last executing test programs: 4.265875152s ago: executing program 4 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x2, 0x3, 0xfffa, 0x7f}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x12, 0x0, @val=0x80}}}}}, 0x32) 4.086507967s ago: executing program 1 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x3, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.98205443s ago: executing program 2 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x120}}, 0x0) 3.774390423s ago: executing program 3 (id=335): clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x3, 0xc, 0x0, 0x8, 0x7000000000, 0x4, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0xf423f, 0x3f420f8000000000, 0x80000001, 0x1, 0x4, 0x0, 0x5, 0x401, 0x0, 0x0, 0x1, 0x4, 0xacb, 0x3, 0x6}) 3.770872916s ago: executing program 2 (id=336): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) syz_io_uring_setup(0xce, &(0x7f0000000200)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x8}, 0x8) 3.770529751s ago: executing program 4 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000040000000000a0000040900020073797a310000000008000a40fffffffc090001007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0xc4) 3.705604697s ago: executing program 1 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e0000000800", @ANYRES32=r1, @ANYBLOB="0a00340001010101010100401800490008ac0f000cac0f000dac0f000bac0f"], 0x40}}, 0x0) 3.574451828s ago: executing program 3 (id=340): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a87", @ANYBLOB=',ro']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.566441587s ago: executing program 4 (id=341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.45889872s ago: executing program 4 (id=342): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02"], 0x48) r0 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x12d}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) 3.34243522s ago: executing program 0 (id=343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x7fff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 3.324740533s ago: executing program 1 (id=344): socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) openat$ttynull(0xffffff9c, &(0x7f0000000980), 0x200000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f20000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a000018000000080005", @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ftruncate(0xffffffffffffffff, 0xffff) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x10) open(0x0, 0x44842, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), 0x0) 3.13520025s ago: executing program 4 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) 3.035997326s ago: executing program 3 (id=346): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x120}}, 0x0) 2.856003583s ago: executing program 3 (id=347): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 1.891206372s ago: executing program 0 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x2, 0x3, 0xfffa, 0x7f}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x12, 0x0, @val=0x80}}}}}, 0x32) 1.458017487s ago: executing program 0 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x3, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.395497424s ago: executing program 2 (id=350): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0) 1.150560627s ago: executing program 2 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000040000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a31000000000800054000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0xc4) 1.150174531s ago: executing program 4 (id=352): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0, 0x38}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) setresuid(0xee01, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee00) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000000)={@multicast1, @loopback, 0x0, "304498733f898de19deb085b757a39568640a64be2f7eaaf1c1b9c2366d2eb55", 0x6, 0x1b2, 0x100, 0x1}, 0x3c) r4 = io_uring_setup(0x108c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = accept4$unix(r1, 0x0, &(0x7f00000001c0), 0x80800) connect$unix(r8, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x19, 0x0, 0x0) r9 = syz_clone(0x0, &(0x7f0000000f80), 0x0, 0x0, 0x0, 0x0) move_pages(r9, 0x0, 0x0, 0x0, 0x0, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f00"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x140010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,subj_type=\',appraise,euid<', @ANYRESDEC, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000280)="4cb0f16fad8b2ac8225d46cc8c75e724d8d0cdd094168439c056405ee596768a8be54b1851bcd194028288e95c80a964e8d24ac7fa1d452ec16751ac5bd160cfe38eb64c83e4e156c84228f9d2ab80fb707507b52c9f5a61641f") linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r11, &(0x7f0000000100)='./file0\x00', 0x0) 1.020593713s ago: executing program 1 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 926.382929ms ago: executing program 2 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e0000000800", @ANYRES32=r1, @ANYBLOB="0a00340001010101010100401800490008ac0f000cac0f000dac0f000bac0f"], 0x40}}, 0x0) 854.50735ms ago: executing program 1 (id=355): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000036685"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 776.066438ms ago: executing program 1 (id=356): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00005d6000/0x1000)=nil, &(0x7f00008a1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000013f000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x108, 0xc5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 649.174048ms ago: executing program 0 (id=357): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x120}}, 0x0) 617.650945ms ago: executing program 2 (id=358): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xa2, 0x8003}, [@TCA_NETEM_CORR={0x10, 0x1, {0xfe1, 0xf1, 0x8}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xffffdabf, 0xfffffffd}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x4, 0x1, 0x3291, 0x7fff, 0x3ff}}]}}}]}, 0x94}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 428.186133ms ago: executing program 0 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 250.275735ms ago: executing program 0 (id=360): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) syz_io_uring_setup(0xce, &(0x7f0000000200)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x8}, 0x8) 154.387865ms ago: executing program 3 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x8) 0s ago: executing program 3 (id=362): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f10002000600000000000000000002"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 83.988758][ T5813] cgroup: Unknown subsys name 'net' [ 84.117437][ T5813] cgroup: Unknown