binder: 8415:8420 ioctl c0306201 0 returned -14 [ 397.803101][ T8448] netlink: 'syz.4.781': attribute type 11 has an invalid length. [ 398.201227][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 398.513986][ T8458] syzkaller0: entered promiscuous mode [ 398.520841][ T8458] syzkaller0: entered allmulticast mode [ 399.753922][ T8478] syzkaller1: entered promiscuous mode [ 399.760231][ T8478] syzkaller1: entered allmulticast mode [ 400.661882][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.800'. [ 400.880627][ T8503] syzkaller0: entered promiscuous mode [ 400.886400][ T8503] syzkaller0: entered allmulticast mode [ 402.848087][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.815'. [ 403.058371][ T8541] syzkaller0: entered promiscuous mode [ 403.065365][ T8541] syzkaller0: entered allmulticast mode [ 405.003369][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 405.507419][ T8576] syzkaller0: entered promiscuous mode [ 405.513388][ T8576] syzkaller0: entered allmulticast mode [ 406.434731][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 407.136325][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 407.742135][ T8613] tipc: Enabling of bearer rejected, failed to enable media [ 408.817312][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.826383][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.545619][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.854'. [ 411.052472][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 411.332498][ T8654] fuse: Unknown parameter 'user_id00000000000000000000' [ 411.903061][ T8657] syzkaller0: entered promiscuous mode [ 411.908737][ T8657] syzkaller0: entered allmulticast mode [ 412.771931][ T8672] tipc: Enabling of bearer rejected, failed to enable media [ 416.024312][ T8708] fuse: Unknown parameter 'user_id00000000000000000000' [ 417.115034][ T8719] syzkaller0: entered promiscuous mode [ 417.120998][ T8719] syzkaller0: entered allmulticast mode [ 420.273831][ T8752] fuse: Unknown parameter 'user_id00000000000000000000' [ 421.708908][ T8771] syzkaller0: entered promiscuous mode [ 421.720020][ T8771] syzkaller0: entered allmulticast mode [ 421.790746][ T8776] tipc: Enabling of bearer rejected, failed to enable media [ 423.961111][ T8808] fuse: Bad value for 'fd' [ 426.364950][ T8829] syzkaller0: entered promiscuous mode [ 426.370852][ T8829] syzkaller0: entered allmulticast mode [ 427.158492][ T8838] tipc: Enabling of bearer rejected, failed to enable media [ 427.957061][ T8852] fuse: Bad value for 'fd' [ 432.319713][ T8886] fuse: Bad value for 'fd' [ 432.620780][ T8890] tipc: Enabling of bearer rejected, failed to enable media [ 432.997797][ T8887] syzkaller0: entered promiscuous mode [ 433.003564][ T8887] syzkaller0: entered allmulticast mode [ 435.792237][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 437.320159][ T8932] fuse: Unknown parameter '0x0000000000000003' [ 439.343705][ T8957] syzkaller0: entered promiscuous mode [ 439.349353][ T8957] syzkaller0: entered allmulticast mode [ 439.442823][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 440.013675][ T8966] syzkaller0: entered promiscuous mode [ 440.019322][ T8966] syzkaller0: entered allmulticast mode [ 440.891765][ T8975] fuse: Unknown parameter '0x0000000000000003' [ 443.595314][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 444.078343][ T9011] syzkaller0: entered promiscuous mode [ 444.084542][ T9011] syzkaller0: entered allmulticast mode [ 444.752005][ T9018] fuse: Unknown parameter '0x0000000000000003' [ 444.931304][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.974'. [ 447.262203][ T9039] syzkaller0: entered promiscuous mode [ 447.267866][ T9039] syzkaller0: entered allmulticast mode [ 448.224464][ T9054] syzkaller0: entered promiscuous mode [ 448.230485][ T9054] syzkaller0: entered allmulticast mode [ 448.614088][ T9061] fuse: Unknown parameter '0x0000000000000003' [ 448.729255][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 452.835694][ T9100] syzkaller0: entered promiscuous mode [ 452.841530][ T9100] syzkaller0: entered allmulticast mode [ 452.895144][ T9107] fuse: Unknown parameter '0x0000000000000003' [ 453.333988][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1003'. [ 458.162005][ T9141] fuse: Unknown