last executing test programs: 3m32.78793231s ago: executing program 3 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m32.535006965s ago: executing program 3 (id=43): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) 3m32.331947914s ago: executing program 3 (id=44): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 3m31.987991423s ago: executing program 3 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 3m31.614653565s ago: executing program 3 (id=50): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40488d1}, 0x8000) 3m29.451612204s ago: executing program 3 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x1c, 0x10, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000001fffffffb70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4}, 0x94) 3m28.157065447s ago: executing program 32 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x1c, 0x10, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000001fffffffb70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4}, 0x94) 2m55.007617031s ago: executing program 1 (id=231): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "80000000001e004e"}]}}}}}}}, 0x0) 2m54.677973273s ago: executing program 1 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%pK \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m54.494497715s ago: executing program 1 (id=236): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 2m54.304038851s ago: executing program 1 (id=238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) 2m54.087549647s ago: executing program 1 (id=240): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) 2m53.723110446s ago: executing program 1 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m38.405881671s ago: executing program 33 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m37.522827341s ago: executing program 5 (id=388): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 2m37.317734832s ago: executing program 5 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_extract_tcp_res(0x0, 0x1c, 0xe) write$tun(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x63250682b6e629d5, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b6734b718585"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 2m36.570297058s ago: executing program 5 (id=398): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="0033c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m36.31187766s ago: executing program 5 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00004000000061119c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2m36.039317168s ago: executing program 5 (id=401): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) 2m35.746849992s ago: executing program 2 (id=402): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) 2m35.704647648s ago: executing program 5 (id=403): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000300), &(0x7f00000004c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 2m35.41595891s ago: executing program 2 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000003080)=""/4098, 0x1002) 2m35.04654855s ago: executing program 2 (id=406): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001480)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x800, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2m34.67200714s ago: executing program 2 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m33.580637087s ago: executing program 2 (id=412): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) 2m33.516340144s ago: executing program 2 (id=413): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) 2m20.05861283s ago: executing program 34 (id=403): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000300), &(0x7f00000004c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 2m18.292759372s ago: executing program 35 (id=413): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) 39.314522814s ago: executing program 0 (id=1040): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.051652134s ago: executing program 0 (id=1044): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000c00)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000cad000/0x3000)=nil, 0x3000}) 38.289805848s ago: executing program 0 (id=1050): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xc0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffd88, &(0x7f0000000440), 0x1}, 0x2002) 38.136376574s ago: executing program 0 (id=1051): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0xb0}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 37.386087414s ago: executing program 0 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000050000008500000082000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 37.220716619s ago: executing program 0 (id=1063): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbb) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 22.046626281s ago: executing program 36 (id=1063): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbb) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 4.92271958s ago: executing program 4 (id=1182): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0x9, 'q\x00'}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) 4.35004762s ago: executing program 7 (id=1186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x0, 0x5}) 3.797208507s ago: executing program 6 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) 3.667979438s ago: executing program 7 (id=1191): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 2.095226973s ago: executing program 4 (id=1193): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}, {&(0x7f0000000540)="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", 0xeac}], 0x2}, 0x24004010) 1.994375532s ago: executing program 6 (id=1194): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6}) 1.681693696s ago: executing program 4 (id=1195): socket(0x10, 0x3, 0x0) r0 = gettid() r1 = timerfd_create(0x1, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1.680715834s ago: executing program 7 (id=1196): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b6574000008000240"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 1.562385752s ago: executing program 8 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071110900000000008510000002000000850000002700000095000000000000009500a505000000005253c3c28e2c374041a6975ae3b5722913f93d4a772c9422bd55d83190ab144f4ae493e92271f06e32de2442263616038f770320c26ab27b4874ccbecf4adf8370228d32028ee472ac9e2ee50ccb6d930b6e40c77cf349e699fd37ddb02c5f7133b5cda82f68f442699c1be8e2c6ad39236f28d53a642caa4f8874dd"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 1.383961604s ago: executing program 8 (id=1198): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000600), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x18}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0xda]}}, 0x0, 0x4f}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, &(0x7f0000000100)=r3, 0x5042) 1.383730733s ago: executing program 6 (id=1199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.33995786s ago: executing program 8 (id=1200): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8810}, 0xc040040) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x1000000}) 1.303477227s ago: executing program 7 (id=1201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffdfffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000000)="e0b9547e2db800", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.115947146s ago: executing program 8 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x38}}, 0x0) 1.06122885s ago: executing program 6 (id=1203): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff0500000008"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1.016349849s ago: executing program 7 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00004000000061119c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 787.868423ms ago: executing program 8 (id=1205): socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) 765.117372ms ago: executing program 6 (id=1206): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) pipe(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 624.569608ms ago: executing program 7 (id=1207): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)) 622.942647ms ago: executing program 4 (id=1208): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071110900000000008510000002000000850000002700000095000000000000009500a505000000005253c3c28e2c374041a6975ae3b5722913f93d4a772c9422bd55d83190ab144f4ae493e92271f06e32de2442263616038f770320c26ab27b4874ccbecf4adf8370228d32028ee472ac9e2ee50ccb6d930b6e40c77cf349e699fd37ddb02c5f7133b5cda82f68f442699c1be8e2c6ad39236f28d53a642caa4f8874dd"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 547.854707ms ago: executing program 8 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 473.091658ms ago: executing program 6 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 325.253397ms ago: executing program 4 (id=1211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}}) 0s ago: executing program 4 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 76.612765][ T5826] cgroup: Unknown subsys name 'net' [ 76.879022][ T5826] cgroup: Unknown subsys name 'cpuset' [ 76.964721][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.609025][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.891831][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.895690][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.898794][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.899679][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.900258][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.902478][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.903325][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.906339][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.960906][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.963655][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.966695][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.966730][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.969806][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.977220][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.978348][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.981287][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.983936][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.988704][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.001010][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.016511][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.022886][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.023336][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.051247][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.053444][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.055027][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.927015][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.991192][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 