last executing test programs: 13m4.45835743s ago: executing program 3 (id=363): lseek(0xffffffffffffffff, 0xc3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f00000011c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x14, 0x105, 0x70bd24, 0x25dfdb7b, {0xa, 0x84}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "edb7e5a8365b6019d51ff36517ecf60709cfa4d89f"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "98082846a892496c297583bc0bab77bf3d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 13m3.216509725s ago: executing program 3 (id=365): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m1.417861421s ago: executing program 3 (id=370): eventfd(0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) dup(0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 12m58.553356374s ago: executing program 3 (id=376): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) pwritev2(r1, &(0x7f00000023c0)=[{0x0}], 0x1, 0x7, 0x9, 0x9) 12m56.134609597s ago: executing program 3 (id=380): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12m54.345750597s ago: executing program 3 (id=383): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 12m39.017686014s ago: executing program 32 (id=383): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 3m38.768663395s ago: executing program 4 (id=2360): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) 3m37.576066351s ago: executing program 4 (id=2361): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffff7fd}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e09f54230f243b5ae8c3e4b39741", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001340)={"b2a87744d2f87358d3526d761a3861ee", 0x0, 0x0, {0x2623}, {0x1f, 0x775}, 0xf, [0x8af, 0xffffffff, 0x3, 0x4, 0x0, 0x5644663a, 0x100000001, 0x2d, 0x2, 0x6, 0x6, 0x9, 0xb, 0x6, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001440)={{r0}, r11, 0x14, @inherit={0x50, &(0x7f0000002440)=ANY=[]}, @name="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"}) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) 3m32.35057864s ago: executing program 4 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 3m28.686632187s ago: executing program 4 (id=2379): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b010000"], 0x38}, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m27.669444342s ago: executing program 4 (id=2384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, r1, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 3m22.359932246s ago: executing program 4 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 3m19.713412522s ago: executing program 33 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 3m10.361074564s ago: executing program 2 (id=2427): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m10.330403175s ago: executing program 5 (id=2429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6ba820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}, {&(0x7f00000001c0)="4c9af554185fd4576a86a902bc3af1e5dded95", 0x13}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="c5fa72d8d6394004ff9f3312fdd49f608e828a9bca052492921d0a08fef6ac8d18571cfbb3cd1cf0202301f791d1c508e13c1538a2ed6bb25fa6cf7f37d3780178137bc45fb7718840a811db7dda22b5340625e2caf39de1f43b6621bda68a1b725bcc1f37627dcfcd8920493d746169dec69019d1ee0bc50eaefe5a39577f1d50f896be92ef0bc957f9a3fb8b9eacc9eff92c4cc3cad601b5db0646331a968c", 0xa0}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="19b8d6d407f43ff8f376d3f53ac843f6649b527688ecc760c363b9bdfe073935630a8adbe7a3026dbb254cf4cccdfb21a21a9f533cc6c3a7f1aedc7fe9530c7aec109d412b915bcb947b761ae95ff683adac6687b226bf47", 0x58}, {&(0x7f0000000640)="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", 0xfe}], 0x2, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x48, 0x1ede94820c3414fc}], 0x3, 0x40800) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0xf0ff) 3m10.107648764s ago: executing program 5 (id=2430): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r6, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.837002837s ago: executing program 2 (id=2434): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m7.265510022s ago: executing program 2 (id=2437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588382003c1"}]}}}}}}, 0xfd6c) 3m6.242533561s ago: executing program 2 (id=2444): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000600)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 3m6.126867715s ago: executing program 2 (id=2446): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) 3m6.006848351s ago: executing program 5 (id=2447): syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200, 0xec60e3ffa4ea632a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r4, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 3m4.644672404s ago: executing program 5 (id=2449): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6ba820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}, {&(0x7f00000001c0)="4c9af554185fd4576a86a902bc3af1e5dded95", 0x13}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000400)="c5fa72d8d6394004ff9f3312fdd49f608e828a9bca052492921d0a08fef6ac8d18571cfbb3cd1cf0202301f791d1c508e13c1538a2ed6bb25fa6cf7f37d3780178137bc45fb7718840a811db7dda22b5340625e2caf39de1f43b6621bda68a1b725bcc1f37627dcfcd8920493d746169dec69019d1ee0bc50eaefe5a39577f1d50f896be92ef0bc957f9a3fb8b9eacc9eff92c4cc3cad601b5db0646331a968c", 0xa0}], 0x2, &(0x7f0000001780)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="19b8d6d407f43ff8f376d3f53ac843f6649b527688ecc760c363b9bdfe073935630a8adbe7a3026dbb254cf4cccdfb21a21a9f533cc6c3a7f1aedc7fe9530c7aec109d412b915bcb947b761ae95ff683adac6687b226bf47", 0x58}, {&(0x7f0000000640)="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", 0xfe}], 0x2, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x48, 0x1ede94820c3414fc}], 0x3, 0x40800) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0xf0ff) 3m4.586635575s ago: executing program 2 (id=2450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 3m4.389668645s ago: executing program 5 (id=2451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) r3 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de, 0x10}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) mremap(&(0x7f0000388000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000878000/0x1000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x0) 3m2.051019304s ago: executing program 5 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588382003c1"}]}}}}}}, 0xfd6c) 2m49.076759815s ago: executing program 34 (id=2450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2m46.943318613s ago: executing program 35 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588382003c1"}]}}}}}}, 0xfd6c) 8.093747251s ago: executing program 6 (id=2771): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x28) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xd3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) llistxattr(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0) 6.135174653s ago: executing program 1 (id=2773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r4}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close(r5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x20, 0xf}, 0x7, 0x1ff, 0x7, 0x2, 0xffffffffffffffff, r7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902120001000000"], 0x0) close_range(r8, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 6.096654148s ago: executing program 6 (id=2775): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe8000000000000000000000000000bbff"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.814124164s ago: executing program 0 (id=2779): syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 3.763729649s ago: executing program 6 (id=2780): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\\ ', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50) r0 = syz_io_uring_setup(0x54d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.002484135s ago: executing program 6 (id=2781): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.829060675s ago: executing program 6 (id=2782): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x5, 0x884}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.374686863s ago: executing program 0 (id=2783): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x1, 0xf555}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xbffe, 0xd5e}}) 2.249838218s ago: executing program 1 (id=2784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.23354121s ago: executing program 0 (id=2785): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.094403031s ago: executing program 1 (id=2786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="01"], 0x20}}, 0x0) 2.083128097s ago: executing program 0 (id=2787): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 1.777473085s ago: executing program 1 (id=2788): lseek(0xffffffffffffffff, 0xc3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f00000011c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x14, 0x105, 0x70bd24, 0x25dfdb7b, {0xa, 0x84}, [@INET_DIAG_REQ_BYTECODE={0x18, 0x1, "edb7e5a8365b6019d51ff36517ecf60709cfa4d8"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "98082846a892496c297583bc0bab77bf3d"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 1.750581261s ago: executing program 0 (id=2789): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\\ ', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x1000, 0x809, 0x34e}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 621.694568ms ago: executing program 1 (id=2790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 555.436433ms ago: executing program 0 (id=2791): syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 553.643153ms ago: executing program 6 (id=2792): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r4}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close(r5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x20, 0xf}, 0x7, 0x1ff, 0x7, 0x2, 0xffffffffffffffff, r7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902120001000000"], 0x0) close_range(r8, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 0s ago: executing program 1 (id=2793): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 6][ T5967] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 284.296438][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.302509][ T5967] usb 5-1: config 0 descriptor?? [ 284.649339][ T7464] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 284.708980][ T7465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.712217][ T5936] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 284.951459][ T138] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 285.485154][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 285.485227][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 286.551091][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.975725][ T7499] overlayfs: overlapping lowerdir path [ 287.097168][ T7500] overlayfs: overlapping lowerdir path [ 288.234018][ T7508] overlayfs: overlapping lowerdir path [ 288.615547][ T10] usb 5-1: USB disconnect, device number 4 [ 288.735852][ T7278] veth0_vlan: entered promiscuous mode [ 288.740667][ T7278] veth1_vlan: entered promiscuous mode [ 288.917504][ T7278] veth0_macvtap: entered promiscuous mode [ 288.973535][ T7278] veth1_macvtap: entered promiscuous mode [ 289.093147][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.146292][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.606678][ T164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.652252][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.652413][ T7537] netlink: 2 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.675740][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.679404][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.679499][ T7537] netlink: 2 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.686819][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.687651][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.687715][ T7537] netlink: 2 bytes leftover after parsing attributes in process `syz.4.484'. [ 289.946293][ T7536] : renamed from bridge_slave_0 (while UP) [ 290.346393][ T7540] overlayfs: overlapping lowerdir path [ 290.405022][ T7542] overlayfs: overlapping lowerdir path [ 290.988647][ T6776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.016034][ T6776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.117654][ T6776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.520734][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 294.371617][ T6776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.371638][ T6776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.578691][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 295.677169][ T7579] __nla_validate_parse: 22 callbacks suppressed [ 295.677217][ T7579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'. [ 296.051441][ T7580] overlayfs: overlapping lowerdir path [ 296.179460][ T7581] overlayfs: overlapping lowerdir path [ 297.288482][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.288504][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.393340][ T5871] usb 2-1: device descriptor read/all, error -110 [ 301.251649][ T5871] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 301.818624][ T5871] usb 2-1: device descriptor read/64, error -32 [ 301.964808][ T5871] usb usb2-port1: attempt power cycle [ 302.074879][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 302.074954][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 303.236721][ T7619] ipvlan0: entered promiscuous mode [ 303.236893][ T7619] ipvlan0: entered allmulticast mode [ 303.236929][ T7619] veth0_vlan: entered allmulticast mode [ 303.370725][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 303.936661][ T5871] usb 2-1: device descriptor read/8, error -32 [ 304.220286][ T5871] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 304.237444][ T5871] usb 2-1: device descriptor read/8, error -32 [ 304.351188][ T5871] usb usb2-port1: unable to enumerate USB device [ 307.102316][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 309.100537][ T7674] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 309.961670][ T812] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 310.111579][ T812] usb 2-1: Using ep0 maxpacket: 8 [ 310.183056][ T812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.183073][ T812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.184553][ T812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.184575][ T812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.185990][ T812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.186004][ T812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.187141][ T812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.187153][ T812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.187174][ T812] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 310.187186][ T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.193327][ T812] usb 2-1: config 0 descriptor?? [ 312.314481][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.314583][ T7701] netlink: 2 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.326587][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.328241][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.328335][ T7701] netlink: 2 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.333398][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.334156][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.334253][ T7701] netlink: 2 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.341556][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 312.342291][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 314.852665][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.852750][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.089777][ T7702] usb 2-1: USB disconnect, device number 9 [ 317.333050][ T7729] netlink: 'syz.1.541': attribute type 12 has an invalid length. [ 317.333074][ T7729] netlink: 'syz.1.541': attribute type 29 has an invalid length. [ 317.333087][ T7729] __nla_validate_parse: 20 callbacks suppressed [ 317.333098][ T7729] netlink: 148 bytes leftover after parsing attributes in process `syz.1.541'. [ 317.333121][ T7729] netlink: 59 bytes leftover after parsing attributes in process `syz.1.541'. [ 319.253949][ T7742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 320.810492][ T7754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.547'. [ 320.811684][ T7754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.547'. [ 327.282276][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.562'. [ 327.283685][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.562'. [ 333.950814][ T7848] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 333.950833][ T7848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.572'. [ 334.263747][ T5990] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 334.393767][ T5990] usb 6-1: device descriptor read/64, error -71 [ 334.643613][ T5990] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 334.776951][ T5990] usb 6-1: device descriptor read/64, error -71 [ 335.018293][ T5990] usb usb6-port1: attempt power cycle [ 335.073971][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 335.075271][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 337.221569][ T5990] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 338.652113][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7 [ 338.652150][ T812] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max [ 339.194793][ T5990] usb 6-1: device descriptor read/8, error -71 [ 339.253503][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253616][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253641][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253663][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253685][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253708][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253728][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253743][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.253757][ T812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 339.394654][ T812] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 339.431379][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 339.431396][ T36] audit: type=1326 audit(1772039047.019:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 339.431720][ T36] audit: type=1326 audit(1772039047.019:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 339.432373][ T36] audit: type=1326 audit(1772039047.019:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 339.432731][ T36] audit: type=1326 audit(1772039047.019:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 339.535356][ T36] audit: type=1326 audit(1772039047.129:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 339.535619][ T36] audit: type=1326 audit(1772039047.129:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 339.847586][ T7900] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 339.847606][ T7900] netlink: 224 bytes leftover after parsing attributes in process `syz.1.589'. [ 339.949596][ T7901] fido_id[7901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 349.897554][ T7961] bridge0: port 3(syz_tun) entered blocking state [ 349.897667][ T7961] bridge0: port 3(syz_tun) entered disabled state [ 349.897906][ T7961] syz_tun: entered allmulticast mode [ 350.177743][ T7961] syz_tun: entered promiscuous mode [ 350.181715][ T7961] bridge0: port 3(syz_tun) entered blocking state [ 350.181837][ T7961] bridge0: port 3(syz_tun) entered forwarding state [ 350.182806][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.182831][ T7969] netlink: 2 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.183575][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.183687][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.183706][ T7969] netlink: 2 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.184351][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.184451][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.184469][ T7969] netlink: 2 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.185087][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 350.185187][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 352.934345][ T10] hid_parser_main: 12 callbacks suppressed [ 352.934369][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 352.934398][ T10] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max [ 352.935642][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935736][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935761][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935786][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935810][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935834][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935859][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935884][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 352.935909][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 353.135509][ T36] audit: type=1326 audit(1772039060.720:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.135557][ T36] audit: type=1326 audit(1772039060.720:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.135596][ T36] audit: type=1326 audit(1772039060.720:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.135634][ T36] audit: type=1326 audit(1772039060.730:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.135671][ T36] audit: type=1326 audit(1772039060.730:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.135708][ T36] audit: type=1326 audit(1772039060.730:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.135746][ T36] audit: type=1326 audit(1772039060.730:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.135784][ T36] audit: type=1326 audit(1772039060.730:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7986 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 353.345266][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 353.717646][ T8001] fido_id[8001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.112419][ T6008] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 356.322269][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 356.642528][ T6008] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 356.642557][ T6008] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.642574][ T6008] usb 6-1: config 0 has no interface number 0 [ 356.642619][ T6008] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 356.642638][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.714044][ T6008] usb 6-1: config 0 descriptor?? [ 356.814445][ T6008] ldusb 6-1:0.55: Interrupt in endpoint not found [ 356.937671][ T6008] usb 6-1: USB disconnect, device number 6 [ 361.153369][ T8080] trusted_key: encrypted_key: key user:syz not found [ 369.338958][ T8173] __nla_validate_parse: 20 callbacks suppressed [ 369.338979][ T8173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.685'. [ 370.929859][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 370.931097][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 371.764979][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 373.000446][ T8223] syz.4.702 (8223) used greatest stack depth: 17928 bytes left [ 376.290543][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.521782][ T5113] Bluetooth: hci5: command 0x0405 tx timeout [ 379.628089][ T8300] overlayfs: failed to clone lowerpath [ 382.209671][ T8326] netlink: 'syz.4.732': attribute type 1 has an invalid length. [ 382.308080][ T8330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.898660][ T5807] Bluetooth: hci5: command 0x0405 tx timeout [ 385.784753][ T8397] overlayfs: failed to clone lowerpath [ 388.062143][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 388.063601][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 388.690598][ T8455] overlayfs: failed to clone lowerpath [ 389.052439][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.793'. [ 390.648856][ T8484] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 391.071557][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 392.916597][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.815'. [ 392.917936][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.815'. [ 399.602097][ T31] hid_parser_main: 12 callbacks suppressed [ 399.602132][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 399.602160][ T31] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 399.603386][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603475][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603499][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603523][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603546][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603570][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603593][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603617][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 399.603641][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 400.163559][ T36] audit: type=1326 audit(1772039107.989:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.163833][ T36] audit: type=1326 audit(1772039107.999:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.164095][ T36] audit: type=1326 audit(1772039107.999:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.164428][ T36] audit: type=1326 audit(1772039108.009:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.164691][ T36] audit: type=1326 audit(1772039108.009:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.164905][ T36] audit: type=1326 audit(1772039108.009:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.165138][ T36] audit: type=1326 audit(1772039108.020:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.165459][ T36] audit: type=1326 audit(1772039108.020:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 400.275632][ T31] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 400.582147][ T8630] fido_id[8630]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 405.732623][ T8713] IPVS: persistence engine module ip_vs_pe_ not found [ 408.931463][ T8746] netlink: 64 bytes leftover after parsing attributes in process `syz.0.899'. [ 408.932404][ T5113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 408.932447][ T5113] CPU: 1 UID: 0 PID: 5113 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.932477][ T5113] Tainted: [L]=SOFTLOCKUP [ 408.932484][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.932498][ T5113] Workqueue: hci2 hci_rx_work [ 408.932536][ T5113] Call Trace: [ 408.932547][ T5113] [ 408.932557][ T5113] dump_stack_lvl+0xe8/0x150 [ 408.932592][ T5113] sysfs_create_dir_ns+0x271/0x2a0 [ 408.932615][ T5113] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 408.932640][ T5113] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 408.932666][ T5113] ? rt_spin_unlock+0x160/0x200 [ 408.932690][ T5113] kobject_add_internal+0x631/0xd10 [ 408.932731][ T5113] kobject_add+0x163/0x240 [ 408.932766][ T5113] ? __pfx_kobject_add+0x10/0x10 [ 408.932803][ T5113] ? get_device_parent+0x370/0x3a0 [ 408.932838][ T5113] device_add+0x408/0xb80 [ 408.932869][ T5113] hci_conn_add_sysfs+0xd5/0x210 [ 408.932896][ T5113] le_conn_complete_evt+0xf1d/0x1430 [ 408.932937][ T5113] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 408.932968][ T5113] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 408.932996][ T5113] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.933024][ T5113] ? skb_pull_data+0xfb/0x200 [ 408.933060][ T5113] hci_le_conn_complete_evt+0x187/0x470 [ 408.933097][ T5113] hci_event_packet+0x7af/0x12c0 [ 408.933134][ T5113] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 408.933163][ T5113] ? __pfx_hci_event_packet+0x10/0x10 [ 408.933187][ T5113] ? rt_spin_unlock+0x14f/0x200 [ 408.933217][ T5113] ? hci_send_to_monitor+0xe2/0x590 [ 408.933253][ T5113] hci_rx_work+0x3ee/0x1030 [ 408.933286][ T5113] ? process_scheduled_works+0xa25/0x1830 [ 408.933318][ T5113] process_scheduled_works+0xb02/0x1830 [ 408.933376][ T5113] ? __pfx_process_scheduled_works+0x10/0x10 [ 408.933411][ T5113] ? assign_work+0x3d5/0x5e0 [ 408.933445][ T5113] worker_thread+0xa50/0xfc0 [ 408.933503][ T5113] kthread+0x388/0x470 [ 408.933525][ T5113] ? __pfx_worker_thread+0x10/0x10 [ 408.933552][ T5113] ? __pfx_kthread+0x10/0x10 [ 408.933575][ T5113] ret_from_fork+0x51e/0xb90 [ 408.933608][ T5113] ? __pfx_ret_from_fork+0x10/0x10 [ 408.933635][ T5113] ? __switch_to+0xc7d/0x1450 [ 408.933665][ T5113] ? __pfx_kthread+0x10/0x10 [ 408.933688][ T5113] ret_from_fork_asm+0x1a/0x30 [ 408.933726][ T5113] [ 408.933756][ T5113] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 408.933792][ T5113] Bluetooth: hci2: failed to register connection device [ 413.487313][ T8809] siw: device registration error -23 [ 414.707576][ T8836] netlink: 64 bytes leftover after parsing attributes in process `syz.4.930'. [ 417.003978][ T8882] netlink: 64 bytes leftover after parsing attributes in process `syz.4.947'. [ 418.302101][ T8901] overlayfs: failed to clone lowerpath [ 419.620459][ T8924] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 419.621404][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.959'. [ 