parameter '0x0000000000000003' [ 458.538238][ T9143] syzkaller0: entered promiscuous mode [ 458.544059][ T9143] syzkaller0: entered allmulticast mode [ 459.113388][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 462.901946][ T9178] overlayfs: missing 'lowerdir' [ 463.193950][ T9180] syzkaller0: entered promiscuous mode [ 463.199550][ T9180] syzkaller0: entered allmulticast mode [ 465.579994][ T9204] fuse: Unknown parameter 'fd0x0000000000000003' [ 466.244253][ T9212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 466.283611][ T9212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 466.593554][ T9215] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1042'. [ 466.678059][ T9216] syzkaller0: entered promiscuous mode [ 466.684934][ T9216] syzkaller0: entered allmulticast mode [ 469.253413][ T9238] fuse: Unknown parameter 'fd0x0000000000000003' [ 470.219318][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.219995][ T9245] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 470.226313][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.310351][ T9245] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 472.817319][ T9265] block nbd5: shutting down sockets [ 472.875476][ T9268] block nbd5: NBD_DISCONNECT [ 474.624911][ T9283] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 474.673321][ T9283] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 476.747444][ T9300] syzkaller0: entered promiscuous mode [ 476.753200][ T9300] syzkaller0: entered allmulticast mode [ 480.724292][ T9355] syzkaller0: entered promiscuous mode [ 480.730077][ T9355] syzkaller0: entered allmulticast mode [ 481.253860][ T9356] syzkaller0: entered promiscuous mode [ 481.259518][ T9356] syzkaller0: entered allmulticast mode [ 485.139513][ T9397] syzkaller0: entered promiscuous mode [ 485.148072][ T9397] syzkaller0: entered allmulticast mode [ 485.433638][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 488.969792][ C1] hrtimer: interrupt took 347130 ns [ 489.009517][ T9449] syzkaller0: entered promiscuous mode [ 489.015315][ T9449] syzkaller0: entered allmulticast mode [ 493.059290][ T9487] syzkaller0: entered promiscuous mode [ 493.065056][ T9487] syzkaller0: entered allmulticast mode [ 496.388638][ T9529] syzkaller0: entered promiscuous mode [ 496.394842][ T9529] syzkaller0: entered allmulticast mode [ 497.432641][ T9547] fuse: Bad value for 'fd' [ 497.450311][ T9539] syzkaller0: entered promiscuous mode [ 497.455962][ T9539] syzkaller0: entered allmulticast mode [ 500.515011][ T9577] fuse: Bad value for 'fd' [ 501.503382][ T9589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 501.747437][ T9583] syzkaller0: entered promiscuous mode [ 501.753475][ T9583] syzkaller0: entered allmulticast mode [ 504.324037][ T9617] fuse: Bad value for 'fd' [ 504.574630][ T9615] syzkaller0: entered promiscuous mode [ 504.580591][ T9615] syzkaller0: entered allmulticast mode [ 506.600343][ T9643] syzkaller0: entered promiscuous mode [ 506.610314][ T9643] syzkaller0: entered allmulticast mode [ 507.151291][ T9657] fuse: Bad value for 'fd' [ 507.845848][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1199'. [ 508.286393][ T9677] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 508.294632][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 510.242613][ T9706] fuse: Invalid rootmode [ 510.615862][ T9704] syzkaller0: entered promiscuous mode [ 510.621660][ T9704] syzkaller0: entered allmulticast mode [ 511.203996][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1212'. [ 512.156143][ T9727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 513.716532][ T9754] fuse: Invalid rootmode [ 514.951005][ T9765] netlink: 'syz.0.1225': attribute type 4 has an invalid length. [ 515.334431][ T9762] syzkaller0: entered promiscuous mode [ 515.340479][ T9762] syzkaller0: entered allmulticast mode [ 515.583484][ T9770] scsi_nl_rcv_msg: discarding partial skb [ 516.495443][ T9785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 517.518591][ T9806] fuse: Invalid rootmode [ 518.282979][ T9813] syzkaller0: entered promiscuous mode [ 518.288651][ T9813] syzkaller0: entered allmulticast mode [ 519.087982][ T9815] scsi_nl_rcv_msg: discarding partial skb [ 521.802282][ T9855] fuse: Bad value for 