84.057152][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 84.163026][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.376118][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 84.855945][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.856105][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.856652][ T5837] bridge_slave_0: entered allmulticast mode [ 84.859692][ T5837] bridge_slave_0: entered promiscuous mode [ 85.006028][ T5844] Bluetooth: hci0: command tx timeout [ 85.030963][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.031102][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.031284][ T5837] bridge_slave_1: entered allmulticast mode [ 85.033092][ T5837] bridge_slave_1: entered promiscuous mode [ 85.043543][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.043675][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.043865][ T5841] bridge_slave_0: entered allmulticast mode [ 85.054479][ T5841] bridge_slave_0: entered promiscuous mode [ 85.084246][ T5844] Bluetooth: hci3: command tx timeout [ 85.084256][ T5848] Bluetooth: hci1: command tx timeout [ 85.084461][ T5844] Bluetooth: hci4: command tx timeout [ 85.164277][ T5848] Bluetooth: hci2: command tx timeout [ 85.365124][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.365230][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.365383][ T5841] bridge_slave_1: entered allmulticast mode [ 85.367193][ T5841] bridge_slave_1: entered promiscuous mode [ 85.495452][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.495590][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.495757][ T5838] bridge_slave_0: entered allmulticast mode [ 85.498566][ T5838] bridge_slave_0: entered promiscuous mode [ 85.645737][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.645916][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.646072][ T5838] bridge_slave_1: entered allmulticast mode [ 85.648582][ T5838] bridge_slave_1: entered promiscuous mode [ 85.649982][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.650117][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.650299][ T5839] bridge_slave_0: entered allmulticast mode [ 85.653254][ T5839] bridge_slave_0: entered promiscuous mode [ 85.752066][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.925668][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.925762][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.925885][ T5839] bridge_slave_1: entered allmulticast mode [ 85.927428][ T5839] bridge_slave_1: entered promiscuous mode [ 86.027669][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.030502][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.181730][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.181865][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.182009][ T5840] bridge_slave_0: entered allmulticast mode [ 86.183470][ T5840] bridge_slave_0: entered promiscuous mode [ 86.298523][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.463374][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.568297][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.568458][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.568672][ T5840] bridge_slave_1: entered allmulticast mode [ 86.570348][ T5840] bridge_slave_1: entered promiscuous mode [ 86.728060][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.730824][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.828472][ T5837] team0: Port device team_slave_0 added [ 86.856096][ T44] cfg80211: failed to load regulatory.db [ 86.980979][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.046929][ T5837] team0: Port device team_slave_1 added [ 87.050902][ T5841] team0: Port device team_slave_0 added [ 87.084464][ T5848] Bluetooth: hci0: command tx timeout [ 87.164478][ T5848] Bluetooth: hci4: command tx timeout [ 87.164510][ T5848] Bluetooth: hci1: command tx timeout [ 87.164530][ T5848] Bluetooth: hci3: command tx timeout [ 87.172413][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.244207][ T59] Bluetooth: hci2: command tx timeout [ 87.249612][ T5841] team0: Port device team_slave_1 added [ 87.252191][ T5838] team0: Port device team_slave_0 added [ 87.319717][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.466396][ T5838] team0: Port device team_slave_1 added [ 87.468227][ T5839] team0: Port device team_slave_0 added [ 87.781484][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.781496][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.781510][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.939279][ T5839] team0: Port device team_slave_1 added [ 88.027069][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.027086][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.027100][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.028088][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.028099][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.028111][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.258437][ T5840] team0: Port device team_slave_0 added [ 88.278834][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.278849][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.278872][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.281149][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.281161][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.281174][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.408959][ T5840] team0: Port device team_slave_1 added [ 88.422029][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.422043][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.422067][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.427318][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.427332][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.427354][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.536400][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.536415][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.536438][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.706707][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.706723][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.706745][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.880195][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.880210][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.880233][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.892616][ T5837] hsr_slave_0: entered promiscuous mode [ 88.895825][ T5837] hsr_slave_1: entered promiscuous mode [ 89.116594][ T5841] hsr_slave_0: entered promiscuous mode [ 89.117987][ T5841] hsr_slave_1: entered promiscuous mode [ 89.119087][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 89.119158][ T5841] Cannot create hsr debugfs directory [ 89.164474][ T59] Bluetooth: hci0: command tx timeout [ 89.245639][ T5848] Bluetooth: hci1: command tx timeout [ 89.245670][ T5848] Bluetooth: hci4: command tx timeout [ 89.245876][ T59] Bluetooth: hci3: command tx timeout [ 89.287678][ T5838] hsr_slave_0: entered promiscuous mode [ 89.288465][ T5838] hsr_slave_1: entered promiscuous mode [ 89.288994][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 89.289012][ T5838] Cannot create hsr debugfs directory [ 89.325157][ T59] Bluetooth: hci2: command tx timeout [ 89.610700][ T5839] hsr_slave_0: entered promiscuous mode [ 89.611643][ T5839] hsr_slave_1: entered promiscuous mode [ 89.612206][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 89.612224][ T5839] Cannot create hsr debugfs directory [ 90.004313][ T5840] hsr_slave_0: entered promiscuous mode [ 90.005648][ T5840] hsr_slave_1: entered promiscuous mode [ 90.006563][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 90.006585][ T5840] Cannot create hsr debugfs directory [ 91.255042][ T59] Bluetooth: hci0: command tx timeout [ 91.336091][ T5844] Bluetooth: hci4: command tx timeout [ 91.336123][ T5844] Bluetooth: hci1: command tx timeout [ 91.336171][ T59] Bluetooth: hci3: command tx timeout [ 91.367755][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.404127][ T59] Bluetooth: hci2: command tx timeout [ 91.408757][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.462621][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.529016][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.663178][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.695674][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.731917][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.787984][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.950211][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.993261][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.011881][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.078171][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.235053][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.290814][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.337026][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.393502][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.484632][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.583891][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.644755][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.691254][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.730190][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.771131][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.822841][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.823487][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.862744][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.888194][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.888376][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.991998][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.042414][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.042540][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.086374][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.105477][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.105689][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.205929][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.250800][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.273908][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.274280][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.389951][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.390182][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.498240][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.528765][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.565064][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.565279][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.642510][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.642669][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.740204][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.791562][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.828613][ T1548] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.828817][ T1548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.880192][ T1548] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.881390][ T1548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.150207][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.539439][ T5841] veth0_vlan: entered promiscuous mode [ 94.572934][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.591755][ T5841] veth1_vlan: entered promiscuous mode [ 94.832815][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.876287][ T5841] veth0_macvtap: entered promiscuous mode [ 94.917561][ T5841] veth1_macvtap: entered promiscuous mode [ 94.932088][ T5838] veth0_vlan: entered promiscuous mode [ 94.960428][ T5837] veth0_vlan: entered promiscuous mode [ 94.981847][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.011824][ T5838] veth1_vlan: entered promiscuous mode [ 95.028298][ T5837] veth1_vlan: entered promiscuous mode [ 95.036615][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.086304][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.130493][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.150461][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.151302][ T5840] veth0_vlan: entered promiscuous mode [ 95.171723][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.191847][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.279052][ T5840] veth1_vlan: entered promiscuous mode [ 95.350628][ T5838] veth0_macvtap: entered promiscuous mode [ 95.382527][ T5837] veth0_macvtap: entered promiscuous mode [ 95.465656][ T5838] veth1_macvtap: entered promiscuous mode [ 95.467737][ T5839] veth0_vlan: entered promiscuous mode [ 95.488489][ T5837] veth1_macvtap: entered promiscuous mode [ 95.581675][ T5839] veth1_vlan: entered promiscuous mode [ 95.620876][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.620898][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.648800][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.681206][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.708413][ T5840] veth0_macvtap: entered promiscuous mode [ 95.722356][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.729316][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.777166][ T5840] veth1_macvtap: entered promiscuous mode [ 95.798084][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799112][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.799127][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.813692][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.849070][ T1178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.895655][ T1178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.903627][ T1178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.925903][ T1410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.987932][ T1410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.991792][ T1410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.996965][ T5839] veth0_macvtap: entered promiscuous mode [ 96.037665][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.094599][ T5839] veth1_macvtap: entered promiscuous mode [ 96.168257][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.324131][ T1548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.337134][ T1548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.379176][ T1548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.408095][ T1548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.408572][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.408586][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.487759][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.556747][ T1548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.556766][ T1548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.619001][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.740142][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.740160][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.785835][ T1174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.865900][ T1174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.946411][ T1174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.981138][ T1174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.990430][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.990448][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.179010][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.179030][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.599208][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.599228][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.846693][ T1548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.846712][ T1548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.987728][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.987747][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.655363][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.829831][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'. [ 98.829854][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 98.916987][ T6017] Zero length message leads to an empty skb [ 99.959164][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 99.959186][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 101.995754][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'. [ 101.995783][ T6057] netlink: 52 bytes leftover after parsing attributes in process `syz.4.41'. [ 103.273354][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 103.273383][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 104.726318][ T5842] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.908384][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 105.169648][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.380627][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.396507][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.401955][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.404720][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.413253][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.692280][ T6120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.765777][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.771879][ T5842] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 105.771925][ T5842] usb 5-1: can't read configurations, error -71 [ 106.495539][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.629344][ T6155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.85'. [ 106.629371][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 107.096202][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.224075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.566344][ T5848] Bluetooth: hci4: command tx timeout [ 107.637470][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.934103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.646512][ T5848] Bluetooth: hci4: command tx timeout [ 109.770539][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'. [ 109.770565][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 110.027289][ T37] audit: type=1800 audit(1756691617.033:2): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.91" name="/" dev="9p" ino=2 res=0 errno=0 [ 110.103901][ T83] bridge_slave_1: left allmulticast mode [ 110.112061][ T83] bridge_slave_1: left promiscuous mode [ 110.113890][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.356781][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 110.437783][ T83] bridge_slave_0: left allmulticast mode [ 110.437818][ T83] bridge_slave_0: left promiscuous mode [ 110.438106][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.724503][ T5848] Bluetooth: hci4: command tx timeout [ 113.804208][ T5848] Bluetooth: hci4: command tx timeout [ 114.687257][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.875040][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.953748][ T83] bond0 (unregistering): Released all slaves [ 115.114563][ T6232] tap0: tun_chr_ioctl cmd 1073935638 [ 115.127522][ T6234] tap0: tun_chr_ioctl cmd 2147767517 [ 117.954203][ T5923] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.346488][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 119.165378][ T6300] gre1: entered allmulticast mode [ 119.496527][ T6295] bond1: option mode: unable to set because the bond device is up [ 119.565117][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.586709][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 119.586746][ T5923] usb 5-1: can't read configurations, error -71 [ 120.531854][ T6140] chnl_net:caif_netlink_parms(): no params data found [ 120.738448][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 120.844284][ T83] hsr_slave_0: left promiscuous mode [ 120.884958][ T83] hsr_slave_1: left promiscuous mode [ 120.886185][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.886253][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.943166][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.943195][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.035259][ T83] veth1_macvtap: left promiscuous mode [ 121.035570][ T83] veth0_macvtap: left promiscuous mode [ 121.036224][ T83] veth1_vlan: left promiscuous mode [ 121.036608][ T83] veth0_vlan: left promiscuous mode [ 123.267784][ T83] team0 (unregistering): Port device team_slave_1 removed [ 123.498905][ T83] team0 (unregistering): Port device team_slave_0 removed [ 125.792031][ T6323] netlink: 'syz.0.150': attribute type 29 has an invalid length. [ 127.914316][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.914462][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.914695][ T6140] bridge_slave_0: entered allmulticast mode [ 127.922485][ T6140] bridge_slave_0: entered promiscuous mode [ 127.983468][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.983628][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.983854][ T6140] bridge_slave_1: entered allmulticast mode [ 127.994217][ T6140] bridge_slave_1: entered promiscuous mode [ 128.104235][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.254123][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 128.507446][ T6360] bond1: option mode: unable to set because the bond device is up [ 128.545085][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.546467][ T5901] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 128.546502][ T5901] usb 5-1: can't read configurations, error -71 [ 128.563479][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.612113][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.025920][ T6382] netlink: 'syz.1.162': attribute type 29 has an invalid length. [ 129.029635][ T6140] team0: Port device team_slave_0 added [ 129.269366][ T6383] netlink: 'syz.1.162': attribute type 29 has an invalid length. [ 129.291189][ T6140] team0: Port device team_slave_1 added [ 129.855305][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.855320][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.855342][ T6140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.869179][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.869194][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.869216][ T6140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.043959][ T6411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.056112][ T6411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 130.167730][ T6020] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.316049][ T6020] usb 5-1: Using ep0 maxpacket: 16 [ 130.381649][ T6407] bond1: option mode: unable to set because the bond device is up [ 130.446177][ T6020] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.447546][ T6020] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.447581][ T6020] usb 5-1: can't read configurations, error -71 [ 130.489363][ T6140] hsr_slave_0: entered promiscuous mode [ 130.492398][ T6140] hsr_slave_1: entered promiscuous mode [ 130.508657][ T6140] debugfs: 'hsr0' already exists in 'hsr' [ 130.508701][ T6140] Cannot create hsr debugfs directory [ 130.705907][ T6427] netlink: 'syz.1.177': attribute type 29 has an invalid length. [ 130.732659][ T6431] netlink: 'syz.1.177': attribute type 29 has an invalid length. [ 132.940114][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940218][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.974152][ T6140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.036629][ T6140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.226862][ T6140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.372182][ T6140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.979754][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.056776][ T6140] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.102765][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.103369][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.145544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.145781][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.249958][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.968177][ T6562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.292752][ T6576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.292926][ T6576] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 136.779572][ T6140] veth0_vlan: entered promiscuous mode [ 136.868477][ T6140] veth1_vlan: entered promiscuous mode [ 137.078590][ T6140] veth0_macvtap: entered promiscuous mode [ 137.114865][ T6140] veth1_macvtap: entered promiscuous mode [ 137.213326][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.239521][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.278786][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.279054][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.279105][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.279136][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.832081][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.832114][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.089212][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.089233][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.221493][ T6662] loop7: detected capacity change from 0 to 16384 [ 139.452767][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.453303][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.453473][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.476165][ T6666] loop7: detected capacity change from 16384 to 0 [ 139.482844][ C0] I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 2 [ 140.661586][ T6707] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.928527][ T6740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.044587][ T6773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.950890][ T6786] GUP no longer grows the stack in syz.4.295 (6786): 200000004000-20000000a000 (200000002000) [ 144.950938][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.4.295 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 144.950959][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.950976][ T6786] Call Trace: [ 144.950983][ T6786] [ 144.950991][ T6786] dump_stack_lvl+0x189/0x250 [ 144.951028][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.951053][ T6786] ? __pfx__printk+0x10/0x10 [ 144.951069][ T6786] ? find_vma+0xe7/0x160 [ 144.951106][ T6786] __get_user_pages+0x237e/0x2b60 [ 144.951167][ T6786] get_user_pages_remote+0x2f1/0xad0 [ 144.951190][ T6786] ? __pfx_mtree_load+0x10/0x10 [ 144.951219][ T6786] ? __pfx_get_user_pages_remote+0x10/0x10 [ 144.951245][ T6786] ? __access_remote_vm+0x367/0x7d0 [ 144.951274][ T6786] __access_remote_vm+0x211/0x7d0 [ 144.951309][ T6786] ? __pfx___access_remote_vm+0x10/0x10 [ 144.951331][ T6786] ? set_page_refcounted+0xa0/0x1e0 [ 144.951356][ T6786] ? alloc_pages_noprof+0xe4/0x1e0 [ 144.951384][ T6786] proc_pid_cmdline_read+0x433/0x810 [ 144.951408][ T6786] ? __asan_memset+0x22/0x50 [ 144.951434][ T6786] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 144.951462][ T6786] ? rw_verify_area+0x2ac/0x4e0 [ 144.951487][ T6786] vfs_readv+0x5b3/0x850 [ 144.951511][ T6786] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 144.951548][ T6786] ? __pfx_vfs_readv+0x10/0x10 [ 144.951590][ T6786] ? __fget_files+0x2a/0x420 [ 144.951620][ T6786] ? __fget_files+0x3a6/0x420 [ 144.951641][ T6786] ? __fget_files+0x2a/0x420 [ 144.951675][ T6786] __x64_sys_preadv+0x19a/0x2a0 [ 144.951701][ T6786] ? __pfx___x64_sys_preadv+0x10/0x10 [ 144.951721][ T6786] ? rcu_is_watching+0x15/0xb0 [ 144.951751][ T6786] ? do_syscall_64+0xbe/0x3b0 [ 144.951778][ T6786] do_syscall_64+0xfa/0x3b0 [ 144.951799][ T6786] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.951834][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.951852][ T6786] ? clear_bhb_loop+0x60/0xb0 [ 144.951875][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.951892][ T6786] RIP: 0033:0x7fef0ffcebe9 [ 144.951912][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.951927][ T6786] RSP: 002b:00007fef0e20d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 144.951953][ T6786] RAX: ffffffffffffffda RBX: 00007fef10206090 RCX: 00007fef0ffcebe9 [ 144.951967][ T6786] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000b [ 144.951978][ T6786] RBP: 00007fef10051e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.951989][ T6786] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 144.952000][ T6786] R13: 00007fef10206128 R14: 00007fef10206090 R15: 00007ffeee62e3b8 [ 144.952031][ T6786] [ 145.252376][ T6804] tty tty1: ldisc open failed (-12), clearing slot 0 [ 145.528437][ T6800] syz.5.298 (6800) used greatest stack depth: 18904 bytes left [ 145.860838][ T6807] syz.5.298 (6807) used greatest stack depth: 18776 bytes left [ 147.325385][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 150.133598][ T6929] netlink: 'syz.4.348': attribute type 5 has an invalid length. [ 150.735511][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 151.454437][ T6962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.421060][ T7042] syz.0.383 uses obsolete (PF_INET,SOCK_PACKET) [ 155.289172][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.306608][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.312480][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.334159][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.343546][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.967698][ T5942] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.114218][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 156.472368][ T7077] bond1: option mode: unable to set because the bond device is up [ 156.478800][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.479853][ T5942] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 156.479883][ T5942] usb 5-1: can't read configurations, error -71 [ 156.848587][ T6113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.200475][ T7108] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.200666][ T7108] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 157.404551][ T59] Bluetooth: hci5: command tx timeout [ 157.420690][ T6113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.909623][ T6113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.064464][ T7121] tipc: Started in network mode [ 158.064495][ T7121] tipc: Node identity de96972fc667, cluster identity 4711 [ 158.067375][ T7121] tipc: Enabled bearer , priority 