419.622632][ T36] audit: type=1326 audit(1772039127.625:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.622675][ T36] audit: type=1326 audit(1772039127.625:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.622711][ T36] audit: type=1326 audit(1772039127.635:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.622748][ T36] audit: type=1326 audit(1772039127.635:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.622785][ T36] audit: type=1326 audit(1772039127.635:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.622823][ T36] audit: type=1326 audit(1772039127.635:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.622966][ T36] audit: type=1326 audit(1772039127.635:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.623002][ T36] audit: type=1326 audit(1772039127.635:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.623036][ T36] audit: type=1326 audit(1772039127.635:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 419.623073][ T36] audit: type=1326 audit(1772039127.635:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 422.427508][ T8945] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 422.561466][ T8944] netlink: 76 bytes leftover after parsing attributes in process `syz.0.971'. [ 422.561492][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 422.561505][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.971'. [ 425.097099][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 425.513232][ T10] usb 5-1: config 0 has no interfaces? [ 425.515488][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.515506][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.515516][ T10] usb 5-1: SerialNumber: syz [ 425.552649][ T10] usb 5-1: config 0 descriptor?? [ 427.720163][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.985'. [ 427.754801][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.985'. [ 428.402729][ T10] usb 5-1: USB disconnect, device number 5 [ 434.866724][ T9074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 435.281516][ T9084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'. [ 435.282687][ T9084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'. [ 437.354685][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.805986][ T9118] overlayfs: failed to clone lowerpath [ 440.633296][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 440.633402][ T9135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.876660][ T9135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.580549][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 443.580567][ T36] audit: type=1326 audit(1772039151.637:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581458][ T36] audit: type=1326 audit(1772039151.637:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581494][ T36] audit: type=1326 audit(1772039151.637:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581522][ T36] audit: type=1326 audit(1772039151.637:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581551][ T36] audit: type=1326 audit(1772039151.637:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581579][ T36] audit: type=1326 audit(1772039151.647:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581607][ T36] audit: type=1326 audit(1772039151.647:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581636][ T36] audit: type=1326 audit(1772039151.647:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581665][ T36] audit: type=1326 audit(1772039151.647:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.581696][ T36] audit: type=1326 audit(1772039151.647:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effa5c1c629 code=0x7ffc0000 [ 443.904553][ T9174] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 443.905129][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'. [ 447.708231][ T9206] overlayfs: failed to clone lowerpath [ 447.801293][ T9207] overlayfs: failed to clone lowerpath [ 448.801105][ T9212] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 448.801167][ T9212] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1063'. [ 448.850905][ T5113] Bluetooth: hci5: command 0x0405 tx timeout [ 449.651050][ T9220] bridge0: port 3(syz_tun) entered blocking state [ 449.651109][ T9220] bridge0: port 3(syz_tun) entered disabled state [ 449.651250][ T9220] syz_tun: entered allmulticast mode [ 449.697462][ T9220] syz_tun: entered promiscuous mode [ 449.698184][ T9220] bridge0: port 3(syz_tun) entered blocking state [ 449.698295][ T9220] bridge0: port 3(syz_tun) entered forwarding state [ 452.487777][ T9246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.733338][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 453.918364][ T9267] siw: device registration error -23 [ 453.952532][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1078'. [ 457.755352][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1093'. [ 457.797624][ T9297] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 462.329652][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 465.255036][ T9366] hub 8-0:1.0: USB hub found [ 465.263582][ T9366] hub 8-0:1.0: 1 port detected [ 466.099933][ T9367] all (unregistering): Released all slaves [ 467.424702][ T9396] siw: device registration error -23 [ 467.451346][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 468.594776][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 468.594795][ T36] audit: type=1326 audit(1772039176.794:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.594849][ T36] audit: type=1326 audit(1772039176.794:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.594887][ T36] audit: type=1326 audit(1772039176.794:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.594925][ T36] audit: type=1326 audit(1772039176.794:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.594964][ T36] audit: type=1326 audit(1772039176.794:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.629607][ T36] audit: type=1326 audit(1772039176.825:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.629669][ T36] audit: type=1326 audit(1772039176.825:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.629707][ T36] audit: type=1326 audit(1772039176.825:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.751011][ T36] audit: type=1326 audit(1772039176.969:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.751059][ T36] audit: type=1326 audit(1772039176.969:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3735c629 code=0x7ffc0000 [ 468.931705][ T9408] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 468.932578][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1135'. [ 475.378948][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 475.378967][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 475.378984][ T5807] Tainted: [L]=SOFTLOCKUP [ 475.378987][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.378995][ T5807] Workqueue: hci0 hci_rx_work [ 475.379015][ T5807] Call Trace: [ 475.379019][ T5807] [ 475.379024][ T5807] dump_stack_lvl+0xe8/0x150 [ 475.379043][ T5807] sysfs_create_dir_ns+0x271/0x2a0 [ 475.379056][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 475.379069][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 475.379082][ T5807] ? rt_spin_unlock+0x160/0x200 [ 475.379094][ T5807] kobject_add_internal+0x631/0xd10 [ 475.379116][ T5807] kobject_add+0x163/0x240 [ 475.379134][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 475.379153][ T5807] ? get_device_parent+0x370/0x3a0 [ 475.379170][ T5807] device_add+0x408/0xb80 [ 475.379191][ T5807] hci_conn_add_sysfs+0xd5/0x210 [ 475.379206][ T5807] le_conn_complete_evt+0xf1d/0x1430 [ 475.379228][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 475.379244][ T5807] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 475.379265][ T5807] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.379280][ T5807] ? skb_pull_data+0xfb/0x200 [ 475.379299][ T5807] hci_le_conn_complete_evt+0x187/0x470 [ 475.379320][ T5807] hci_event_packet+0x7af/0x12c0 [ 475.379336][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 475.379351][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 475.379363][ T5807] ? rt_spin_unlock+0x14f/0x200 [ 475.379379][ T5807] ? hci_send_to_monitor+0xe2/0x590 [ 475.379397][ T5807] hci_rx_work+0x3ee/0x1030 [ 475.379413][ T5807] ? process_scheduled_works+0xa25/0x1830 [ 475.379429][ T5807] process_scheduled_works+0xb02/0x1830 [ 475.379458][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.379476][ T5807] ? assign_work+0x3d5/0x5e0 [ 475.379493][ T5807] worker_thread+0xa50/0xfc0 [ 475.379522][ T5807] kthread+0x388/0x470 [ 475.379533][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 475.379546][ T5807] ? __pfx_kthread+0x10/0x10 [ 475.379558][ T5807] ret_from_fork+0x51e/0xb90 [ 475.379574][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 475.379588][ T5807] ? __switch_to+0xc7d/0x1450 [ 475.379603][ T5807] ? __pfx_kthread+0x10/0x10 [ 475.379615][ T5807] ret_from_fork_asm+0x1a/0x30 [ 475.379634][ T5807] [ 475.380406][ T5807] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 475.380432][ T5807] Bluetooth: hci0: failed to register connection device [ 477.811074][ T9529] siw: device registration error -23 [ 477.839634][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1158'. [ 477.897126][ T9529] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 480.299996][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 480.725237][ T9551] siw: device registration error -23 [ 480.825403][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1188'. [ 481.026450][ T9548] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 481.105469][ T9551] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 484.514513][ T9567] overlayfs: failed to clone lowerpath [ 488.102625][ T9601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1193'. [ 489.426022][ T9614] overlayfs: failed to clone lowerpath [ 490.176265][ T9632] capability: warning: `syz.1.1219' uses deprecated v2 capabilities in a way that may be insecure [ 496.331519][ T5113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 496.331552][ T5113] CPU: 1 UID: 0 PID: 5113 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 496.331583][ T5113] Tainted: [L]=SOFTLOCKUP [ 496.331590][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.331603][ T5113] Workqueue: hci2 hci_rx_work [ 496.331632][ T5113] Call Trace: [ 496.331640][ T5113] [ 496.331650][ T5113] dump_stack_lvl+0xe8/0x150 [ 496.331684][ T5113] sysfs_create_dir_ns+0x271/0x2a0 [ 496.331706][ T5113] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 496.331730][ T5113] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 496.331760][ T5113] ? rt_spin_unlock+0x160/0x200 [ 496.331784][ T5113] kobject_add_internal+0x631/0xd10 [ 496.331825][ T5113] kobject_add+0x163/0x240 [ 496.331861][ T5113] ? __pfx_kobject_add+0x10/0x10 [ 496.331897][ T5113] ? get_device_parent+0x370/0x3a0 [ 496.331931][ T5113] device_add+0x408/0xb80 [ 496.331965][ T5113] hci_conn_add_sysfs+0xd5/0x210 [ 496.331993][ T5113] le_conn_complete_evt+0xf1d/0x1430 [ 496.332034][ T5113] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 496.332064][ T5113] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.332091][ T5113] ? lockdep_hardirqs_on+0x7a/0x110 [ 496.332119][ T5113] ? skb_pull_data+0xfb/0x200 [ 496.332154][ T5113] hci_le_conn_complete_evt+0x187/0x470 [ 496.332191][ T5113] hci_event_packet+0x7af/0x12c0 [ 496.332222][ T5113] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 496.332251][ T5113] ? __pfx_hci_event_packet+0x10/0x10 [ 496.332274][ T5113] ? rt_spin_unlock+0x14f/0x200 [ 496.332305][ T5113] ? hci_send_to_monitor+0xe2/0x590 [ 496.332339][ T5113] hci_rx_work+0x3ee/0x1030 [ 496.332372][ T5113] ? process_scheduled_works+0xa25/0x1830 [ 496.332403][ T5113] process_scheduled_works+0xb02/0x1830 [ 496.332457][ T5113] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.332492][ T5113] ? assign_work+0x3d5/0x5e0 [ 496.332532][ T5113] worker_thread+0xa50/0xfc0 [ 496.332589][ T5113] kthread+0x388/0x470 [ 496.332612][ T5113] ? __pfx_worker_thread+0x10/0x10 [ 496.332637][ T5113] ? __pfx_kthread+0x10/0x10 [ 496.332660][ T5113] ret_from_fork+0x51e/0xb90 [ 496.332692][ T5113] ? __pfx_ret_from_fork+0x10/0x10 [ 496.332717][ T5113] ? __switch_to+0xc7d/0x1450 [ 496.332746][ T5113] ? __pfx_kthread+0x10/0x10 [ 496.332769][ T5113] ret_from_fork_asm+0x1a/0x30 [ 496.332807][ T5113] [ 496.332896][ T5113] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 496.332941][ T5113] Bluetooth: hci2: failed to register connection device [ 497.736949][ T9737] netlink: 'syz.2.1256': attribute type 1 has an invalid length. [ 498.242330][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.221496][ T5113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 499.221515][ T5113] CPU: 1 UID: 0 PID: 5113 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 499.221531][ T5113] Tainted: [L]=SOFTLOCKUP [ 499.221534][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.221541][ T5113] Workqueue: hci4 hci_rx_work [ 499.221558][ T5113] Call Trace: [ 499.221563][ T5113] [ 499.221568][ T5113] dump_stack_lvl+0xe8/0x150 [ 499.221587][ T5113] sysfs_create_dir_ns+0x271/0x2a0 [ 499.221600][ T5113] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 499.221612][ T5113] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 499.221625][ T5113] ? rt_spin_unlock+0x160/0x200 [ 499.221637][ T5113] kobject_add_internal+0x631/0xd10 [ 499.221659][ T5113] kobject_add+0x163/0x240 [ 499.221676][ T5113] ? __pfx_kobject_add+0x10/0x10 [ 499.221695][ T5113] ? get_device_parent+0x370/0x3a0 [ 499.221712][ T5113] device_add+0x408/0xb80 [ 499.221729][ T5113] hci_conn_add_sysfs+0xd5/0x210 [ 499.221743][ T5113] le_conn_complete_evt+0xf1d/0x1430 [ 499.221764][ T5113] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 499.221780][ T5113] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 499.221794][ T5113] ? lockdep_hardirqs_on+0x7a/0x110 [ 499.221809][ T5113] ? skb_pull_data+0xfb/0x200 [ 499.221827][ T5113] hci_le_conn_complete_evt+0x187/0x470 [ 499.221846][ T5113] hci_event_packet+0x7af/0x12c0 [ 499.221862][ T5113] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 499.221877][ T5113] ? __pfx_hci_event_packet+0x10/0x10 [ 499.221889][ T5113] ? rt_spin_unlock+0x14f/0x200 [ 499.221904][ T5113] ? hci_send_to_monitor+0xe2/0x590 [ 499.221922][ T5113] hci_rx_work+0x3ee/0x1030 [ 499.221938][ T5113] ? process_scheduled_works+0xa25/0x1830 [ 499.221955][ T5113] process_scheduled_works+0xb02/0x1830 [ 499.221984][ T5113] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.222001][ T5113] ? assign_work+0x3d5/0x5e0 [ 499.222018][ T5113] worker_thread+0xa50/0xfc0 [ 