subsys name 'cpuset' [ 84.126724][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.835483][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.661024][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.669288][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.689728][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.697237][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.706286][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.715114][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.723628][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.731896][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.739921][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.764469][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.784103][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.791918][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.812922][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.813073][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.827202][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.836009][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.843760][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.851917][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.859277][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.867756][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.868945][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.884693][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.893014][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.905957][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.913935][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.597603][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 89.721389][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.869404][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.880551][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 89.892092][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.935463][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.942904][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.950537][ T5845] bridge_slave_0: entered allmulticast mode [ 89.958012][ T5845] bridge_slave_0: entered promiscuous mode [ 90.011079][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.018345][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.025806][ T5844] bridge_slave_0: entered allmulticast mode [ 90.033124][ T5844] bridge_slave_0: entered promiscuous mode [ 90.041888][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.049183][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.056427][ T5845] bridge_slave_1: entered allmulticast mode [ 90.063953][ T5845] bridge_slave_1: entered promiscuous mode [ 90.120570][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.128241][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.135492][ T5844] bridge_slave_1: entered allmulticast mode [ 90.142786][ T5844] bridge_slave_1: entered promiscuous mode [ 90.202501][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.221244][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.299804][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.365169][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.389900][ T5845] team0: Port device team_slave_0 added [ 90.410171][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.417498][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.425009][ T5843] bridge_slave_0: entered allmulticast mode [ 90.432223][ T5843] bridge_slave_0: entered promiscuous mode [ 90.452672][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.459858][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.467410][ T5841] bridge_slave_0: entered allmulticast mode [ 90.474986][ T5841] bridge_slave_0: entered promiscuous mode [ 90.484292][ T5845] team0: Port device team_slave_1 added [ 90.506938][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.514130][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.521471][ T5843] bridge_slave_1: entered allmulticast mode [ 90.529268][ T5843] bridge_slave_1: entered promiscuous mode [ 90.548133][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.555457][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.562609][ T5841] bridge_slave_1: entered allmulticast mode [ 90.570151][ T5841] bridge_slave_1: entered promiscuous mode [ 90.604409][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.611576][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.618996][ T5847] bridge_slave_0: entered allmulticast mode [ 90.626347][ T5847] bridge_slave_0: entered promiscuous mode [ 90.649535][ T5844] team0: Port device team_slave_0 added [ 90.682297][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.689577][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.715918][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.727726][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.734969][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.742128][ T5847] bridge_slave_1: entered allmulticast mode [ 90.749692][ T5847] bridge_slave_1: entered promiscuous mode [ 90.770175][ T5844] team0: Port device team_slave_1 added [ 90.791694][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.802297][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.809296][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.835851][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.862469][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.887570][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.904088][ T5830] Bluetooth: hci0: command tx timeout [ 90.935036][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.944951][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.951926][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.978511][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.989609][ T5830] Bluetooth: hci3: command tx timeout [ 90.989620][ T5833] Bluetooth: hci1: command tx timeout [ 90.995144][ T5833] Bluetooth: hci4: command tx timeout [ 90.995324][ T5833] Bluetooth: hci2: command tx timeout [ 91.003994][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.018459][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.044631][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.074658][ T5841] team0: Port device team_slave_0 added [ 91.083453][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.114951][ T5841] team0: Port device team_slave_1 added [ 91.123062][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.199321][ T5843] team0: Port device team_slave_0 added [ 91.224243][ T5845] hsr_slave_0: entered promiscuous mode [ 91.230746][ T5845] hsr_slave_1: entered promiscuous mode [ 91.264103][ T5843] team0: Port device team_slave_1 added [ 91.271680][ T5847] team0: Port device team_slave_0 added [ 91.297328][ T5844] hsr_slave_0: entered promiscuous mode [ 91.304388][ T5844] hsr_slave_1: entered promiscuous mode [ 91.310535][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 91.316427][ T5844] Cannot create hsr debugfs directory [ 91.322749][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.329988][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.356164][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.382754][ T5847] team0: Port device team_slave_1 added [ 91.415987][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.423068][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.449332][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.495145][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.502224][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.528626][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.546573][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.554022][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.580368][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.592556][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.599818][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.625766][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.695633][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.702602][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.729461][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.792387][ T5841] hsr_slave_0: entered promiscuous mode [ 91.799398][ T5841] hsr_slave_1: entered promiscuous mode [ 91.806479][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 91.812272][ T5841] Cannot create hsr debugfs directory [ 91.961655][ T5843] hsr_slave_0: entered promiscuous mode [ 91.968203][ T5843] hsr_slave_1: entered promiscuous mode [ 91.974542][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 91.980295][ T5843] Cannot create hsr debugfs directory [ 91.997785][ T5847] hsr_slave_0: entered promiscuous mode [ 92.004866][ T5847] hsr_slave_1: entered promiscuous mode [ 92.011036][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.016868][ T5847] Cannot create hsr debugfs directory [ 92.026004][ T9] cfg80211: failed to load regulatory.db [ 92.392902][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.432895][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.444994][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.485257][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.581915][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.593092][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.605736][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.637740][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.704514][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.717227][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.736714][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.765313][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.874176][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.894713][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.912173][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.926019][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.993449][ T5833] Bluetooth: hci0: command tx timeout [ 93.039325][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.064347][ T5833] Bluetooth: hci2: command tx timeout [ 93.064650][ T5828] Bluetooth: hci1: command tx timeout [ 93.069823][ T5833] Bluetooth: hci3: command tx timeout [ 93.076106][ T5830] Bluetooth: hci4: command tx timeout [ 93.092411][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.108101][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.127027][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.142853][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.156065][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.177959][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.217107][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.224437][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.241045][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.271796][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.279101][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.288657][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.295811][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.306610][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.313841][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.400208][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.485020][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.518217][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.529276][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.551660][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.558937][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.569426][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.576576][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.610806][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.618021][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.633076][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.651773][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.658972][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.718730][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.746309][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.850708][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.866067][ T5844] veth0_vlan: entered promiscuous mode [ 93.886385][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.893585][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.925682][ T5844] veth1_vlan: entered promiscuous mode [ 93.935763][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.942907][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.971446][ T5845] veth0_vlan: entered promiscuous mode [ 94.002836][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.022358][ T5845] veth1_vlan: entered promiscuous mode [ 94.035922][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.082635][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.119337][ T5844] veth0_macvtap: entered promiscuous mode [ 94.130248][ T5844] veth1_macvtap: entered promiscuous mode [ 94.170151][ T5841] veth0_vlan: entered promiscuous mode [ 94.197799][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.211603][ T5845] veth0_macvtap: entered promiscuous mode [ 94.221065][ T5841] veth1_vlan: entered promiscuous mode [ 94.237443][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.252570][ T5845] veth1_macvtap: entered promiscuous mode [ 94.277886][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.285342][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.316553][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.326433][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.349407][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.357657][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.392438][ T5847] veth0_vlan: entered promiscuous mode [ 94.409524][ T5847] veth1_vlan: entered promiscuous mode [ 94.417968][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.446584][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.456366][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.474867][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.485366][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497282][ T5841] veth0_macvtap: entered promiscuous mode [ 94.545247][ T5841] veth1_macvtap: entered promiscuous mode [ 94.579358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.596580][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.625240][ T5847] veth0_macvtap: entered promiscuous mode [ 94.671019][ T5847] veth1_macvtap: entered promiscuous mode [ 94.680350][ T5843] veth0_vlan: entered promiscuous mode [ 94.691360][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.722548][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.735298][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.749216][ T5843] veth1_vlan: entered promiscuous mode [ 94.768783][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.795550][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.807401][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.821209][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.838790][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.842986][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.869950][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.879226][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899255][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920525][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.959800][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.990305][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.000585][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.017882][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.050319][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.059328][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.068480][ T5830] Bluetooth: hci0: command tx timeout [ 95.093171][ T5843] veth0_macvtap: entered promiscuous mode [ 95.110126][ T5843] veth1_macvtap: entered promiscuous mode [ 95.149539][ T5830] Bluetooth: hci3: command tx timeout [ 95.155834][ T5828] Bluetooth: hci4: command tx timeout [ 95.161343][ T5840] Bluetooth: hci2: command tx timeout [ 95.161785][ T5833] Bluetooth: hci1: command tx timeout [ 95.220318][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.245622][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.251800][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.263194][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.298328][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.397465][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.407560][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.421286][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.429160][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.429193][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.434197][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.456032][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.462314][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.589065][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.608190][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.732199][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.759526][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.887965][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.939767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.989545][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.933939][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.097828][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.110590][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 97.132801][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.153426][ T5833] Bluetooth: hci0: command tx timeout [ 97.153713][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.188348][ T24] usb 2-1: string descriptor 0 read error: -22 [ 97.199281][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.218824][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.224944][ T5833] Bluetooth: hci1: command tx timeout [ 97.232442][ T5830] Bluetooth: hci3: command tx timeout [ 97.238022][ T5840] Bluetooth: hci2: command tx timeout [ 97.238077][ T5830] Bluetooth: hci4: command tx timeout [ 97.249474][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.321711][ T24] usb 2-1: 0:2 : does not exist [ 97.403485][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 97.412094][ T5915] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 97.430966][ T5915] usb 3-1: config 0 has no interface number 0 [ 97.450321][ T5915] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 97.462693][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.472894][ T5915] usb 3-1: Product: syz [ 97.512374][ T5915] usb 3-1: Manufacturer: syz [ 97.524011][ T5915] usb 3-1: SerialNumber: syz [ 97.548928][ T5915] usb 3-1: config 0 descriptor?? [ 97.562740][ T5915] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 97.974580][ T5915] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 97.998404][ T5915] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 98.149919][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 98.172194][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 98.183868][ T5915] usb 3-1: USB disconnect, device number 2 [ 98.209814][ T5915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 98.218137][ T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 98.254126][ T5915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 98.278284][ T24] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 98.283035][ T5915] quatech2 3-1:0.51: device disconnected [ 98.391734][ T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 98.434767][ T24] usb 2-1: USB disconnect, device number 2 [ 100.106489][ T5998] xt_connbytes: Forcing CT accounting to be enabled [ 100.380309][ T6008] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 100.386971][ T6008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.414132][ T6002] syzkaller0: entered promiscuous mode [ 100.449523][ T6002] syzkaller0: entered allmulticast mode [ 100.472924][ T6008] vhci_hcd vhci_hcd.0: Device attached [ 100.576714][ T6013] vhci_hcd: connection closed [ 100.578010][ T3022] vhci_hcd: stop threads [ 100.597439][ T3022] vhci_hcd: release socket [ 100.620907][ T3022] vhci_hcd: disconnect device [ 100.634349][ T5917] vhci_hcd: vhci_device speed not set [ 100.853774][ T5919] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.913458][ T6022] syzkaller0: entered promiscuous mode [ 100.919000][ T6022] syzkaller0: entered allmulticast mode [ 100.964346][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.016348][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 101.032233][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.047973][ T5919] usb 1-1: config 0 has no interface number 0 [ 101.056584][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.072196][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.082556][ T5919] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 101.093776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.144487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.182719][ T6026] input: syz1 as /devices/virtual/input/input5 [ 101.419656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.429660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.503363][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.543998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 101.585216][ T5919] usb 1-1: config 0 descriptor?? [ 101.701595][ T6031] fuse: Unknown parameter '00000000000000000000' [ 101.709604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 101.753542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.865579][ T5919] usbhid 1-1:0.1: can't add hid device: -71 [ 101.882077][ T5919] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 102.024309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.060264][ T5919] usb 1-1: USB disconnect, device number 2 [ 102.544196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.577662][ T6040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.43'. [ 102.597809][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 102.871640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.506345][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.45'. [ 104.059745][ T6057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.44'. [ 104.498801][ T6059] syzkaller0: entered promiscuous mode [ 104.515677][ T6059] syzkaller0: entered allmulticast mode [ 105.043199][ T6072] mmap: syz.1.53 (6072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.218864][ T6075] fuse: Unknown parameter '00000000000000000000' [ 105.917778][ T6087] Zero length message leads to an empty skb [ 106.039481][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.051736][ T5830] Bluetooth: Wrong link type (-57) [ 106.213604][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 106.234501][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 106.253378][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.289858][ T10] usb 2-1: config 0 descriptor?? [ 106.306759][ T6094] netlink: 84 bytes leftover after parsing attributes in process `syz.3.61'. [ 106.309108][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 106.423712][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 106.424582][ T6094] vlan0: entered promiscuous mode [ 106.448852][ T6095] netlink: 'syz.0.63': attribute type 5 has an invalid length. [ 106.462138][ T6095] netlink: 'syz.0.63': attribute type 15 has an invalid length. [ 106.470533][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 106.515989][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.525499][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.603467][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.612253][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.676470][ T6097] syzkaller0: entered promiscuous mode [ 106.692393][ T6097] syzkaller0: entered allmulticast mode [ 107.088799][ T6108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.69'. [ 107.103718][ T6108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 107.347209][ T5915] usb 2-1: USB disconnect, device number 3 [ 107.426091][ T6116] fuse: Unknown parameter '00000000000000000000' [ 107.823348][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.004076][ T5917] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.012299][ T5917] usb 5-1: config 0 has no interface number 0 [ 108.046574][ T5917] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 108.079958][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.080720][ T6137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.81'. [ 108.101045][ T5917] usb 5-1: Product: syz [ 108.114263][ T5917] usb 5-1: Manufacturer: syz [ 108.123561][ T5917] usb 5-1: SerialNumber: syz [ 108.144414][ T5917] usb 5-1: config 0 descriptor?? [ 108.358063][ T5917] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 108.385380][ T5917] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 108.403313][ T5917] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 108.572320][ T6153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.90'. [ 108.628310][ T6153] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 108.655551][ T6153] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.811575][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 108.823213][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 108.838761][ T6160] tipc: Started in network mode [ 108.853732][ T6160] tipc: Node identity ae9d8260a43, cluster identity 4711 [ 108.861317][ T6160] tipc: Enabled bearer , priority 0 [ 108.870256][ T6160] syzkaller0: entered promiscuous mode [ 108.877573][ T6160] syzkaller0: entered allmulticast mode [ 108.903932][ T6160] tipc: Resetting bearer [ 108.922459][ T6158] tipc: Resetting bearer [ 108.946268][ T6158] tipc: Disabling bearer [ 108.976600][ T6164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.95'. [ 109.120271][ T6167] fuse: Unknown parameter 'user00000000000000000000' [ 109.775366][ T6177] ªªªªªª: renamed from wg2 (while UP) [ 110.043405][ T5919] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.193382][ T5919] usb 4-1: device descriptor read/64, error -71 [ 110.497373][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.165359][ T5919] usb 4-1: device descriptor read/64, error -71 [ 111.305134][ T5919] usb usb4-port1: attempt power cycle [ 111.494248][ T5902] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 111.537000][ T6196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.107'. [ 111.653423][ T5919] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.665116][ T5902] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 111.705130][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.718135][ T5919] usb 4-1: device descriptor read/8, error -71 [ 111.729335][ T5902] usb 1-1: config 0 descriptor?? [ 111.963353][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.142169][ T5919] usb 4-1: device descriptor read/8, error -71 [ 112.264847][ T5919] usb usb4-port1: unable to enumerate USB device [ 112.384489][ T6203] netlink: 'syz.3.110': attribute type 13 has an invalid