0 [ 158.115841][ T7119] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 158.119769][ T7119] tipc: Resetting bearer [ 158.342446][ T6113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.442700][ T7122] syzkaller0: entered promiscuous mode [ 158.442728][ T7122] syzkaller0: entered allmulticast mode [ 158.478547][ T7117] tipc: Resetting bearer [ 158.583072][ T7117] tipc: Disabling bearer [ 159.334434][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.482340][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 159.488827][ T59] Bluetooth: hci5: command tx timeout [ 159.496631][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 159.557102][ T7144] bond1: option mode: unable to set because the bond device is up [ 159.602454][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.604518][ T5901] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 159.604552][ T5901] usb 5-1: can't read configurations, error -71 [ 159.665165][ T6113] bridge_slave_1: left allmulticast mode [ 159.665197][ T6113] bridge_slave_1: left promiscuous mode [ 159.665443][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.727761][ T6113] bridge_slave_0: left allmulticast mode [ 159.727791][ T6113] bridge_slave_0: left promiscuous mode [ 159.728614][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.543652][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 161.573025][ T59] Bluetooth: hci5: command tx timeout [ 163.436336][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059fe6400: rx timeout, send abort [ 163.438749][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc06400: rx timeout, send abort [ 163.438892][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059fe6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 163.440149][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc06400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 163.653026][ T59] Bluetooth: hci5: command tx timeout [ 163.936564][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.995028][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.042295][ T6113] bond0 (unregistering): Released all slaves [ 165.316060][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.317538][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.026437][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.045652][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.231466][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.290168][ T1118] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.707048][ T1118] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.874852][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.116132][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.116291][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.116524][ T7065] bridge_slave_0: entered allmulticast mode [ 168.119363][ T7065] bridge_slave_0: entered promiscuous mode [ 168.152602][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.152746][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.152971][ T7065] bridge_slave_1: entered allmulticast mode [ 168.162086][ T7065] bridge_slave_1: entered promiscuous mode [ 168.400558][ T6113] hsr_slave_0: left promiscuous mode [ 168.454171][ T6113] hsr_slave_1: left promiscuous mode [ 168.455100][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.455128][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.514629][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.514661][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.650478][ T6113] veth1_macvtap: left promiscuous mode [ 168.650603][ T6113] veth0_macvtap: left promiscuous mode [ 168.650904][ T6113] veth1_vlan: left promiscuous mode [ 168.651115][ T6113] veth0_vlan: left promiscuous mode [ 171.516260][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 171.714979][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 173.077204][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.112392][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.113528][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.141064][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.143032][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.806998][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.810904][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.811931][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.813423][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.815789][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.964809][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.003489][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.244306][ T59] Bluetooth: hci3: command tx timeout [ 176.571523][ T7065] team0: Port device team_slave_0 added [ 176.601458][ T7243] netlink: 'syz.0.449': attribute type 29 has an invalid length. [ 176.605565][ T7065] team0: Port device team_slave_1 added [ 176.617402][ T7243] netlink: 'syz.0.449': attribute type 29 has an invalid length. [ 176.926737][ T59] Bluetooth: hci4: command tx timeout [ 177.157395][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.157411][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.157435][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.298913][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.298928][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.298945][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.326717][ T59] Bluetooth: hci3: command tx timeout [ 178.149435][ T7065] hsr_slave_0: entered promiscuous mode [ 178.155682][ T7065] hsr_slave_1: entered promiscuous mode [ 178.156584][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 178.156606][ T7065] Cannot create hsr debugfs directory [ 179.004601][ T59] Bluetooth: hci4: command tx timeout [ 179.199109][ T6113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.327991][ T7312] syzkaller1: entered promiscuous mode [ 179.328016][ T7312] syzkaller1: entered allmulticast mode [ 179.404346][ T59] Bluetooth: hci3: command tx timeout [ 179.897955][ T6113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.255487][ T7327] overlayfs: failed to resolve './file0': -2 [ 180.561435][ T6113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.000177][ T7346] overlayfs: failed to resolve './file0': -2 [ 181.069164][ T6113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.084594][ T59] Bluetooth: hci4: command tx timeout [ 181.484568][ T59] Bluetooth: hci3: command tx timeout [ 181.528670][ T7214] chnl_net:caif_netlink_parms(): no params data found [ 181.592085][ T7357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 181.935539][ T7225] chnl_net:caif_netlink_parms(): no params data found [ 182.035910][ T7368] overlayfs: failed to resolve './file0': -2 [ 183.164312][ T59] Bluetooth: hci4: command tx timeout [ 183.318658][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.318798][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.319042][ T7214] bridge_slave_0: entered allmulticast mode [ 183.321837][ T7214] bridge_slave_0: entered promiscuous mode [ 183.480234][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.480393][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.480667][ T7214] bridge_slave_1: entered allmulticast mode [ 183.512558][ T7214] bridge_slave_1: entered promiscuous mode [ 183.763227][ T7410] overlayfs: failed to resolve './file1': -2 [ 183.933873][ T7065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.969396][ T6113] bridge_slave_1: left allmulticast mode [ 183.969427][ T6113] bridge_slave_1: left promiscuous mode [ 183.971408][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.056035][ T6113] bridge_slave_0: left allmulticast mode [ 184.056067][ T6113] bridge_slave_0: left promiscuous mode [ 184.056375][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.145266][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.204831][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.228962][ T6113] bond0 (unregistering): Released all slaves [ 186.390714][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.394386][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.394638][ T7225] bridge_slave_0: entered allmulticast mode [ 186.407438][ T7225] bridge_slave_0: entered promiscuous mode [ 186.418980][ T7065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 186.510097][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 186.529630][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.530098][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.530243][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.530445][ T7225] bridge_slave_1: entered allmulticast mode [ 186.566802][ T7225] bridge_slave_1: entered promiscuous mode [ 186.572342][ T7065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 186.650090][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.049980][ T7065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.995397][ T7225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.319940][ T7214] team0: Port device team_slave_0 added [ 190.417890][ T7225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.455037][ T7214] team0: Port device team_slave_1 added [ 190.523805][ T7454] overlayfs: failed to resolve './file1': -2 [ 190.914480][ T6113] hsr_slave_0: left promiscuous mode [ 190.960298][ T6113] hsr_slave_1: left promiscuous mode [ 190.961296][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.961322][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.987507][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.987538][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.087248][ T6113] veth1_macvtap: left promiscuous mode [ 191.087372][ T6113] veth0_macvtap: left promiscuous mode [ 191.087663][ T6113] veth1_vlan: left promiscuous mode [ 191.087875][ T6113] veth0_vlan: left promiscuous mode [ 194.026032][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 194.265305][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 194.372745][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372821][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.551536][ T7225] team0: Port device team_slave_0 added [ 196.660014][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.660028][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.660046][ T7214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.662602][ T7225] team0: Port device team_slave_1 added [ 196.882340][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.882355][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.882378][ T7214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.066155][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.066170][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.066193][ T7225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.080326][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.080341][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.080362][ T7225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.652651][ T7214] hsr_slave_0: entered promiscuous mode [ 197.658414][ T7214] hsr_slave_1: entered promiscuous mode [ 197.659494][ T7214] debugfs: 'hsr0' already exists in 'hsr' [ 197.659525][ T7214] Cannot create hsr debugfs directory [ 198.072932][ T7225] hsr_slave_0: entered promiscuous mode [ 198.083303][ T7225] hsr_slave_1: entered promiscuous mode [ 198.085405][ T7225] debugfs: 'hsr0' already exists in 'hsr' [ 198.085429][ T7225] Cannot create hsr debugfs directory [ 200.331680][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.343085][ T7214] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 200.438005][ T7214] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 200.573530][ T7214] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 200.734345][ T7214] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 200.958962][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.111897][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.112165][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.135542][ T7225] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.200888][ T7225] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.248665][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.248933][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.249509][ T7225] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 201.329204][ T7225] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 201.577521][ T7600] syzkaller0: entered promiscuous mode [ 201.577551][ T7600] syzkaller0: entered allmulticast mode [ 201.632601][ T7600] tipc: Started in network mode [ 201.632648][ T7600] tipc: Node identity eef87bc651e6, cluster identity 4711 [ 201.633031][ T7600] tipc: Enabled bearer , priority 0 [ 201.686214][ T7600] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.789985][ T7604] tipc: Resetting bearer [ 201.854441][ T7599] tipc: Resetting bearer [ 202.025342][ T7599] tipc: Disabling bearer [ 202.740983][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.891605][ T7225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.927999][ T7214] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.006478][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.014260][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.081094][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.084237][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.151165][ T7225] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.198361][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.200698][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.292762][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.294227][ T6113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.542251][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.894481][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 204.729554][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.177122][ T7225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.185404][ T7065] veth0_vlan: entered promiscuous mode [ 205.230678][ T7065] veth1_vlan: entered promiscuous mode [ 205.407308][ T7065] veth0_macvtap: entered promiscuous mode [ 205.454272][ T7065] veth1_macvtap: entered promiscuous mode [ 205.562871][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.663681][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.749722][ T766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.780055][ T3543] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.794852][ T3543] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.803652][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.282710][ T7721] autofs: Unknown parameter 'fd0x0000000000000000' [ 206.291315][ T7721] autofs: Unknown parameter 'fd0x0000000000000000' [ 206.617683][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.617704][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.697551][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 206.697591][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 206.958716][ T1548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.958736][ T1548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.118607][ T7214] veth0_vlan: entered promiscuous mode [ 207.143134][ T7225] veth0_vlan: entered promiscuous mode [ 207.270070][ T7214] veth1_vlan: entered promiscuous mode [ 207.299435][ T7225] veth1_vlan: entered promiscuous mode [ 207.802272][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 207.957646][ T7225] veth0_macvtap: entered promiscuous mode [ 207.974408][ T7214] veth0_macvtap: entered promiscuous mode [ 208.053102][ T7225] veth1_macvtap: entered promiscuous mode [ 208.075602][ T7214] veth1_macvtap: entered promiscuous mode [ 208.265657][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.290592][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.363911][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.390257][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.638239][ T1174] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.638525][ T1174] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.638781][ T1174] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.639027][ T1174] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.726272][ T1174] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.804729][ T1174] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.851209][ T1174] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.856997][ T1174] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.106504][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 209.963178][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.963197][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.223127][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.226818][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.807786][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.841016][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.819047][ T7811] warning: `syz.4.618' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 211.824349][ T3543] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.835407][ T3543] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.837933][ T6113] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.838558][ T6113] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.876104][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.876124][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.072396][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 212.100040][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.100059][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.202953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.202974][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.561246][ T7828] syzkaller0: entered promiscuous mode [ 212.561273][ T7828] syzkaller0: entered allmulticast mode [ 212.596237][ T7828] tipc: Enabled bearer , priority 0 [ 212.606457][ T7828] tipc: Resetting bearer [ 212.661535][ T7826] tipc: Resetting bearer [ 212.886797][ T7826] tipc: Disabling bearer [ 213.884377][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 214.360906][ T7880] tipc: Started in network mode [ 214.360934][ T7880] tipc: Node identity a6415f9485a8, cluster identity 4711 [ 214.361291][ T7880] tipc: Enabled bearer , priority 0 [ 214.362190][ T7880] syzkaller0: entered promiscuous mode [ 214.362213][ T7880] syzkaller0: entered allmulticast mode [ 214.368939][ T7880] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 214.716168][ T7880] tipc: Resetting bearer [ 214.832018][ T7879] tipc: Resetting bearer [ 215.003601][ T7899] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 215.125216][ T7879] tipc: Disabling bearer [ 215.625388][ T7917] openvswitch: netlink: Tunnel attr 81 out of range max 16 [ 216.129475][ T7930] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 216.745325][ T7949] openvswitch: netlink: Tunnel attr 81 out of range max 16 [ 217.545233][ T7976] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 217.734170][ T989] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 217.894406][ T989] usb 7-1: Using ep0 maxpacket: 16 [ 218.196822][ T989] usb 7-1: unable to get BOS descriptor or descriptor too short [ 218.198784][ T989] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 218.198818][ T989] usb 7-1: can't read configurations, error -71 [ 220.337949][ T8031] sock: sock_timestamping_bind_phc: sock not bind to device [ 220.458672][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.701'. [ 221.644200][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 222.604631][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 223.297694][ T8118] syzkaller0: entered promiscuous mode [ 223.297721][ T8118] syzkaller0: entered allmulticast mode [ 223.318909][ T8118] tipc: Started in network mode [ 223.318935][ T8118] tipc: Node identity 068ff356a102, cluster identity 4711 [ 223.319125][ T8118] tipc: Enabled bearer , priority 0 [ 223.355029][ T8118] tipc: Resetting bearer [ 223.415425][ T8117] tipc: Resetting bearer [ 223.555148][ T8117] tipc: Disabling bearer [ 223.629696][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 224.728117][ T8157] tipc: Enabled bearer , priority 0 [ 224.881848][ T8157] syzkaller0: entered promiscuous mode [ 224.881881][ T8157] syzkaller0: entered allmulticast mode [ 224.882782][ T8157] tipc: Resetting bearer [ 225.134172][ T5936] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 225.177924][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 225.259599][ T1548] tipc: Resetting bearer [ 225.289682][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 225.328134][ T8156] tipc: Resetting bearer [ 225.756020][ T6020] tipc: Node number set to 602496916 [ 227.514274][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.764'. [ 