499.222047][ T5113] kthread+0x388/0x470 [ 499.222058][ T5113] ? __pfx_worker_thread+0x10/0x10 [ 499.222071][ T5113] ? __pfx_kthread+0x10/0x10 [ 499.222083][ T5113] ret_from_fork+0x51e/0xb90 [ 499.222099][ T5113] ? __pfx_ret_from_fork+0x10/0x10 [ 499.222113][ T5113] ? __switch_to+0xc7d/0x1450 [ 499.222128][ T5113] ? __pfx_kthread+0x10/0x10 [ 499.222140][ T5113] ret_from_fork_asm+0x1a/0x30 [ 499.222159][ T5113] [ 499.222173][ T5113] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 499.222193][ T5113] Bluetooth: hci4: failed to register connection device [ 500.690312][ T9784] netlink: 'syz.2.1271': attribute type 1 has an invalid length. [ 500.696223][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1270'. [ 504.318738][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1266'. [ 504.420105][ T9830] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 505.078303][ T9845] overlayfs: failed to clone lowerpath [ 505.160392][ T9846] overlayfs: failed to clone lowerpath [ 505.860597][ T5113] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 506.378118][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 506.378171][ T36] audit: type=1326 audit(1772039214.696:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 506.378708][ T36] audit: type=1326 audit(1772039214.696:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 506.379279][ T36] audit: type=1326 audit(1772039214.696:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 506.379607][ T36] audit: type=1326 audit(1772039214.706:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 506.379938][ T36] audit: type=1326 audit(1772039214.706:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 506.380587][ T36] audit: type=1326 audit(1772039214.706:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 506.380987][ T36] audit: type=1326 audit(1772039214.716:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 506.381516][ T36] audit: type=1326 audit(1772039214.716:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 507.463693][ T812] hid_parser_main: 12 callbacks suppressed [ 507.463721][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 507.463748][ T812] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 507.465094][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465184][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465208][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465233][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465258][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465283][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465307][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465333][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.465358][ T812] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 507.819061][ T812] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 509.747080][ T9872] fido_id[9872]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 510.485172][ T5113] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 510.895811][ T9899] overlayfs: failed to clone lowerpath [ 511.026666][ T9900] overlayfs: failed to clone lowerpath [ 511.706374][ T812] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max [ 511.737005][ T812] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 511.866697][ T36] audit: type=1326 audit(1772039220.395:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 511.866986][ T36] audit: type=1326 audit(1772039220.395:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 511.867367][ T36] audit: type=1326 audit(1772039220.395:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 511.867624][ T36] audit: type=1326 audit(1772039220.405:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 511.867859][ T36] audit: type=1326 audit(1772039220.405:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 511.868092][ T36] audit: type=1326 audit(1772039220.405:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 511.868420][ T36] audit: type=1326 audit(1772039220.405:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 511.868656][ T36] audit: type=1326 audit(1772039220.405:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab10ec629 code=0x7ffc0000 [ 513.029423][ T9912] fido_id[9912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 513.399113][ T9930] IPv6: sit1: Disabled Multicast RS [ 518.032849][ T9990] netlink: 'syz.0.1346': attribute type 12 has an invalid length. [ 518.032870][ T9990] netlink: 'syz.0.1346': attribute type 29 has an invalid length. [ 518.032882][ T9990] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1346'. [ 518.032907][ T9990] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1346'. [ 518.174456][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 518.174485][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.174512][ T5807] Tainted: [L]=SOFTLOCKUP [ 518.174518][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.174531][ T5807] Workqueue: hci1 hci_rx_work [ 518.174560][ T5807] Call Trace: [ 518.174568][ T5807] [ 518.174577][ T5807] dump_stack_lvl+0xe8/0x150 [ 518.174610][ T5807] sysfs_create_dir_ns+0x271/0x2a0 [ 518.174633][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 518.174658][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 518.174683][ T5807] ? rt_spin_unlock+0x160/0x200 [ 518.174707][ T5807] kobject_add_internal+0x631/0xd10 [ 518.174746][ T5807] kobject_add+0x163/0x240 [ 518.174780][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 518.174815][ T5807] ? get_device_parent+0x370/0x3a0 [ 518.174846][ T5807] device_add+0x408/0xb80 [ 518.174886][ T5807] hci_conn_add_sysfs+0xd5/0x210 [ 518.174914][ T5807] le_conn_complete_evt+0xf1d/0x1430 [ 518.174952][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 518.174981][ T5807] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 518.175007][ T5807] ? lockdep_hardirqs_on+0x7a/0x110 [ 518.175034][ T5807] ? skb_pull_data+0xfb/0x200 [ 518.175067][ T5807] hci_le_conn_complete_evt+0x187/0x470 [ 518.175100][ T5807] hci_event_packet+0x7af/0x12c0 [ 518.175136][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 518.175164][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 518.175186][ T5807] ? rt_spin_unlock+0x14f/0x200 [ 518.175216][ T5807] ? hci_send_to_monitor+0xe2/0x590 [ 518.175249][ T5807] hci_rx_work+0x3ee/0x1030 [ 518.175281][ T5807] ? process_scheduled_works+0xa25/0x1830 [ 518.175310][ T5807] process_scheduled_works+0xb02/0x1830 [ 518.175363][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.175395][ T5807] ? assign_work+0x3d5/0x5e0 [ 518.175427][ T5807] worker_thread+0xa50/0xfc0 [ 518.175483][ T5807] kthread+0x388/0x470 [ 518.175504][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 518.175531][ T5807] ? __pfx_kthread+0x10/0x10 [ 518.175553][ T5807] ret_from_fork+0x51e/0xb90 [ 518.175585][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 518.175611][ T5807] ? __switch_to+0xc7d/0x1450 [ 518.175640][ T5807] ? __pfx_kthread+0x10/0x10 [ 518.175663][ T5807] ret_from_fork_asm+0x1a/0x30 [ 518.175700][ T5807] [ 518.180043][ T5807] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 518.180086][ T5807] Bluetooth: hci1: failed to register connection device [ 518.695983][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 518.696122][ T9999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.817962][ T9999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.523465][T10065] siw: device registration error -23 [ 522.524647][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 524.436247][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 525.516866][T10104] overlayfs: failed to clone lowerpath [ 528.479081][T10145] siw: device registration error -23 [ 528.507126][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'. [ 532.974445][T10184] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1418'. [ 537.143266][T10244] overlayfs: failed to clone lowerpath [ 539.869646][T10304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.463971][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1479'. [ 544.465767][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1479'. [ 546.775086][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 552.072578][T10431] bridge1: entered promiscuous mode [ 552.072605][T10431] bridge1: entered allmulticast mode [ 552.312606][T10440] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1514'. [ 553.561295][T10455] 9p: Bad value for 'rfdno' [ 554.333784][T10475] siw: device registration error -23 [ 554.360467][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1523'. [ 555.557878][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 555.585583][T10489] erspan0: entered promiscuous mode [ 555.585830][T10489] macvtap1: entered promiscuous mode [ 555.585969][T10489] macvtap1: entered allmulticast mode [ 555.585983][T10489] erspan0: entered allmulticast mode [ 558.517010][T10535] ip6gretap0: entered promiscuous mode [ 558.517147][T10535] vlan2: entered promiscuous mode [ 559.802383][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.129190][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 560.851066][T10584] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1571'. [ 564.606288][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 564.819880][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 564.871727][T10627] erspan0: entered promiscuous mode [ 564.871895][T10627] macvtap1: entered promiscuous mode [ 564.872048][T10627] macvtap1: entered allmulticast mode [ 564.872059][T10627] erspan0: entered allmulticast mode [ 576.871177][ T7702] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 577.081147][ T7702] usb 5-1: Using ep0 maxpacket: 8 [ 577.101404][ T7702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.101432][ T7702] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.152476][ T7702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.152503][ T7702] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.196434][ T7702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.196453][ T7702] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.200107][ T7702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.200131][ T7702] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.200167][ T7702] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 577.200190][ T7702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.259682][ T7702] usb 5-1: config 0 descriptor?? [ 578.347345][T10789] gretap0: entered promiscuous mode [ 578.347562][T10789] vlan2: entered promiscuous mode [ 580.141080][ T10] usb 5-1: USB disconnect, device number 6 [ 583.583069][T10861] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 589.354490][T10951] siw: device registration error -23 [ 591.843147][T11012] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 604.811930][T11175] 8021q: VLANs not supported on ip6gre0 [ 605.559991][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'. [ 608.648066][T11232] netlink: 'syz.4.1803': attribute type 1 has an invalid length. [ 608.648087][T11232] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1803'. [ 609.063938][T11234] siw: device registration error -23 [ 609.077967][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1806'. [ 609.675812][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 614.211000][ T5807] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 616.973796][T11315] 8021q: VLANs not supported on ip6gre0 [ 622.600935][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.760477][T11377] siw: device registration error -23 [ 622.786925][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1854'. [ 631.931954][T11468] siw: device registration error -23 [ 631.933375][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 632.787657][T11463] all (unregistering): Released all slaves [ 633.254894][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 633.257691][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 633.260372][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 633.290175][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 633.292096][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 633.669243][T11479] vlan2: entered promiscuous mode [ 634.828791][T11473] lo speed is unknown, defaulting to 1000 [ 635.243784][ T7278] bridge0: port 3(syz_tun) entered disabled state [ 635.380884][ T5113] Bluetooth: hci3: command tx timeout [ 635.687370][ T7278] syz_tun (unregistering): left allmulticast mode [ 635.687397][ T7278] syz_tun (unregistering): left promiscuous mode [ 635.690524][ T7278] bridge0: port 3(syz_tun) entered disabled state [ 635.802351][T11508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1898'. [ 636.603204][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 637.461061][ T5113] Bluetooth: hci3: command tx timeout [ 638.643869][ T138] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.370313][ T138] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.541687][ T5113] Bluetooth: hci3: command tx timeout [ 639.839106][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1910'. [ 639.865435][T11550] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 641.961306][ T5113] Bluetooth: hci3: command tx timeout [ 641.996206][ T138] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.366506][T11473] chnl_net:caif_netlink_parms(): no params data found [ 644.471956][ T138] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.817120][T11578] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 644.902960][T11578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.903788][T11473] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.904527][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.904700][T11473] bridge_slave_0: entered allmulticast mode [ 644.907256][T11473] bridge_slave_0: entered promiscuous mode [ 644.945121][T11473] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.945315][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.945647][T11473] bridge_slave_1: entered allmulticast mode [ 644.948501][T11473] bridge_slave_1: entered promiscuous mode [ 645.020589][T11473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.036945][T11473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.087118][T11473] team0: Port device team_slave_0 added [ 645.096485][T11473] team0: Port device team_slave_1 added [ 645.142457][T11473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.142472][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.142495][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.144969][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.144981][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.145005][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.333508][T11473] hsr_slave_0: entered promiscuous mode [ 645.334795][T11473] hsr_slave_1: entered promiscuous mode [ 645.335749][T11473] debugfs: 'hsr0' already exists in 'hsr' [ 645.335772][T11473] Cannot create hsr debugfs directory [ 646.973348][T11608] overlayfs: failed to clone lowerpath [ 647.434385][ T138] bridge_slave_1: left allmulticast mode [ 647.435146][ T138] bridge_slave_1: left promiscuous mode [ 647.437202][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.563303][ T138] bridge_slave_0: left allmulticast mode [ 647.563330][ T138] bridge_slave_0: left promiscuous mode [ 647.563575][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.499454][T11635] siw: device registration error -23 [ 649.652164][T11636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 649.700226][T11636] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 652.007073][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.055139][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.094738][ T138] bond0 (unregistering): Released all slaves [ 652.950586][T11665] overlayfs: failed to clone lowerpath [ 655.075813][T11685] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 655.629195][T11713] siw: device registration error -23 [ 656.634719][ T138] hsr_slave_0: left promiscuous mode [ 656.680989][ T138] hsr_slave_1: left promiscuous mode [ 656.685049][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.685125][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.733593][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.733619][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.943759][ T138] veth1_macvtap: left promiscuous mode [ 656.944007][ T138] veth0_macvtap: left promiscuous mode [ 656.944315][ T138] veth1_vlan: left promiscuous mode [ 656.944648][ T138] veth0_vlan: left promiscuous mode [ 657.431151][T11745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1954'. [ 657.455924][T11745] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 659.933197][T11762] siw: device registration error -23 [ 661.113446][ T138] team0 (unregistering): Port device team_slave_1 removed [ 661.149024][ T138] team0 (unregistering): Port device team_slave_0 removed [ 661.384600][T11752] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 662.647708][T11789] siw: device registration error -23 [ 663.306506][T11473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 663.730802][T11473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 663.797350][T11473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 663.985491][T11473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 664.446803][T11473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.489332][T11473] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.522840][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.526701][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.568074][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.568219][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.742033][T11829] siw: device registration error -23 [ 665.873814][T11840] overlayfs: overlapping lowerdir path [ 667.644092][T11473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.204814][T11473] veth0_vlan: entered promiscuous mode [ 668.234661][T11473] veth1_vlan: entered promiscuous mode [ 668.307778][T11473] veth0_macvtap: entered promiscuous mode [ 668.326072][T11473] veth1_macvtap: entered promiscuous mode [ 668.417824][T11473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.447884][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.681168][T11877] lo speed is unknown, defaulting to 1000 [ 668.696685][ T5936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.720799][ T5936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.964185][ T5936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.975468][ T149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.078654][T11893] siw: device registration error -23 [ 673.346968][T11921] overlayfs: overlapping lowerdir path [ 674.033816][T11896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.033835][T11896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.361395][ T6625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.361414][ T6625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.953806][T11953] siw: device registration error -23 [ 676.979713][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2005'. [ 685.201476][T11994] all (unregistering): Released all slaves [ 688.066834][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.821228][T12052] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 692.261978][T12074] siw: device registration error -23 [ 701.985716][T12169] lo speed is unknown, defaulting to 1000 [ 707.066693][T12193] lo speed is unknown, defaulting to 1000 [ 708.863684][T12217] siw: device registration error -23 [ 708.890818][T12217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2086'. [ 709.150368][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2088'. [ 711.172308][T12226] all (unregistering): Released all slaves [ 714.450326][T12256] overlayfs: failed to clone lowerpath [ 715.261782][T12271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2101'. [ 715.287221][T12271] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 715.314259][T12274] netlink: 'syz.4.2102': attribute type 1 has an invalid length. [ 715.314279][T12274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2102'. [ 716.614219][T12281] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 717.865430][T12293] lo speed is unknown, defaulting to 1000 [ 720.038633][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.038662][T12321] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.039357][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.039480][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.039500][T12321] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.040098][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.040202][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.040221][T12321] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2118'. [ 720.694808][T12336] siw: device registration error -23 [ 724.022746][ T6008] IPVS: starting estimator thread 0... [ 724.111887][T12372] IPVS: using max 8 ests per chain, 19200 per kthread [ 724.454620][T12390] __nla_validate_parse: 22 callbacks suppressed [ 724.454639][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 724.537777][T12394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2148'. [ 726.406619][T12425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 726.496393][T12428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2161'. [ 726.626459][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'. [ 726.626492][T12432] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2144'. [ 726.627187][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'. [ 726.627335][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'. [ 726.627356][T12432] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2144'. [ 726.627944][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'. [ 726.628047][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'. [ 727.205164][T12442] vlan2: entered promiscuous mode [ 727.205195][T12442] bridge0: entered promiscuous mode [ 729.243563][T11714] lo speed is unknown, defaulting to 1000 [ 729.243682][T11714] syz0: Port: 1 Link DOWN [ 729.303172][T12445] Bluetooth: hci3: command 0x0405 tx timeout [ 729.414540][T12487] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 735.795184][T12539] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 743.815504][T12613] lo speed is unknown, defaulting to 1000 [ 745.580377][T12617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.200838][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.245934][T12630] __nla_validate_parse: 26 callbacks suppressed [ 749.245956][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2227'. [ 749.265285][T12630] vlan2: entered promiscuous mode [ 749.265312][T12630] syz_tun: entered promiscuous mode [ 754.044842][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'. [ 754.050168][T12672] vlan2: entered promiscuous mode [ 754.050181][T12672] bridge0: entered promiscuous mode [ 756.353057][T12445] Bluetooth: hci3: command 0x0405 tx timeout [ 757.823520][T12711] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 758.701519][T12736] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 765.502642][T12781] mmap: syz.4.2271 (12781) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 767.160932][T12807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2275'. [ 768.285544][T12808] hub 8-0:1.0: USB hub found [ 768.286224][T12808] hub 8-0:1.0: 1 port detected [ 768.531255][T12808] all (unregistering): Released all slaves [ 770.987374][T12841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.009713][T12855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.739355][T12896] lo speed is unknown, defaulting to 1000 [ 779.263146][T12906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'. [ 787.951089][T12963] overlayfs: overlapping lowerdir path [ 788.939459][T12959] lo speed is unknown, defaulting to 1000 [ 790.314585][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2338'. [ 792.282876][T13001] lo speed is unknown, defaulting to 1000 [ 797.650988][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.651029][T13055] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.651529][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.651607][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.651618][T13055] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.651944][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.652000][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.652011][T13055] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.652320][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 797.652375][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 804.658770][T13105] __nla_validate_parse: 20 callbacks suppressed [ 804.658816][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2370'. [ 804.663366][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2370'. [ 808.138253][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 808.152379][T13135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 808.312200][T13133] bond_slave_0: entered promiscuous mode [ 808.312272][T13133] bond_slave_1: entered promiscuous mode [ 808.312484][T13133] macvtap1: entered promiscuous mode [ 808.312502][T13133] bond0: entered promiscuous mode [ 808.315262][T13133] macvtap1: entered allmulticast mode [ 808.315273][T13133] bond0: entered allmulticast mode [ 808.315281][T13133] bond_slave_0: entered allmulticast mode [ 808.315290][T13133] bond_slave_1: entered allmulticast mode [ 808.367625][T13133] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 808.650977][T13141] lo speed is unknown, defaulting to 1000 [ 811.201432][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.465407][ T7935] bridge0: port 3(syz_tun) entered disabled state [ 812.787969][ T7935] syz_tun (unregistering): left allmulticast mode [ 812.788059][ T7935] bridge0: port 3(syz_tun) entered disabled state [ 813.896046][T13194] overlayfs: failed to clone lowerpath [ 815.594193][T13212] siw: device registration error -23 [ 815.623258][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2403'. [ 816.974688][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'. [ 817.001383][T13221] io-wq is not configured for unbound workers [ 819.404069][T13228] : Can't lookup blockdev [ 819.763684][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 819.802204][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 819.803589][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 820.021670][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 820.069740][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.428093][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.498654][T13239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 822.244596][T13263] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 822.888073][ T5113] Bluetooth: hci1: command tx timeout [ 823.254874][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.255582][T13245] lo speed is unknown, defaulting to 1000 [ 824.947717][ T5113] Bluetooth: hci1: command tx timeout [ 825.150746][T13290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2425'. [ 826.505699][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.615038][T13309] lo speed is unknown, defaulting to 1000 [ 827.704173][ T5113] Bluetooth: hci1: command tx timeout [ 827.763405][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2434'. [ 827.821981][T13313] vlan2: entered promiscuous mode [ 829.926541][ T5113] Bluetooth: hci1: command tx timeout [ 830.084763][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.271450][T13245] chnl_net:caif_netlink_parms(): no params data found [ 830.565619][T13350] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.784240][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 832.015594][T13365] vlan2: entered promiscuous mode [ 832.015614][T13365] syz_tun: entered promiscuous mode [ 832.215571][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.215690][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.215883][T13245] bridge_slave_0: entered allmulticast mode [ 832.250396][T13245] bridge_slave_0: entered promiscuous mode [ 832.280959][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.282004][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.282130][T13245] bridge_slave_1: entered allmulticast mode [ 832.291080][T13245] bridge_slave_1: entered promiscuous mode [ 832.357425][ T42] bridge_slave_1: left allmulticast mode [ 832.357450][ T42] bridge_slave_1: left promiscuous mode [ 832.357678][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.252298][ T42] : left allmulticast mode [ 835.252323][ T42] : left promiscuous mode [ 835.252627][ T42] bridge0: port 1() entered disabled state [ 843.781276][ T42] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 845.031452][ T42] erspan0 (unregistering): left allmulticast mode [ 847.929535][T12445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.944313][T12445] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.946739][T12445] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 847.948659][T12445] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 847.949339][T12445] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.041381][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.101284][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.143854][ T42] bond0 (unregistering): Released