'rootmode' [ 521.997559][ T9856] syzkaller0: entered promiscuous mode [ 522.003414][ T9856] syzkaller0: entered allmulticast mode [ 522.621822][ T9858] syzkaller0: entered promiscuous mode [ 522.627580][ T9858] syzkaller0: entered allmulticast mode [ 523.833073][ T9863] scsi_nl_rcv_msg: discarding partial skb [ 525.178757][ T9886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 525.985610][ T9899] syzkaller0: entered promiscuous mode [ 525.991492][ T9899] syzkaller0: entered allmulticast mode [ 527.681673][ T9911] scsi_nl_rcv_msg: discarding partial skb [ 528.274557][ T9921] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 530.230666][ T9937] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 531.051082][ T9945] syzkaller0: entered promiscuous mode [ 531.056838][ T9945] syzkaller0: entered allmulticast mode [ 531.652030][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.658650][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.762809][ T9949] scsi_nl_rcv_msg: discarding partial skb [ 532.081936][ T9956] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 532.424755][ T9960] fuse: Unknown parameter 'use00000000000000000000' [ 533.414144][ T9968] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 533.464081][ T9969] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 534.906206][ T9986] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 535.353293][ T9991] fuse: Unknown parameter 'use00000000000000000000' [ 535.527627][ T9983] scsi_nl_rcv_msg: discarding partial skb [ 537.457044][T10021] tipc: Enabled bearer , priority 0 [ 538.264394][T10021] syzkaller0: entered promiscuous mode [ 538.270311][T10021] syzkaller0: entered allmulticast mode [ 538.346607][T10021] tipc: Resetting bearer [ 538.492376][ T5837] tipc: Node number set to 3996753165 [ 538.513751][T10020] tipc: Resetting bearer [ 538.647711][T10038] fuse: Unknown parameter 'use00000000000000000000' [ 538.773906][T10020] tipc: Disabling bearer [ 538.871935][T10030] syzkaller0: entered promiscuous mode [ 538.877850][T10030] syzkaller0: entered allmulticast mode [ 541.537181][T10065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.556633][T10079] fuse: Unknown parameter 'user_i00000000000000000000' [ 544.461432][T10103] fuse: Invalid rootmode [ 547.742239][T10140] fuse: Invalid rootmode [ 549.105507][T10153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1347'. [ 549.876330][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1351'. [ 551.027863][T10179] fuse: Bad value for 'rootmode' [ 553.658775][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1361'. [ 553.754275][T10196] block nbd3: shutting down sockets [ 554.293220][ T6175] udevd[6175]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 554.353409][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 555.372667][T10220] fuse: Bad value for 'rootmode' [ 556.467555][T10241] fuse: Unknown parameter 'user_id00000000000000000000' [ 556.788867][T10243] block nbd5: shutting down sockets [ 557.056445][ T6175] udevd[6175]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 557.198799][ T6175] udevd[6175]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 557.411848][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 557.824237][T10260] fuse: Bad value for 'rootmode' [ 559.231908][T10276] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 559.529208][T10276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.569919][T10281] fuse: Unknown parameter 'user_id00000000000000000000' [ 559.929171][T10278] bond1: (slave veth3): Enslaving as an active interface with a down link [ 559.991315][T10283] block nbd5: shutting down sockets [ 560.152024][T10280] vlan2: entered allmulticast mode [ 560.157641][T10280] veth1: entered allmulticast mode [ 560.227192][T10280] veth1: entered promiscuous mode [ 560.318537][T10280] veth1: left promiscuous mode [ 560.372830][T10280] bond1: (slave vlan2): making interface the new active one [ 560.433720][T10280] veth1: entered promiscuous mode [ 560.504345][T10280] vlan2: entered promiscuous mode [ 560.560038][T10280] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 560.633354][T10292] fuse: Unknown parameter 'use00000000000000000000' [ 560.854208][ T6175] udevd[6175]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 