length. [ 112.501477][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.509987][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.622651][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.641293][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.779168][ T6205] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 112.845238][ T6206] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 112.853991][ T73] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.864935][ T73] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.875689][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.892676][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.961547][ T5902] pegasus 1-1:0.0: can't reset MAC [ 112.968230][ T5902] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 113.001657][ T5902] usb 1-1: USB disconnect, device number 3 [ 114.023675][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.200376][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.213326][ T10] usb 3-1: config 0 has no interface number 0 [ 114.240583][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 114.259997][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.283370][ T10] usb 3-1: Product: syz [ 114.287757][ T10] usb 3-1: Manufacturer: syz [ 114.292555][ T10] usb 3-1: SerialNumber: syz [ 114.302721][ T10] usb 3-1: config 0 descriptor?? [ 114.650033][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 115.044277][ T6229] syzkaller0: entered promiscuous mode [ 115.064665][ T6229] syzkaller0: entered allmulticast mode [ 115.824412][ T6238] tipc: Enabling of bearer rejected, failed to enable media [ 116.493370][ T5919] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 116.656631][ T5919] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 116.666088][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.675196][ T981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.690448][ T5919] usb 1-1: config 0 descriptor?? [ 116.836946][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.860590][ T981] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 116.897747][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.928097][ T981] usb 2-1: config 0 descriptor?? [ 117.036283][ T5919] usb 1-1: USB disconnect, device number 4 [ 117.058432][ C0] hrtimer: interrupt took 89954 ns [ 117.148575][ T981] usb 2-1: USB disconnect, device number 4 [ 117.985787][ T6273] tipc: Enabling of bearer rejected, failed to enable media [ 118.866538][ T6298] tipc: Enabling of bearer rejected, failed to enable media [ 119.053414][ T984] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.070505][ T6302] bridge0: port 3(batadv1) entered blocking state [ 119.084273][ T6302] bridge0: port 3(batadv1) entered disabled state [ 119.096055][ T6302] batadv1: entered allmulticast mode [ 119.114409][ T6302] batadv1: entered promiscuous mode [ 119.143644][ T6301] tipc: Started in network mode [ 119.172769][ T6301] tipc: Node identity 361851a957e7, cluster identity 4711 [ 119.185348][ T6301] tipc: Enabled bearer , priority 0 [ 119.237670][ T6303] syzkaller0: entered promiscuous mode [ 119.243203][ T6303] syzkaller0: entered allmulticast mode [ 119.253670][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.259312][ T984] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 119.299231][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.306536][ T6301] tipc: Resetting bearer [ 119.327245][ T984] usb 1-1: config 0 descriptor?? [ 119.353516][ T6300] tipc: Resetting bearer [ 119.397378][ T6300] tipc: Disabling bearer [ 119.539475][ T981] usb 1-1: USB disconnect, device number 5 [ 119.546368][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 119.546425][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 119.584618][ T6315] lo: entered promiscuous mode [ 119.614138][ T6315] lo: left promiscuous mode [ 119.806596][ T6321] tipc: Enabling of bearer rejected, failed to enable media [ 120.517892][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 120.527749][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 121.190333][ T6350] tipc: Enabling of bearer rejected, failed to enable media [ 122.159355][ T6365] random: crng reseeded on system resumption [ 123.614247][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 123.633502][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.178'. [ 125.525171][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 125.547890][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 127.010990][ T6459] netlink: 164 bytes leftover after parsing attributes in process `syz.0.202'. [ 127.294980][ T6462] netlink: 44 bytes leftover after parsing attributes in process `syz.1.203'. [ 127.349102][ T6469] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.206'. [ 127.636210][ T5830] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 127.645436][ T5830] Bluetooth: hci0: Injecting HCI hardware error event [ 127.656443][ T5830] Bluetooth: hci0: hardware error 0x00 [ 129.209654][ T6503] input: syz1 as /devices/virtual/input/input6 [ 129.553695][ T6516] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 129.560278][ T6516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.570661][ T6516] vhci_hcd vhci_hcd.0: Device attached [ 129.715306][ T6517] vhci_hcd: connection closed [ 129.723360][ T50] vhci_hcd: stop threads [ 129.732483][ T50] vhci_hcd: release socket [ 129.737057][ T50] vhci_hcd: disconnect device [ 129.771355][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.221'. [ 129.878257][ T6530] fuse: Bad value for 'fd' [ 130.028836][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 130.217125][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 131.778030][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.232'. [ 133.353500][ T6615] fuse: Bad value for 'fd' [ 135.184130][ T6650] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.891695][ T6657] fuse: Bad value for 'fd' [ 136.263694][ T6665] syzkaller0: entered promiscuous mode [ 136.293160][ T6665] syzkaller0: entered allmulticast mode [ 136.656511][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 138.009774][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.278'. [ 138.110034][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.122276][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.445310][ T6717] tipc: Enabling of bearer rejected, failed to enable media [ 138.479109][ T6717] syzkaller0: entered promiscuous mode [ 138.497911][ T6717] syzkaller0: entered allmulticast mode [ 139.083317][ T5916] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.233295][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 139.260669][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.287168][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.316440][ T5916] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 