all slaves [ 848.153787][ T42] bond1 (unregistering): Released all slaves [ 848.170627][ T42] bond2 (unregistering): Released all slaves [ 848.246246][T13430] lo speed is unknown, defaulting to 1000 [ 848.384119][T13431] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 849.526721][T13245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.664500][T13370] bridge0: port 3(syz_tun) entered disabled state [ 849.738046][T13370] syz_tun (unregistering): left allmulticast mode [ 849.738111][T13370] bridge0: port 3(syz_tun) entered disabled state [ 849.934451][T13245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.023273][ T5113] Bluetooth: hci5: command tx timeout [ 851.410381][T12445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 851.428798][T12445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 851.430013][T12445] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 851.446222][T12445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 851.450347][T12445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 852.306081][T12445] Bluetooth: hci5: command tx timeout [ 853.051621][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2471'. [ 853.131513][T13245] team0: Port device team_slave_0 added [ 853.160092][T13434] lo speed is unknown, defaulting to 1000 [ 853.172184][T13245] team0: Port device team_slave_1 added [ 854.401755][T12445] Bluetooth: hci4: command tx timeout [ 854.402135][T12445] Bluetooth: hci5: command tx timeout [ 854.468942][ T42] hsr_slave_0: left promiscuous mode [ 856.460921][ T5113] Bluetooth: hci5: command tx timeout [ 856.460956][ T5113] Bluetooth: hci4: command tx timeout [ 856.509563][ T42] hsr_slave_1: left promiscuous mode [ 856.519199][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.519227][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.111933][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.111968][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.773440][ T42] veth1_macvtap: left promiscuous mode [ 857.792653][ T42] veth0_macvtap: left promiscuous mode [ 857.811881][ T42] veth1_vlan: left promiscuous mode [ 857.888081][ T42] veth0_vlan: left promiscuous mode [ 858.504483][T12445] Bluetooth: hci4: command tx timeout [ 859.871667][ T42] team0 (unregistering): Port device team_slave_1 removed [ 859.933648][ T42] team0 (unregistering): Port device team_slave_0 removed [ 860.198536][T13245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.198554][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.198580][T13245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.309022][T13245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.309040][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.309066][T13245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.344534][T13454] lo speed is unknown, defaulting to 1000 [ 860.597626][T12445] Bluetooth: hci4: command tx timeout [ 860.773757][T13245] hsr_slave_0: entered promiscuous mode [ 860.777790][T13245] hsr_slave_1: entered promiscuous mode [ 860.795912][T13245] debugfs: 'hsr0' already exists in 'hsr' [ 860.795930][T13245] Cannot create hsr debugfs directory [ 863.139611][T13434] chnl_net:caif_netlink_parms(): no params data found [ 866.834325][T13554] capability: warning: `syz.1.2489' uses 32-bit capabilities (legacy support in use) [ 869.113899][T13572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2494'. [ 869.113932][T13572] netlink: 'syz.1.2494': attribute type 2 has an invalid length. [ 869.113940][T13572] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 869.113953][T13572] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2494'. [ 869.200111][T13454] chnl_net:caif_netlink_parms(): no params data found [ 870.498255][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.602486][T13434] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.602617][T13434] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.602742][T13434] bridge_slave_0: entered allmulticast mode [ 871.604156][T13434] bridge_slave_0: entered promiscuous mode [ 872.014040][T13591] siw: device registration error -23 [ 872.046683][T13591] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 872.613455][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.672492][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.731868][T13434] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.731939][T13434] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.732082][T13434] bridge_slave_1: entered allmulticast mode [ 872.733562][T13434] bridge_slave_1: entered promiscuous mode [ 873.999232][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.713367][T13434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.019046][T13245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 875.056337][T13434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.056562][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.056700][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.056807][T13454] bridge_slave_0: entered allmulticast mode [ 875.058155][T13454] bridge_slave_0: entered promiscuous mode [ 875.691556][T13245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 875.896217][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.896351][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.896535][T13454] bridge_slave_1: entered allmulticast mode [ 875.898997][T13454] bridge_slave_1: entered promiscuous mode [ 876.235346][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.002154][T13245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 877.303004][T13615] netlink: 'syz.1.2505': attribute type 29 has an invalid length. [ 877.303026][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2505'. [ 877.303827][T13615] bridge_slave_0: left allmulticast mode [ 877.303853][T13615] bridge_slave_0: left promiscuous mode [ 877.304113][T13615] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.395445][T13434] team0: Port device team_slave_0 added [ 877.468672][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.484176][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.485321][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.486334][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.487277][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 877.505248][T13434] team0: Port device team_slave_1 added [ 877.603160][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.684541][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.726913][T13434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.726931][T13434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.726957][T13434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.650218][T12445] Bluetooth: hci3: command tx timeout [ 879.682757][T13434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.682774][T13434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.682800][T13434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.751511][T13454] team0: Port device team_slave_0 added [ 880.134234][T13454] team0: Port device team_slave_1 added [ 880.554328][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.554344][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.554370][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.555919][T13626] lo speed is unknown, defaulting to 1000 [ 880.635712][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.635728][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.635753][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.713786][T13434] hsr_slave_0: entered promiscuous mode [ 880.715095][T13434] hsr_slave_1: entered promiscuous mode [ 880.715975][T13434] debugfs: 'hsr0' already exists in 'hsr' [ 880.715997][T13434] Cannot create hsr debugfs directory [ 881.721476][ T5113] Bluetooth: hci3: command tx timeout [ 881.886675][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.958360][T13454] hsr_slave_0: entered promiscuous mode [ 881.959438][T13454] hsr_slave_1: entered promiscuous mode [ 881.959957][T13454] debugfs: 'hsr0' already exists in 'hsr' [ 881.959971][T13454] Cannot create hsr debugfs directory [ 884.410877][ T5113] Bluetooth: hci3: command tx timeout [ 884.553557][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.909532][T13690] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2522'. [ 887.089987][ T5113] Bluetooth: hci3: command tx timeout [ 887.216444][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2523'. [ 888.204081][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.965949][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.004875][T13716] overlayfs: failed to clone lowerpath [ 891.261013][T13724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2533'. [ 892.638118][T13626] chnl_net:caif_netlink_parms(): no params data found [ 893.204191][T13751] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 893.845101][T13434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 893.911619][T13752] overlayfs: failed to clone lowerpath [ 894.012875][ T42] bridge_slave_1: left allmulticast mode [ 894.012903][ T42] bridge_slave_1: left promiscuous mode [ 894.013156][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.116891][ T42] bridge_slave_0: left allmulticast mode [ 894.116919][ T42] bridge_slave_0: left promiscuous mode [ 894.117147][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.456704][ T42] bridge_slave_1: left allmulticast mode [ 894.456734][ T42] bridge_slave_1: left promiscuous mode [ 894.456970][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.342541][ T42] bridge_slave_0: left allmulticast mode [ 895.342570][ T42] bridge_slave_0: left promiscuous mode [ 895.342811][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.111785][ T42] bond0 (unregistering): left allmulticast mode [ 897.111810][ T42] bond_slave_0: left allmulticast mode [ 897.111827][ T42] bond_slave_1: left allmulticast mode [ 897.111855][ T42] bond0 (unregistering): left promiscuous mode [ 897.111868][ T42] bond_slave_0: left promiscuous mode [ 897.112096][ T42] bond_slave_1: left promiscuous mode [ 897.271555][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.331706][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.373016][ T42] bond0 (unregistering): Released all slaves [ 897.771414][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.831556][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.852807][ T42] bond0 (unregistering): Released all slaves [ 897.857815][ T42] bond1 (unregistering): Released all slaves [ 897.868861][ T42] bond2 (unregistering): Released all slaves [ 897.939178][T13434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 897.954938][T13779] lo speed is unknown, defaulting to 1000 [ 898.309040][T13434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 899.715978][T13793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 899.778013][T13434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 899.822204][T13626] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.822346][T13626] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.822585][T13626] bridge_slave_0: entered allmulticast mode [ 899.824661][T13626] bridge_slave_0: entered promiscuous mode [ 900.028724][T13626] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.028793][T13626] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.028969][T13626] bridge_slave_1: entered allmulticast mode [ 900.031795][T13626] bridge_slave_1: entered promiscuous mode [ 902.318821][T13801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 902.382807][T13813] netlink: 'syz.0.2550': attribute type 5 has an invalid length. [ 902.382827][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 902.479985][T13626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.513590][T13813] bridge_slave_0: left allmulticast mode [ 902.513622][T13813] bridge_slave_0: left promiscuous mode [ 902.513861][T13813] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.602155][T13813] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 902.897662][T13626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.351760][T13454] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 906.171828][T13454] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 906.328037][T13626] team0: Port device team_slave_0 added [ 907.652199][T13454] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 907.749005][T13626] team0: Port device team_slave_1 added [ 907.884579][T13454] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 908.134431][T12445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 908.151459][T12445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 908.158115][T12445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 908.189331][T12445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 908.198784][T12445] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 909.207863][T13872] all (unregistering): Released all slaves [ 910.342460][ T5113] Bluetooth: hci1: command tx timeout [ 910.445850][T13626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.445867][T13626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.445891][T13626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.423620][T13454] kthread_run failed with err -4 [ 911.683090][T12445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 911.687247][T12445] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 911.710865][T12445] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 911.724148][T12445] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 911.724903][T12445] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 912.421517][T12445] Bluetooth: hci1: command tx timeout [ 913.667741][T13626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.667758][T13626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.667784][T13626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.644490][T12445] Bluetooth: hci5: command tx timeout [ 914.880917][T12445] Bluetooth: hci1: command tx timeout [ 915.309422][T13951] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 916.474566][ T42] hsr_slave_0: left promiscuous mode [ 916.527326][ T42] hsr_slave_1: left promiscuous mode [ 916.528424][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.528450][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.562059][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.562085][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.671034][T12445] Bluetooth: hci5: command tx timeout [ 918.363764][T12445] Bluetooth: hci1: command tx timeout [ 918.613672][ T42] hsr_slave_0: left promiscuous mode [ 918.651650][ T42] hsr_slave_1: left promiscuous mode [ 918.652643][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.652666][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.711954][ T42] batman_adv: batadv0: Interface deactivated: vlan1 [ 918.711980][ T42] batman_adv: batadv0: Removing interface: vlan1 [ 918.740973][T12445] Bluetooth: hci5: command tx timeout [ 919.019731][ T42] veth1_macvtap: left promiscuous mode [ 919.075537][ T42] veth0_macvtap: left promiscuous mode [ 919.079245][ T42] veth1_vlan: left promiscuous mode [ 919.101966][ T42] veth0_vlan: left promiscuous mode [ 919.901544][ T42] veth1_macvtap: left promiscuous mode [ 919.901654][ T42] veth0_macvtap: left promiscuous mode [ 919.901794][ T42] veth1_vlan: left promiscuous mode [ 919.901887][ T42] veth0_vlan: left promiscuous mode [ 920.820893][T12445] Bluetooth: hci5: command tx timeout [ 921.181486][ T42] team0 (unregistering): Port device team_slave_1 removed [ 921.241783][ T42] team0 (unregistering): Port device team_slave_0 removed [ 922.191439][ T42] team0 (unregistering): Port device team_slave_1 removed [ 922.255607][ T42] team0 (unregistering): Port device team_slave_0 removed [ 923.182300][T13853] lo speed is unknown, defaulting to 1000 [ 923.225774][T13626] hsr_slave_0: entered promiscuous mode [ 923.227029][T13626] hsr_slave_1: entered promiscuous mode [ 923.228407][T13626] debugfs: 'hsr0' already exists in 'hsr' [ 923.228430][T13626] Cannot create hsr debugfs directory [ 923.251757][T13920] lo speed is unknown, defaulting to 1000 [ 928.366415][T13853] chnl_net:caif_netlink_parms(): no params data found [ 932.175478][T13920] chnl_net:caif_netlink_parms(): no params data found [ 936.592119][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.087391][T13853] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.087535][T13853] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.087697][T13853] bridge_slave_0: entered allmulticast mode [ 937.089172][T13853] bridge_slave_0: entered promiscuous mode [ 937.292108][T13853] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.292254][T13853] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.292512][T13853] bridge_slave_1: entered allmulticast mode [ 937.294446][T13853] bridge_slave_1: entered promiscuous mode [ 937.309670][T14164] lo speed is unknown, defaulting to 1000 [ 937.362032][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.362302][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.362494][T13920] bridge_slave_0: entered allmulticast mode [ 937.364089][T13920] bridge_slave_0: entered promiscuous mode [ 937.392929][T13853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.394730][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.394860][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.395298][T13920] bridge_slave_1: entered allmulticast mode [ 937.398201][T13920] bridge_slave_1: entered promiscuous mode [ 937.419745][T13853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.500585][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.518677][T13853] team0: Port device team_slave_0 added [ 937.522437][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.561260][T13853] team0: Port device team_slave_1 added [ 937.720648][T13920] team0: Port device team_slave_0 added [ 937.743585][T13853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.743602][T13853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.743627][T13853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.750423][T13920] team0: Port device team_slave_1 added [ 937.761627][T13853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.761642][T13853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.761667][T13853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.884181][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.884197][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.884222][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.128687][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.128704][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.128729][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.242840][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 938.265264][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 938.266621][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 938.728530][T13853] hsr_slave_0: entered promiscuous mode [ 938.772472][T13853] hsr_slave_1: entered promiscuous mode [ 938.803331][T13853] debugfs: 'hsr0' already exists in 'hsr' [ 938.805298][T13853] Cannot create hsr debugfs directory [ 939.093145][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 939.101116][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 939.899276][ T42] IPVS: stop unused estimator thread 0... [ 941.045255][T13920] hsr_slave_0: entered promiscuous mode [ 941.315788][ T5113] Bluetooth: hci4: command tx timeout [ 941.326328][T13920] hsr_slave_1: entered promiscuous mode [ 941.328039][T13920] debugfs: 'hsr0' already exists in 'hsr' [ 941.328063][T13920] Cannot create hsr debugfs directory [ 942.119248][T14179] lo speed is unknown, defaulting to 1000 [ 942.423260][T14240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2626'. [ 942.423295][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2626'. [ 943.380842][ T5113] Bluetooth: hci4: command tx timeout [ 946.070858][ T5113] Bluetooth: hci4: command tx timeout [ 948.111267][ T5113] Bluetooth: hci4: command tx timeout [ 948.217317][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2647'. [ 948.251768][T14308] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 950.304485][T14179] chnl_net:caif_netlink_parms(): no params data found [ 950.697885][T14179] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.698061][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.698354][T14179] bridge_slave_0: entered allmulticast mode [ 950.752642][T14179] bridge_slave_0: entered promiscuous mode [ 950.773743][T14179] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.773856][T14179] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.774102][T14179] bridge_slave_1: entered allmulticast mode [ 950.776610][T14179] bridge_slave_1: entered promiscuous mode [ 950.985699][ T42] bridge_slave_1: left allmulticast mode [ 950.985727][ T42] bridge_slave_1: left promiscuous mode [ 950.985947][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.317651][ T42] bridge_slave_0: left allmulticast mode [ 951.317679][ T42] bridge_slave_0: left promiscuous mode [ 951.317922][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.463669][ T42] bridge_slave_1: left allmulticast mode [ 951.463697][ T42] bridge_slave_1: left promiscuous mode [ 951.463918][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.612946][ T42] bridge_slave_0: left allmulticast mode [ 951.612975][ T42] bridge_slave_0: left promiscuous mode [ 951.613217][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.847674][ T42] bridge_slave_1: left allmulticast mode [ 951.847702][ T42] bridge_slave_1: left promiscuous mode [ 951.849885][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.922778][ T42] bridge_slave_0: left allmulticast mode [ 951.922806][ T42] bridge_slave_0: left promiscuous mode [ 951.923054][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.454786][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.531546][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.596910][ T42] bond0 (unregistering): Released all slaves [ 952.961601][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.243846][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.134170][ T42] bond0 (unregistering): Released all slaves [ 954.331432][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.412054][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.476803][ T42] bond0 (unregistering): Released all slaves [ 954.519138][T14179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.834285][T14179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.200517][T14179] team0: Port device team_slave_0 added [ 955.210575][T14179] team0: Port device team_slave_1 added [ 955.399808][T14395] netlink: 'syz.1.2674': attribute type 1 has an invalid length. [ 955.427522][T14179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.427539][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.427564][T14179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.469532][T14179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.469543][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.469558][T14179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.673012][T14397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 955.810988][ T42] hsr_slave_0: left promiscuous mode [ 955.852289][ T42] hsr_slave_1: left promiscuous mode [ 955.852991][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.874021][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.030993][ T42] hsr_slave_0: left promiscuous mode [ 956.052253][ T42] hsr_slave_1: left promiscuous mode [ 956.053006][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.091916][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.291003][ T42] hsr_slave_0: left promiscuous mode [ 956.310899][ T42] hsr_slave_1: left promiscuous mode [ 956.311873][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.352128][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.951633][ T42] team0 (unregistering): Port device team_slave_1 removed [ 957.001436][ T42] team0 (unregistering): Port device team_slave_0 removed [ 957.512246][ T42] team0 (unregistering): Port device team_slave_1 removed [ 957.561521][ T42] team0 (unregistering): Port device team_slave_0 removed [ 958.151791][ T42] team0 (unregistering): Port device team_slave_1 removed [ 958.212946][ T42] team0 (unregistering): Port device team_slave_0 removed [ 958.621838][T14179] hsr_slave_0: entered promiscuous mode [ 958.622733][T14179] hsr_slave_1: entered promiscuous mode [ 958.623290][T14179] debugfs: 'hsr0' already exists in 'hsr' [ 958.623306][T14179] Cannot create hsr debugfs directory [ 960.367213][T13853] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 960.445678][T13853] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 960.609631][T13853] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 960.699631][T13853] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 960.953051][T13920] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 961.138165][T13920] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 961.310417][T14456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.357083][T13920] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 961.409199][T13920] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 961.885638][T14466] siw: device registration error -23 [ 961.913984][T14466] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 963.298147][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 963.326166][T13853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.600179][T13853] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.855858][ T2202] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.855986][ T2202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.548160][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.619352][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.619427][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.766421][T14179] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 964.859025][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.902566][T14179] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 964.979551][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.979675][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.997974][T14179] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 965.048521][T14179] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 965.129049][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.129123][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.387125][ T42] bridge_slave_1: left allmulticast mode [ 965.387153][ T42] bridge_slave_1: left promiscuous mode [ 965.387372][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.475914][ T42] bridge_slave_0: left allmulticast mode [ 965.475934][ T42] bridge_slave_0: left promiscuous mode [ 965.476087][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.851554][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.945039][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.002614][ T42] bond0 (unregistering): Released all slaves [ 966.511294][ T42] hsr_slave_0: left promiscuous mode [ 966.550890][ T42] hsr_slave_1: left promiscuous mode [ 966.551782][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.654873][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.272928][ T42] team0 (unregistering): Port device team_slave_1 removed [ 967.325047][ T42] team0 (unregistering): Port device team_slave_0 removed [ 967.568912][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2693'. [ 968.003773][T14179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.103645][T13920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.185925][T14546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2699'. [ 968.349821][T14549] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 969.042716][T14179] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.074739][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.078780][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.178848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.179002][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.520319][T12445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 969.536631][T12445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 969.538146][T12445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 969.569775][T12445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 969.581135][T12445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 969.998421][T14554] lo speed is unknown, defaulting to 1000 [ 971.216634][T14584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 971.381569][T12445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 971.407362][T12445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 971.419575][T12445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 971.431018][T12445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 971.433491][T12445] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 971.706723][T12445] Bluetooth: hci3: command tx timeout [ 972.179850][T14179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.742497][T14585] lo speed is unknown, defaulting to 1000 [ 973.461473][T12445] Bluetooth: hci1: command tx timeout [ 973.543672][T14554] chnl_net:caif_netlink_parms(): no params data found [ 973.781153][ T5113] Bluetooth: hci3: command tx