560.883749][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1394'. [ 560.954551][ T6175] udevd[6175]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 563.811430][T10318] fuse: Bad value for 'fd' [ 565.070806][T10328] fuse: Unknown parameter 'use00000000000000000000' [ 565.317296][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1408'. [ 568.640416][T10364] fuse: Unknown parameter 'use00000000000000000000' [ 568.921270][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1420'. [ 572.031261][T10404] fuse: Unknown parameter 'user_i00000000000000000000' [ 572.396149][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1433'. [ 572.776504][T10406] syzkaller0: entered promiscuous mode [ 572.782426][T10406] syzkaller0: entered allmulticast mode [ 573.580135][ T1144] vlan2: left promiscuous mode [ 575.140798][T10441] fuse: Unknown parameter 'user_i00000000000000000000' [ 576.303212][T10450] syzkaller0: entered promiscuous mode [ 576.308875][T10450] syzkaller0: entered allmulticast mode [ 579.140504][T10476] fuse: Unknown parameter 'user_i00000000000000000000' [ 581.029511][T10488] syzkaller0: entered promiscuous mode [ 581.036093][T10488] syzkaller0: entered allmulticast mode [ 582.583031][T10509] fuse: Unknown parameter 'user_id00000000000000000000' [ 583.281210][T10517] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1473'. [ 583.415243][T10522] syzkaller0: entered promiscuous mode [ 583.421289][T10522] syzkaller0: entered allmulticast mode [ 584.753414][T10529] syzkaller0: entered promiscuous mode [ 584.759201][T10529] syzkaller0: entered allmulticast mode [ 588.000846][T10567] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1489'. [ 588.046114][T10571] syzkaller0: entered promiscuous mode [ 588.051902][T10571] syzkaller0: entered allmulticast mode [ 589.547262][T10581] syzkaller0: entered promiscuous mode [ 589.559290][T10581] syzkaller0: entered allmulticast mode [ 591.855594][T10603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1505'. [ 591.873864][T10612] fuse: Unknown parameter '0x0000000000000003' [ 591.908813][T10608] syzkaller0: entered promiscuous mode [ 591.915129][T10608] syzkaller0: entered allmulticast mode [ 593.095617][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.103421][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.815042][T10626] syzkaller0: entered promiscuous mode [ 593.822690][T10626] syzkaller0: entered allmulticast mode [ 595.378810][T10657] fuse: Unknown parameter 'fd0x0000000000000003' [ 595.581382][T10658] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1521'. [ 598.203954][T10684] syzkaller0: entered promiscuous mode [ 598.209919][T10684] syzkaller0: entered allmulticast mode [ 598.992741][T10689] syzkaller0: entered promiscuous mode [ 598.998408][T10689] syzkaller0: entered allmulticast mode [ 599.733251][T10700] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1536'. [ 599.785371][T10701] syzkaller0: entered promiscuous mode [ 599.799963][T10701] syzkaller0: entered allmulticast mode [ 603.154624][T10742] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1553'. [ 603.253847][T10748] syzkaller0: entered promiscuous mode [ 603.259873][T10748] syzkaller0: entered allmulticast mode [ 606.501214][T10786] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1569'. [ 609.609276][T10837] syzkaller0: entered promiscuous mode [ 609.615178][T10837] syzkaller0: entered allmulticast mode [ 616.798734][T10919] syzkaller0: entered promiscuous mode [ 616.804838][T10919] syzkaller0: entered allmulticast mode [ 622.325713][T10989] syzkaller0: entered promiscuous mode [ 622.334686][T10989] syzkaller0: entered allmulticast mode [ 623.579089][T11008] nbd: must specify at least one socket [ 624.123764][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'. [ 624.399836][T11014] syzkaller0: entered promiscuous mode [ 624.405752][T11014] syzkaller0: entered allmulticast mode [ 626.640813][T11064] nbd: must specify at least one socket [ 627.289876][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1666'. [ 627.360130][T11073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1666'. [ 629.921614][T11106] nbd: must specify at least one socket [ 633.908665][ T6183] udevd[6183]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 