139.326061][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.343988][ T5916] usb 2-1: config 0 descriptor?? [ 139.476647][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.290'. [ 139.771820][ T6743] syzkaller0: entered promiscuous mode [ 139.784195][ T6743] syzkaller0: entered allmulticast mode [ 139.788355][ T5916] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 139.970811][ T5916] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 140.146379][ T6754] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 140.152974][ T6754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.172027][ T5916] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 140.244948][ T6754] vhci_hcd vhci_hcd.0: Device attached [ 140.372173][ T5916] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 140.408605][ T6755] vhci_hcd: connection closed [ 140.410456][ T12] vhci_hcd: stop threads [ 140.410776][ T5916] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 140.436374][ T12] vhci_hcd: release socket [ 140.459579][ T12] vhci_hcd: disconnect device [ 140.547730][ T6764] netlink: 44 bytes leftover after parsing attributes in process `syz.0.301'. [ 140.662485][ T6725] ft260 0003:0403:6030.0001: ft260_i2c_read: failed with -38 [ 140.671218][ T5830] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 140.680463][ T5830] Bluetooth: hci4: Injecting HCI hardware error event [ 140.688742][ T5830] Bluetooth: hci4: hardware error 0x00 [ 140.693567][ T981] usb 2-1: USB disconnect, device number 5 [ 141.246798][ T6786] netlink: 104 bytes leftover after parsing attributes in process `syz.1.309'. [ 141.393384][ T981] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.494894][ T6790] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 141.501452][ T6790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.511569][ T6790] vhci_hcd vhci_hcd.0: Device attached [ 141.623308][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 141.630528][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.641886][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.653790][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.667536][ T981] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.807482][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.819863][ T981] usb 4-1: config 0 descriptor?? [ 141.893319][ T5916] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 141.977498][ T6792] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 141.979065][ T6791] vhci_hcd: connection closed [ 141.996620][ T12] vhci_hcd: stop threads [ 142.039232][ T12] vhci_hcd: release socket [ 142.054386][ T12] vhci_hcd: disconnect device [ 142.073925][ T6794] tipc: Enabling of bearer rejected, failed to enable media [ 142.084258][ T6794] syzkaller0: entered promiscuous mode [ 142.089899][ T6794] syzkaller0: entered allmulticast mode [ 142.246909][ T981] microsoft 0003:045E:07DA.0002: report is too long [ 142.264567][ T6798] netlink: 44 bytes leftover after parsing attributes in process `syz.4.313'. [ 142.318114][ T981] microsoft 0003:045E:07DA.0002: item 0 4 0 8 parsing failed [ 142.343537][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 142.358342][ T981] microsoft 0003:045E:07DA.0002: parse failed [ 142.375387][ T981] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 142.755029][ T5830] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 142.835171][ T5818] usb 4-1: USB disconnect, device number 6 [ 142.948247][ T6809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 142.954806][ T6809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.964229][ T6813] netlink: 176 bytes leftover after parsing attributes in process `syz.0.317'. [ 142.994620][ T6809] vhci_hcd vhci_hcd.0: Device attached [ 143.101033][ T6811] vhci_hcd: connection closed [ 143.101974][ T3022] vhci_hcd: stop threads [ 143.114489][ T3022] vhci_hcd: release socket [ 143.119056][ T3022] vhci_hcd: disconnect device [ 144.183446][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 144.375676][ T6832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.324'. [ 144.559636][ T6839] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 144.566238][ T6839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.574513][ T6839] vhci_hcd vhci_hcd.0: Device attached [ 144.701419][ T6840] vhci_hcd: connection closed [ 144.702220][ T12] vhci_hcd: stop threads [ 144.765220][ T12] vhci_hcd: release socket [ 144.771146][ T12] vhci_hcd: disconnect device [ 144.794077][ T5902] vhci_hcd: vhci_device speed not set [ 144.983902][ T6849] syzkaller1: entered promiscuous mode [ 145.021337][ T6849] syzkaller1: entered allmulticast mode [ 145.047767][ T6851] tipc: Enabling of bearer rejected, failed to enable media [ 145.057280][ T6851] syzkaller0: entered promiscuous mode [ 145.093346][ T6851] syzkaller0: entered allmulticast mode [ 145.407636][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 145.480519][ T6866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 146.155490][ T6892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.344'. [ 146.763659][ T5902] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.124152][ T5916] vhci_hcd: vhci_device speed not set [ 147.146659][ T5902] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 147.199625][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.311249][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.341587][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 147.364923][ T5902] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 147.374717][ T5902] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 147.382871][ T5902] usb 4-1: Manufacturer: syz [ 147.390926][ T5902] usb 4-1: config 0 descriptor?? [ 147.449359][ T6903] syzkaller1: entered promiscuous mode [ 147.456299][ T6903] syzkaller1: entered allmulticast mode [ 147.821658][ T5902] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 147.935077][ T5902] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 147.937116][ T6906] tipc: Enabling of bearer rejected, failed to enable media [ 148.028655][ T6911] syzkaller0: entered promiscuous mode [ 148.052218][ T6911] syzkaller0: entered allmulticast mode [ 148.163092][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 148.254073][ T6920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.354'. [ 148.275554][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 148.291729][ T6915] netlink: 'syz.4.352': attribute type 8 has an invalid length. [ 148.402920][ T5916] usb 4-1: USB disconnect, device number 7 [ 148.411739][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 148.979872][ T6939] syzkaller0: entered promiscuous mode [ 148.986351][ T6939] syzkaller0: entered allmulticast mode [ 149.187471][ T6944] capability: warning: `syz.3.362' uses deprecated v2 capabilities in a way that may be