230.372141][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.384798][ T5936] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 230.384824][ T5936] usb 5-1: chopping to 0 config(s) [ 230.384848][ T5936] usb 5-1: can't read configurations, error -32 [ 230.514254][ T5936] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 230.654162][ T5936] usb 5-1: device descriptor read/64, error -32 [ 230.766893][ T5936] usb usb5-port1: attempt power cycle [ 231.114258][ T5936] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 231.153750][ T5936] usb 5-1: device descriptor read/8, error -32 [ 231.429450][ T5936] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 231.454557][ T5936] usb 5-1: device descriptor read/8, error -32 [ 231.569455][ T5936] usb usb5-port1: unable to enumerate USB device [ 238.188968][ T8156] tipc: Disabling bearer [ 238.390007][ T8160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.394798][ T8160] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 238.435769][ T8207] tipc: Enabled bearer , priority 0 [ 238.442784][ T8210] syzkaller0: entered promiscuous mode [ 238.442812][ T8210] syzkaller0: entered allmulticast mode [ 238.499892][ T8217] tipc: Resetting bearer [ 238.987777][ T8204] tipc: Resetting bearer [ 239.191425][ T8204] tipc: Disabling bearer [ 239.387592][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.771'. [ 239.502080][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.913185][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.775'. [ 240.424102][ T5842] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 240.574126][ T5842] usb 9-1: Using ep0 maxpacket: 16 [ 241.027309][ T5842] usb 9-1: unable to get BOS descriptor or descriptor too short [ 241.028576][ T5842] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 241.028610][ T5842] usb 9-1: can't read configurations, error -71 [ 241.875559][ T8298] tipc: Started in network mode [ 241.875589][ T8298] tipc: Node identity ea904c742852, cluster identity 4711 [ 241.887235][ T8298] tipc: Enabled bearer , priority 0 [ 241.915887][ T8298] syzkaller0: entered promiscuous mode [ 241.915916][ T8298] syzkaller0: entered allmulticast mode [ 241.986881][ T8298] tipc: Resetting bearer [ 242.059559][ T8296] tipc: Resetting bearer [ 242.605260][ T8296] tipc: Disabling bearer [ 243.535252][ T8333] syzkaller0: entered promiscuous mode [ 243.535280][ T8333] syzkaller0: entered allmulticast mode [ 243.568517][ T8333] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.544353][ T8388] tipc: Enabled bearer , priority 0 [ 245.549196][ T8388] syzkaller0: entered promiscuous mode [ 245.549222][ T8388] syzkaller0: entered allmulticast mode [ 245.652723][ T8388] tipc: Resetting bearer [ 245.747614][ T8387] tipc: Resetting bearer [ 245.898613][ T8387] tipc: Disabling bearer [ 247.571518][ T8452] sock: sock_timestamping_bind_phc: sock not bind to device [ 248.924543][ T8492] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.728465][ T8514] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 250.492351][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 251.083119][ T8567] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 251.954645][ T8599] tipc: Enabled bearer , priority 0 [ 251.957393][ T8599] syzkaller0: entered promiscuous mode [ 251.957419][ T8599] syzkaller0: entered allmulticast mode [ 252.144362][ T8595] tipc: Resetting bearer [ 252.337908][ T8595] tipc: Disabling bearer [ 252.646012][ T8622] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 253.922069][ T8660] tipc: Started in network mode [ 253.922097][ T8660] tipc: Node identity 66a26bfed3a9, cluster identity 4711 [ 253.922326][ T8660] tipc: Enabled bearer , priority 0 [ 253.923142][ T8660] syzkaller0: entered promiscuous mode [ 253.923164][ T8660] syzkaller0: entered allmulticast mode [ 254.140789][ T8659] tipc: Resetting bearer [ 254.225906][ T8665] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 254.475972][ T8659] tipc: Disabling bearer [ 254.594958][ T8688] sock: sock_timestamping_bind_phc: sock not bind to device [ 255.580916][ T8718] sock: sock_timestamping_bind_phc: sock not bind to device [ 255.697752][ T8716] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 255.837842][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.837917][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.686153][ T8748] tipc: Enabled bearer , priority 0 [ 256.726179][ T8748] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 256.819494][ T8752] tipc: Resetting bearer [ 256.911286][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 256.959331][ T8755] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 257.126125][ T8746] tipc: Disabling bearer [ 257.304560][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 259.245947][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.947'. [ 259.246912][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.947'. [ 261.165850][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 261.171588][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.445144][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.961'. [ 261.448965][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.961'. [ 261.530190][ T8825] tipc: Enabled bearer , priority 0 [ 261.532060][ T8825] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 261.584925][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 261.591417][ T8830] tipc: Resetting bearer [ 261.919211][ T8820] tipc: Disabling bearer [ 268.385798][ T8935] Bluetooth: MGMT ver 1.23 [ 271.486595][ T8994] tipc: Enabled bearer , priority 0 [ 271.487775][ T8994] syzkaller0: entered promiscuous mode [ 271.487800][ T8994] syzkaller0: entered allmulticast mode [ 271.557429][ T8994] tipc: Resetting bearer [ 271.587650][ T8993] tipc: Resetting bearer [ 271.828310][ T8993] tipc: Disabling bearer [ 272.140426][ T9004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.187882][ T9026] Illegal XDP return value 4294967274 on prog (id 133) dev syz_tun, expect packet loss! [ 274.512374][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1053'. [ 274.968983][ T9061] syzkaller0: entered promiscuous mode [ 274.969012][ T9061] syzkaller0: entered allmulticast mode [ 275.064191][ T5936] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 275.232392][ T5936] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 275.232449][ T5936] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.542351][ T5936] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 275.542379][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.542397][ T5936] usb 9-1: Product: syz [ 275.542410][ T5936] usb 9-1: Manufacturer: syz [ 275.542422][ T5936] usb 9-1: SerialNumber: syz [ 276.593177][ T5936] rtl8150 9-1:1.0: couldn't find required endpoints [ 276.635620][ T5936] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 276.785043][ T10] usb 9-1: USB disconnect, device number 4 [ 278.368860][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 278.991556][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1076'. [ 288.452897][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.147350][ T9080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.178216][ T9080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.731180][ T9138] process 'syz.7.1084' launched './file0' with NULL argv: empty string added [ 290.688824][ T1548] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.690055][ T1548] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.691544][ T1548] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.691582][ T1548] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.528471][ T9162] 9pnet_fd: Insufficient options for proto=fd [ 292.098906][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1094'. [ 292.797622][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.812690][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.818410][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.831468][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.836007][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.225044][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1102'. [ 293.603249][ T9195] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 294.637377][ T9220] input: syz1 as /devices/virtual/input/input7 [ 294.713841][ T9228] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 294.924143][ T59] Bluetooth: hci1: command tx timeout [ 295.384390][ T5936] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 295.554203][ T5936] usb 9-1: Using ep0 maxpacket: 16 [ 295.579646][ T5936] usb 9-1: unable to get BOS descriptor or descriptor too short [ 295.587100][ T5936] usb 9-1: config 1 interface 1 has no altsetting 0 [ 295.597343][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1129'. [ 295.616718][ T5936] usb 9-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice= 1.01 [ 295.616745][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.616765][ T5936] usb 9-1: Product: syz [ 295.616777][ T5936] usb 9-1: Manufacturer: syz [ 295.616790][ T5936] usb 9-1: SerialNumber: syz [ 295.882905][ T9178] chnl_net:caif_netlink_parms(): no params data found [ 295.966449][ T5936] ftdi_sio 9-1:1.1: FTDI USB Serial Device converter detected [ 296.037679][ T5936] usb 9-1: Detected SIO [ 296.076069][ T5936] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 296.150349][ T5936] usb 9-1: USB disconnect, device number 5 [ 296.294626][ T9263] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 296.346962][ T5936] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 296.348336][ T5936] ftdi_sio 9-1:1.1: device disconnected [ 296.384975][ T1014] bridge_slave_1: left allmulticast mode [ 296.385005][ T1014] bridge_slave_1: left promiscuous mode [ 296.385238][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.465917][ T1014] bridge_slave_0: left allmulticast mode [ 296.465947][ T1014] bridge_slave_0: left promiscuous mode [ 296.466222][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.526405][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1134'. [ 297.004749][ T59] Bluetooth: hci1: command tx timeout [ 298.437170][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.495074][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.536850][ T1014] bond0 (unregistering): Released all slaves [ 298.773094][ T1014] tipc: Left