635.211689][T11184] syzkaller0: entered promiscuous mode [ 635.217487][T11184] syzkaller0: entered allmulticast mode [ 636.124284][ T6175] udevd[6175]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 637.622060][T11219] ===================================================== [ 637.629239][T11219] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 637.636572][T11219] eth_type_trans+0x6a2/0x9b0 [ 637.641498][T11219] __dev_forward_skb2+0x4b1/0x940 [ 637.646704][T11219] dev_forward_skb_nomtu+0x3b/0xe0 [ 637.652208][T11219] __bpf_redirect+0x14d7/0x1760 [ 637.657242][T11219] bpf_clone_redirect+0x4a6/0x6c0 [ 637.662483][T11219] ___bpf_prog_run+0x12af/0xeb60 [ 637.667565][T11219] __bpf_prog_run512+0xc5/0x100 [ 637.672623][T11219] bpf_test_run+0x493/0xdf0 [ 637.677292][T11219] bpf_prog_test_run_skb+0x2376/0x3200 [ 637.683101][T11219] bpf_prog_test_run+0x5bb/0x9f0 [ 637.688216][T11219] __sys_bpf+0x873/0xeb0 [ 637.692637][T11219] __ia32_sys_bpf+0xa4/0xf0 [ 637.697247][T11219] ia32_sys_call+0xa53/0x4340 [ 637.702117][T11219] __do_fast_syscall_32+0x14a/0x310 [ 637.707435][T11219] do_fast_syscall_32+0x37/0x80 [ 637.712468][T11219] do_SYSENTER_32+0x1f/0x30 [ 637.717078][T11219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.723636][T11219] [ 637.726062][T11219] Uninit was created at: [ 637.730612][T11219] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 637.736786][T11219] kmalloc_reserve+0x13c/0x4b0 [ 637.741773][T11219] pskb_expand_head+0x205/0x1900 [ 637.746793][T11219] skb_ensure_writable+0x44e/0x510 [ 637.752349][T11219] bpf_clone_redirect+0x301/0x6c0 [ 637.757652][T11219] ___bpf_prog_run+0x12af/0xeb60 [ 637.763011][T11219] __bpf_prog_run512+0xc5/0x100 [ 637.768061][T11219] bpf_test_run+0x493/0xdf0 [ 637.772789][T11219] bpf_prog_test_run_skb+0x2376/0x3200 [ 637.778366][T11219] bpf_prog_test_run+0x5bb/0x9f0 [ 637.783736][T11219] __sys_bpf+0x873/0xeb0 [ 637.788076][T11219] __ia32_sys_bpf+0xa4/0xf0 [ 637.792841][T11219] ia32_sys_call+0xa53/0x4340 [ 637.797621][T11219] __do_fast_syscall_32+0x14a/0x310 [ 637.803023][T11219] do_fast_syscall_32+0x37/0x80 [ 637.807967][T11219] do_SYSENTER_32+0x1f/0x30 [ 637.812654][T11219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.819069][T11219] [ 637.821544][T11219] CPU: 1 UID: 0 PID: 11219 Comm: syz.3.1713 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 637.833117][T11219] Tainted: [L]=SOFTLOCKUP [ 637.837572][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 637.847809][T11219] ===================================================== [ 637.855016][T11219] Disabling lock debugging due to kernel taint [ 637.861309][T11219] Kernel panic - not syncing: kmsan.panic set ... [ 637.867781][T11219] CPU: 1 UID: 0 PID: 11219 Comm: syz.3.1713 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 637.879282][T11219] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 637.884907][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 637.895042][T11219] Call Trace: [ 637.898366][T11219] [ 637.901332][T11219] __dump_stack+0x26/0x30 [ 637.905749][T11219] dump_stack_lvl+0x50/0x1c0 [ 637.910410][T11219] ? dump_stack+0x12/0x25 [ 637.914817][T11219] dump_stack+0x1e/0x25 [ 637.919061][T11219] vpanic+0x435/0xd40 [ 637.923168][T11219] panic+0x15d/0x160 [ 637.927175][T11219] kmsan_report+0x31a/0x320 [ 637.931784][T11219] ? __msan_warning+0x1b/0x30 [ 637.936618][T11219] ? eth_type_trans+0x6a2/0x9b0 [ 637.941532][T11219] ? __dev_forward_skb2+0x4b1/0x940 [ 637.946805][T11219] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 637.952174][T11219] ? __bpf_redirect+0x14d7/0x1760 [ 637.957471][T11219] ? bpf_clone_redirect+0x4a6/0x6c0 [ 637.962786][T11219] ? ___bpf_prog_run+0x12af/0xeb60 [ 637.968058][T11219] ? __bpf_prog_run512+0xc5/0x100 [ 637.973284][T11219] ? bpf_test_run+0x493/0xdf0 [ 637.978096][T11219] ? bpf_prog_test_run_skb+0x2376/0x3200 [ 637.983847][T11219] ? bpf_prog_test_run+0x5bb/0x9f0 [ 637.989215][T11219] ? __sys_bpf+0x873/0xeb0 [ 637.993725][T11219] ? __ia32_sys_bpf+0xa4/0xf0 [ 637.998479][T11219] ? ia32_sys_call+0xa53/0x4340 [ 638.003428][T11219] ? __do_fast_syscall_32+0x14a/0x310 [ 638.009410][T11219] ? do_fast_syscall_32+0x37/0x80 [ 638.014569][T11219] ? do_SYSENTER_32+0x1f/0x30 [ 638.019357][T11219] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.026080][T11219] ? should_fail_ex+0x45/0x8c0 [ 638.031564][T11219] ? stack_depot_save_flags+0x35/0x790 [ 638.037137][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.042472][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.047870][T11219] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 638.054340][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.059735][T11219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 638.065875][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.071130][T11219] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 638.077793][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.083053][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.088412][T11219] __msan_warning+0x1b/0x30 [ 638.093137][T11219] eth_type_trans+0x6a2/0x9b0 [ 638.098008][T11219] __dev_forward_skb2+0x4b1/0x940 [ 638.103193][T11219] dev_forward_skb_nomtu+0x3b/0xe0 [ 638.108442][T11219] __bpf_redirect+0x14d7/0x1760 [ 638.113446][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.118767][T11219] bpf_clone_redirect+0x4a6/0x6c0 [ 638.123958][T11219] ___bpf_prog_run+0x12af/0xeb60 [ 638.129042][T11219] __bpf_prog_run512+0xc5/0x100 [ 638.134038][T11219] ? kmsan_internal_poison_memory+0x78/0x90 [ 638.140121][T11219] ? kmsan_internal_poison_memory+0x4a/0x90 [ 638.146123][T11219] ? kmsan_slab_alloc+0xdc/0x160 [ 638.151172][T11219] ? kmem_cache_alloc_noprof+0x967/0x1730 [ 638.156968][T11219] ? slab_build_skb+0x5c/0x5a0 [ 638.161829][T11219] ? bpf_prog_test_run_skb+0x750/0x3200 [ 638.167480][T11219] ? bpf_prog_test_run+0x5bb/0x9f0 [ 638.172692][T11219] ? __sys_bpf+0x873/0xeb0 [ 638.177200][T11219] ? __ia32_sys_bpf+0xa4/0xf0 [ 638.181961][T11219] ? ia32_sys_call+0xa53/0x4340 [ 638.186924][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.192164][T11219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 638.198175][T11219] ? bpf_test_run+0x31/0xdf0 [ 638.202876][T11219] ? filter_irq_stacks+0x49/0x190 [ 638.207990][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.213207][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.218420][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.223641][T11219] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 638.230070][T11219] ? kmsan_get_metadata+0x146/0x160 [ 638.235383][T11219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 638.241294][T11219] ? __pfx___bpf_prog_run512+0x10/0x10 [ 638.246855][T11219] ? __pfx___bpf_prog_run512+0x10/0x10 [ 638.252408][T11219] bpf_test_run+0x493/0xdf0 [ 638.257005][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.262216][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.267443][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.272728][T11219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 638.278687][T11219] ? bpf_test_run+0x2f4/0xdf0 [ 638.283482][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.288705][T11219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 638.294640][T11219] bpf_prog_test_run_skb+0x2376/0x3200 [ 638.300208][T11219] ? kmsan_get_metadata+0xf1/0x160 [ 638.305439][T11219] ? __rcu_read_unlock+0x6c/0xd0 [ 638.310492][T11219] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 638.316406][T11219] bpf_prog_test_run+0x5bb/0x9f0 [ 638.321443][T11219] __sys_bpf+0x873/0xeb0 [ 638.325805][T11219] __ia32_sys_bpf+0xa4/0xf0 [ 638.330391][T11219] ia32_sys_call+0xa53/0x4340 [ 638.335168][T11219] __do_fast_syscall_32+0x14a/0x310 [ 638.340470][T11219] do_fast_syscall_32+0x37/0x80 [ 638.345403][T11219] do_SYSENTER_32+0x1f/0x30 [ 638.349987][T11219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.356409][T11219] RIP: 0023:0xf7fc1539 [ 638.360525][T11219] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 638.380239][T11219] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 638.388739][T11219] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 638.396783][T11219] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 638.404851][T11219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.412892][T11219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 638.420922][T11219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.428977][T11219] [ 638.432451][T11219] Kernel Offset: disabled [ 638.436829][T11219] Rebooting in 86400 seconds..