insecure [ 149.203377][ T6944] ------------[ cut here ]------------ [ 149.208923][ T6944] WARNING: CPU: 0 PID: 6944 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 149.217658][ T6944] Modules linked in: [ 149.221680][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.3.362 Not tainted syzkaller #0 PREEMPT(full) [ 149.231039][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.241333][ T6944] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 149.247197][ T6944] Code: 64 24 40 e9 41 f8 ff ff e8 d7 e3 78 ff 90 0f 0b 90 e9 64 f6 ff ff e8 c9 e3 78 ff 90 0f 0b 90 e9 ab f6 ff ff e8 bb e3 78 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 ad e3 78 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 149.266921][ T6944] RSP: 0018:ffffc9001ba47a40 EFLAGS: 00010283 [ 149.273026][ T6944] RAX: ffffffff82476035 RBX: 00000000f0000014 RCX: 0000000000080000 [ 149.281272][ T6944] RDX: ffffc9000bc9b000 RSI: 000000000000003c RDI: 000000000000003d [ 149.289413][ T6944] RBP: ffffc9001ba47b10 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 149.297534][ T6944] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8247551c [ 149.305675][ T6944] R13: dffffc0000000000 R14: ffff888142af9b94 R15: 0000000000000000 [ 149.313717][ T6944] FS: 00007fd6664fd6c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 149.322672][ T6944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.329321][ T6944] CR2: 000000110c291d8b CR3: 000000002fd90000 CR4: 00000000003526f0 [ 149.337505][ T6944] Call Trace: [ 149.340811][ T6944] [ 149.343814][ T6944] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 149.349325][ T6944] exportfs_decode_fh_raw+0x178/0x6e0 [ 149.354774][ T6944] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 149.360627][ T6944] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 149.366663][ T6944] do_handle_to_path+0xa4/0x1a0 [ 149.371556][ T6944] do_handle_open+0x6b4/0x8f0 [ 149.376291][ T6944] ? __pfx_do_handle_open+0x10/0x10 [ 149.381519][ T6944] ? rcu_is_watching+0x15/0xb0 [ 149.386384][ T6944] ? do_syscall_64+0xbe/0xfa0 [ 149.391095][ T6944] do_syscall_64+0xfa/0xfa0 [ 149.395691][ T6944] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.400903][ T6944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.407011][ T6944] ? clear_bhb_loop+0x60/0xb0 [ 149.411723][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.417647][ T6944] RIP: 0033:0x7fd66558eec9 [ 149.422082][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.441806][ T6944] RSP: 002b:00007fd6664fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 149.450287][ T6944] RAX: ffffffffffffffda RBX: 00007fd6657e5fa0 RCX: 00007fd66558eec9 [ 149.458337][ T6944] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 149.466418][ T6944] RBP: 00007fd665611f91 R08: 0000000000000000 R09: 0000000000000000 [ 149.474436][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.482429][ T6944] R13: 00007fd6657e6038 R14: 00007fd6657e5fa0 R15: 00007fd66590fa28 [ 149.490491][ T6944] [ 149.493624][ T6944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 149.500936][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.3.362 Not tainted syzkaller #0 PREEMPT(full) [ 149.510139][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.520200][ T6944] Call Trace: [ 149.523489][ T6944] [ 149.526427][ T6944] dump_stack_lvl+0x99/0x250 [ 149.531036][ T6944] ? __asan_memcpy+0x40/0x70 [ 149.535635][ T6944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.540839][ T6944] ? __pfx__printk+0x10/0x10 [ 149.545447][ T6944] vpanic+0x237/0x6d0 [ 149.549443][ T6944] ? __pfx_vpanic+0x10/0x10 [ 149.553971][ T6944] panic+0xb9/0xc0 [ 149.557707][ T6944] ? __pfx_panic+0x10/0x10 [ 149.562171][ T6944] __warn+0x31b/0x4b0 [ 149.566168][ T6944] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 149.571296][ T6944] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 149.576420][ T6944] report_bug+0x2be/0x4f0 [ 149.580763][ T6944] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 149.585904][ T6944] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 149.591037][ T6944] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 149.596248][ T6944] handle_bug+0x84/0x160 [ 149.600506][ T6944] exc_invalid_op+0x1a/0x50 [ 149.605018][ T6944] asm_exc_invalid_op+0x1a/0x20 [ 149.609900][ T6944] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 149.615635][ T6944] Code: 64 24 40 e9 41 f8 ff ff e8 d7 e3 78 ff 90 0f 0b 90 e9 64 f6 ff ff e8 c9 e3 78 ff 90 0f 0b 90 e9 ab f6 ff ff e8 bb e3 78 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 ad e3 78 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 149.635256][ T6944] RSP: 0018:ffffc9001ba47a40 EFLAGS: 00010283 [ 149.641341][ T6944] RAX: ffffffff82476035 RBX: 00000000f0000014 RCX: 0000000000080000 [ 149.649324][ T6944] RDX: ffffc9000bc9b000 RSI: 000000000000003c RDI: 000000000000003d [ 149.657304][ T6944] RBP: ffffc9001ba47b10 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 149.665284][ T6944] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8247551c [ 149.673265][ T6944] R13: dffffc0000000000 R14: ffff888142af9b94 R15: 0000000000000000 [ 149.681253][ T6944] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 149.686400][ T6944] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 149.691529][ T6944] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 149.697027][ T6944] exportfs_decode_fh_raw+0x178/0x6e0 [ 149.702417][ T6944] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 149.708247][ T6944] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 149.714199][ T6944] do_handle_to_path+0xa4/0x1a0 [ 149.719075][ T6944] do_handle_open+0x6b4/0x8f0 [ 149.723772][ T6944] ? __pfx_do_handle_open+0x10/0x10 [ 149.728995][ T6944] ? rcu_is_watching+0x15/0xb0 [ 149.733799][ T6944] ? do_syscall_64+0xbe/0xfa0 [ 149.738514][ T6944] do_syscall_64+0xfa/0xfa0 [ 149.743069][ T6944] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.748278][ T6944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.754365][ T6944] ? clear_bhb_loop+0x60/0xb0 [ 149.759062][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.764972][ T6944] RIP: 0033:0x7fd66558eec9 [ 149.769407][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.789022][ T6944] RSP: 002b:00007fd6664fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 149.797458][ T6944] RAX: ffffffffffffffda RBX: 00007fd6657e5fa0 RCX: 00007fd66558eec9 [ 149.805528][ T6944] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 149.813504][ T6944] RBP: 00007fd665611f91 R08: 0000000000000000 R09: 0000000000000000 [ 149.821478][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.829450][ T6944] R13: 00007fd6657e6038 R14: 00007fd6657e5fa0 R15: 00007fd66590fa28 [ 149.837449][ T6944] [ 149.840795][ T6944] Kernel Offset: disabled [ 149.845121][ T6944] Rebooting in 86400 seconds..