network mode [ 298.844301][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 299.060330][ T9299] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 299.094818][ T5848] Bluetooth: hci1: command tx timeout [ 299.536336][ T9310] nbd: must specify an index to disconnect [ 299.779438][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 300.439933][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.440120][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.440379][ T9178] bridge_slave_0: entered allmulticast mode [ 300.474615][ T9178] bridge_slave_0: entered promiscuous mode [ 300.494252][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.494406][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.494642][ T9178] bridge_slave_1: entered allmulticast mode [ 300.544107][ T9178] bridge_slave_1: entered promiscuous mode [ 300.624156][ T5836] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 300.774095][ T5836] usb 9-1: Using ep0 maxpacket: 16 [ 300.776678][ T5836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.776706][ T5836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.776726][ T5836] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.776765][ T5836] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.776785][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.907621][ T5836] usb 9-1: config 0 descriptor?? [ 301.164493][ T5848] Bluetooth: hci1: command tx timeout [ 301.646313][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 301.829823][ T5836] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 301.830840][ T5836] microsoft 0003:045E:07DA.0001: parse failed [ 301.830937][ T5836] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 301.993806][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.998931][ T5901] usb 9-1: USB disconnect, device number 6 [ 302.064549][ T9363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1168'. [ 302.260543][ T1014] hsr_slave_0: left promiscuous mode [ 302.294269][ T1014] hsr_slave_1: left promiscuous mode [ 302.297373][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.341733][ T9372] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 302.355278][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.546868][ T9376] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1173'. [ 303.026614][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1179'. [ 304.776606][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 305.032515][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 307.360753][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.784125][ T5842] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 307.841005][ T9178] team0: Port device team_slave_0 added [ 307.865301][ T9409] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 307.875575][ T9178] team0: Port device team_slave_1 added [ 307.936524][ T5842] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.936552][ T5842] usb 5-1: config 0 interface 0 has no altsetting 0 [ 307.936584][ T5842] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 307.936604][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.024342][ T5842] usb 5-1: config 0 descriptor?? [ 308.485746][ T5842] wacom 0003:056A:00BA.0002: unbalanced collection at end of report description [ 308.486662][ T5842] wacom 0003:056A:00BA.0002: parse failed [ 308.486759][ T5842] wacom 0003:056A:00BA.0002: probe with driver wacom failed with error -22 [ 308.695569][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.695585][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.695607][ T9178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.699186][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.699201][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.699223][ T9178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.734213][ T5842] usb 5-1: USB disconnect, device number 18 [ 310.503433][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1192'. [ 310.620601][ T9178] hsr_slave_0: entered promiscuous mode [ 310.621794][ T9178] hsr_slave_1: entered promiscuous mode [ 310.622583][ T9178] debugfs: 'hsr0' already exists in 'hsr' [ 310.622605][ T9178] Cannot create hsr debugfs directory [ 310.909280][ T9457] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 311.142902][ T9464] binder: 9463:9464 ioctl c018620c 200000000380 returned -22 [ 311.796718][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1206'. [ 312.132326][ T9494] tipc: Enabled bearer , priority 0 [ 312.197380][ T9489] tipc: Resetting bearer [ 312.446666][ C0] ------------[ cut here ]------------ [ 312.446689][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 312.446727][ C0] Modules linked in: [ 312.446751][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.446776][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.446788][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 312.446808][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 312.446825][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 312.446841][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801c295940 [ 312.446856][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 312.446867][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 312.446880][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000006 [ 312.446894][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880288f6068 [ 312.446905][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 312.446921][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.446935][ C0] CR2: 0000200000001000 CR3: 0000000035e4a000 CR4: 00000000003526f0 [ 312.446952][ C0] Call Trace: [ 312.446960][ C0] [ 312.446983][ C0] ? __pfx_est_timer+0x10/0x10 [ 312.447016][ C0] call_timer_fn+0x17b/0x5f0 [ 312.447043][ C0] ? __pfx_est_timer+0x10/0x10 [ 312.447061][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.447084][ C0] ? call_timer_fn+0xbe/0x5f0 [ 312.447108][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 312.447147][ C0] ? __pfx_est_timer+0x10/0x10 [ 312.447173][ C0] __run_timer_base+0x648/0x970 [ 312.447218][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 312.447266][ C0] run_timer_softirq+0xb7/0x180 [ 312.447292][ C0] handle_softirqs+0x22c/0x710 [ 312.447332][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.447372][ C0] run_ktimerd+0xcf/0x190 [ 312.447400][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 312.447426][ C0] ? schedule+0x91/0x360 [ 312.447469][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 312.447494][ C0] smpboot_thread_fn+0x542/0xa60 [ 312.447522][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 312.447558][ C0] kthread+0x711/0x8a0 [ 312.447592][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 312.447618][ C0] ? __pfx_kthread+0x10/0x10 [ 312.447654][ C0] ? __pfx_kthread+0x10/0x10 [ 312.447686][ C0] ret_from_fork+0x3f9/0x770 [ 312.447794][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 312.447831][ C0] ? __switch_to_asm+0x39/0x70 [ 312.447851][ C0] ? __switch_to_asm+0x33/0x70 [ 312.447870][ C0] ? __pfx_kthread+0x10/0x10 [ 312.447902][ C0] ret_from_fork_asm+0x1a/0x30 [ 312.447943][ C0] [ 312.447954][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.447971][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.447995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.448008][ C0] Call Trace: [ 312.448016][ C0] [ 312.448025][ C0] dump_stack_lvl+0x99/0x250 [ 312.448056][ C0] ? __asan_memcpy+0x40/0x70 [ 312.448080][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.448109][ C0] ? __pfx__printk+0x10/0x10 [ 312.448149][ C0] vpanic+0x281/0x750 [ 312.448179][ C0] ? __pfx__printk+0x10/0x10 [ 312.448199][ C0] ? __pfx_vpanic+0x10/0x10 [ 312.448223][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 312.448260][ C0] panic+0xb9/0xc0 [ 312.448287][ C0] ? __pfx_panic+0x10/0x10 [ 312.448332][ C0] __warn+0x31b/0x4b0 [ 312.448357][ C0] ? est_timer+0x6dc/0x9f0 [ 312.448381][ C0] ? est_timer+0x6dc/0x9f0 [ 312.448403][ C0] report_bug+0x2be/0x4f0 [ 312.448430][ C0] ? est_timer+0x6dc/0x9f0 [ 312.448453][ C0] ? est_timer+0x6dc/0x9f0 [ 312.448476][ C0] ? est_timer+0x6de/0x9f0 [ 312.448512][ C0] handle_bug+0x84/0x160 [ 312.448545][ C0] exc_invalid_op+0x1a/0x50 [ 312.448575][ C0] asm_exc_invalid_op+0x1a/0x20 [ 312.448596][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 312.448619][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 312.448638][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 312.448657][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801c295940 [ 312.448673][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 312.448687][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 312.448702][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000006 [ 312.448718][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880288f6068 [ 312.448743][ C0] ? est_timer+0x6db/0x9f0 [ 312.448787][ C0] ? __pfx_est_timer+0x10/0x10 [ 312.448825][ C0] call_timer_fn+0x17b/0x5f0 [ 312.448853][ C0] ? __pfx_est_timer+0x10/0x10 [ 312.448874][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.448899][ C0] ? call_timer_fn+0xbe/0x5f0 [ 312.448926][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 312.448971][ C0] ? __pfx_est_timer+0x10/0x10 [ 312.448999][ C0] __run_timer_base+0x648/0x970 [ 312.449046][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 312.449090][ C0] run_timer_softirq+0xb7/0x180 [ 312.449115][ C0] handle_softirqs+0x22c/0x710 [ 312.449149][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.449185][ C0] run_ktimerd+0xcf/0x190 [ 312.449215][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 312.449241][ C0] ? schedule+0x91/0x360 [ 312.449278][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 312.449304][ C0] smpboot_thread_fn+0x542/0xa60 [ 312.449333][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 312.449371][ C0] kthread+0x711/0x8a0 [ 312.449407][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 312.449431][ C0] ? __pfx_kthread+0x10/0x10 [ 312.449466][ C0] ? __pfx_kthread+0x10/0x10 [ 312.449505][ C0] ret_from_fork+0x3f9/0x770 [ 312.449537][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 312.449573][ C0] ? __switch_to_asm+0x39/0x70 [ 312.449593][ C0] ? __switch_to_asm+0x33/0x70 [ 312.449612][ C0] ? __pfx_kthread+0x10/0x10 [ 312.449645][ C0] ret_from_fork_asm+0x1a/0x30 [ 312.449687][ C0] [ 312.449967][ C0] Kernel Offset: disabled