timeout [ 975.119770][T14554] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.119965][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.120158][T14554] bridge_slave_0: entered allmulticast mode [ 975.145338][T14554] bridge_slave_0: entered promiscuous mode [ 975.185651][T14554] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.185794][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.186005][T14554] bridge_slave_1: entered allmulticast mode [ 975.188510][T14554] bridge_slave_1: entered promiscuous mode [ 975.305288][T13896] bridge_slave_1: left allmulticast mode [ 975.305316][T13896] bridge_slave_1: left promiscuous mode [ 975.305538][T13896] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.372282][T13896] bridge_slave_0: left allmulticast mode [ 975.372312][T13896] bridge_slave_0: left promiscuous mode [ 975.372545][T13896] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.553500][ T5113] Bluetooth: hci1: command tx timeout [ 975.809828][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2707'. [ 975.870814][ T5113] Bluetooth: hci3: command tx timeout [ 977.151564][T13896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.211572][T13896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.243898][T13896] bond0 (unregistering): Released all slaves [ 977.373975][T14554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.374247][T14179] veth0_vlan: entered promiscuous mode [ 977.375449][T14585] chnl_net:caif_netlink_parms(): no params data found [ 977.444383][T14554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.741786][ T5113] Bluetooth: hci1: command tx timeout [ 977.830458][T14554] team0: Port device team_slave_0 added [ 977.949698][ T5113] Bluetooth: hci3: command tx timeout [ 978.061819][T13896] hsr_slave_0: left promiscuous mode [ 978.102938][T13896] hsr_slave_1: left promiscuous mode [ 978.105452][T13896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.161807][T13896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.840649][T14656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.934220][ T5113] Bluetooth: hci1: command tx timeout [ 981.104011][T13896] team0 (unregistering): Port device team_slave_1 removed [ 981.435439][T14664] siw: device registration error -23 [ 981.457437][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2717'. [ 981.477012][T14664] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 982.283178][T13896] team0 (unregistering): Port device team_slave_0 removed [ 984.545215][T14554] team0: Port device team_slave_1 added [ 984.802521][T14179] veth1_vlan: entered promiscuous mode [ 985.683747][T14554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.683764][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.683789][T14554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.747662][T14554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.747677][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.747703][T14554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.854085][T14585] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.854269][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.854456][T14585] bridge_slave_0: entered allmulticast mode [ 985.855813][T14585] bridge_slave_0: entered promiscuous mode [ 985.882263][T14681] lo speed is unknown, defaulting to 1000 [ 985.886292][T14585] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.886427][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.886610][T14585] bridge_slave_1: entered allmulticast mode [ 985.888921][T14585] bridge_slave_1: entered promiscuous mode [ 986.084362][T14585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.096825][T14554] hsr_slave_0: entered promiscuous mode [ 986.098227][T14554] hsr_slave_1: entered promiscuous mode [ 986.099216][T14554] debugfs: 'hsr0' already exists in 'hsr' [ 986.099239][T14554] Cannot create hsr debugfs directory [ 986.174366][T14585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.382278][T14585] team0: Port device team_slave_0 added [ 986.467562][T14585] team0: Port device team_slave_1 added [ 986.963793][T14179] veth0_macvtap: entered promiscuous mode [ 986.969810][T14585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.969822][T14585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.969837][T14585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.131985][T14585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.132003][T14585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.132019][T14585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.255099][T14179] veth1_macvtap: entered promiscuous mode [ 987.545212][T14585] hsr_slave_0: entered promiscuous mode [ 987.556808][T14585] hsr_slave_1: entered promiscuous mode [ 987.559788][T14585] debugfs: 'hsr0' already exists in 'hsr' [ 987.559812][T14585] Cannot create hsr debugfs directory [ 987.836693][T14179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.396775][T14179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.116029][ T6625] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.195443][T14730] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 991.272337][ T6625] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.308646][ T6625] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.627355][ T6625] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.221062][T14757] lo speed is unknown, defaulting to 1000 [ 995.341105][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.341127][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.445546][T13898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.445566][T13898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.237041][T13896] bridge_slave_1: left allmulticast mode [ 997.237060][T13896] bridge_slave_1: left promiscuous mode [ 997.237211][T13896] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.328795][T13896] bridge_slave_0: left allmulticast mode [ 999.328854][T13896] bridge_slave_0: left promiscuous mode [ 999.329385][T13896] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.955889][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.377897][T14803] program syz.6.2755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1002.146840][T13896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.181956][T13896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.028380][T13896] bond0 (unregistering): Released all slaves [ 1003.076342][T14812] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 1005.954253][T13896] hsr_slave_0: left promiscuous mode [ 1006.011667][T13896] hsr_slave_1: left promiscuous mode [ 1006.012724][T13896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.324424][T13896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.891667][T13896] team0 (unregistering): Port device team_slave_1 removed [ 1009.845613][T13896] team0 (unregistering): Port device team_slave_0 removed [ 1013.324360][T14554] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1013.399930][T14554] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1013.472662][T14554] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1013.644464][T14906] program syz.6.2781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.657877][T14554] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1014.198180][T14585] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1014.229116][T14585] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1014.304942][T14585] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1014.435680][T14926] netlink: 'syz.1.2786': attribute type 1 has an invalid length. [ 1014.472213][T14928] netlink: 'syz.0.2787': attribute type 1 has an invalid length. [ 1014.504024][T14585] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1014.625489][T14928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1014.626719][T14929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1014.666136][T14930] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1014.668562][T14930] bond3: (slave batadv1): making interface the new active one [ 1014.669787][T14930] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1015.981087][T14946] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 1016.059361][T14946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1016.520813][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1016.635657][T14554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.702059][ T9] usb 7-1: U[ 1016.702059][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1016.779414][T14960] ODEBUG: Out of memory. ODEBUG disabled [ 1017.052211][ C0] ------------[ cut here ]------------ [ 1017.052224][ C0] 1 [ 1017.052237][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 1017.052279][ C0] Modules linked in: [ 1017.052301][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1017.052328][ C0] Tainted: [L]=SOFTLOCKUP [ 1017.052335][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1017.052347][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 1017.052367][ C0] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1017.052385][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 1017.052408][ C0] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801caa0000 [ 1017.052423][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1017.052436][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 1017.052449][ C0] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000000 [ 1017.052462][ C0] R13: 0000000100011895 R14: 1ffff9200002af4c R15: ffff88805fbc5410 [ 1017.052476][ C0] FS: 0000000000000000(0000) GS:ffff888126343000(0000) knlGS:0000000000000000 [ 1017.052492][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1017.052506][ C0] CR2: 00002000000c0030 CR3: 0000000033c8c000 CR4: 00000000003526f0 [ 1017.052523][ C0] Call Trace: [ 1017.052531][ C0] [ 1017.052539][ C0] call_timer_fn+0x192/0x640 [ 1017.052562][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1017.052578][ C0] ? call_timer_fn+0xd4/0x640 [ 1017.052598][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1017.052615][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1017.052652][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1017.052678][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1017.052697][ C0] __run_timer_base+0x6a3/0x9f0 [ 1017.052745][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1017.052770][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1017.052809][ C0] run_timer_softirq+0xb7/0x170 [ 1017.052839][ C0] handle_softirqs+0x1de/0x6f0 [ 1017.052879][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1017.052906][ C0] run_ktimerd+0x69/0x100 [ 1017.052935][ C0] smpboot_thread_fn+0x541/0xa50 [ 1017.052965][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1017.053004][ C0] kthread+0x388/0x470 [ 1017.053026][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1017.053053][ C0] ? __pfx_kthread+0x10/0x10 [ 1017.053076][ C0] ret_from_fork+0x51e/0xb90 [ 1017.053108][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1017.053134][ C0] ? __switch_to+0xc7d/0x1450 [ 1017.053163][ C0] ? __pfx_kthread+0x10/0x10 [ 1017.053186][ C0] ret_from_fork_asm+0x1a/0x30 [ 1017.053225][ C0] [ 1017.053243][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1017.053259][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1017.053284][ C0] Tainted: [L]=SOFTLOCKUP [ 1017.053291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1017.053302][ C0] Call Trace: [ 1017.053310][ C0] [ 1017.053318][ C0] vpanic+0x56c/0xa60 [ 1017.053348][ C0] ? __pfx__printk+0x10/0x10 [ 1017.053370][ C0] ? __pfx_vpanic+0x10/0x10 [ 1017.053395][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1017.053428][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1017.053463][ C0] panic+0xc5/0xd0 [ 1017.053491][ C0] ? __pfx_panic+0x10/0x10 [ 1017.053529][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1017.053555][ C0] __warn+0x315/0x4f0 [ 1017.053581][ C0] ? stub_timer+0xa/0x20 [ 1017.053601][ C0] ? stub_timer+0xa/0x20 [ 1017.053620][ C0] __report_bug+0x29a/0x540 [ 1017.053651][ C0] ? stub_timer+0xa/0x20 [ 1017.053669][ C0] ? __pfx___report_bug+0x10/0x10 [ 1017.053692][ C0] ? add_lock_to_list+0xc7/0x100 [ 1017.053728][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1017.053755][ C0] ? stub_timer+0xa/0x20 [ 1017.053772][ C0] report_bug+0x16a/0x220 [ 1017.053798][ C0] ? stub_timer+0xa/0x20 [ 1017.053814][ C0] ? stub_timer+0xc/0x20 [ 1017.053830][ C0] handle_bug+0x98/0x200 [ 1017.053860][ C0] exc_invalid_op+0x1a/0x50 [ 1017.053886][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1017.053907][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 1017.053925][ C0] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1017.053942][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 1017.053958][ C0] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801caa0000 [ 1017.053973][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1017.053985][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 1017.053998][ C0] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000000 [ 1017.054012][ C0] R13: 0000000100011895 R14: 1ffff9200002af4c R15: ffff88805fbc5410 [ 1017.054032][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1017.054050][ C0] ? stub_timer+0x9/0x20 [ 1017.054075][ C0] ? stub_timer+0x9/0x20 [ 1017.054090][ C0] call_timer_fn+0x192/0x640 [ 1017.054110][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1017.054126][ C0] ? call_timer_fn+0xd4/0x640 [ 1017.054145][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1017.054163][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1017.054200][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1017.054224][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1017.054246][ C0] __run_timer_base+0x6a3/0x9f0 [ 1017.054290][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1017.054316][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1017.054355][ C0] run_timer_softirq+0xb7/0x170 [ 1017.054384][ C0] handle_softirqs+0x1de/0x6f0 [ 1017.054427][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1017.054455][ C0] run_ktimerd+0x69/0x100 [ 1017.054483][ C0] smpboot_thread_fn+0x541/0xa50 [ 1017.054513][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1017.054552][ C0] kthread+0x388/0x470 [ 1017.054574][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1017.054601][ C0] ? __pfx_kthread+0x10/0x10 [ 1017.054624][ C0] ret_from_fork+0x51e/0xb90 [ 1017.054653][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1017.054678][ C0] ? __switch_to+0xc7d/0x1450 [ 1017.054707][ C0] ? __pfx_kthread+0x10/0x10 [ 1017.054728][ C0] ret_from_fork_asm+0x1a/0x30 [ 1017.054766][ C0] [ 1017.055121][ C0] Kernel Offset: disabled