last executing test programs: 2m24.26405868s ago: executing program 0 (id=30): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m9.450984439s ago: executing program 0 (id=61): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) 2m9.285415247s ago: executing program 0 (id=62): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000b00)="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", 0x215}], 0x1}, 0x40) 2m8.152850604s ago: executing program 0 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m7.140273166s ago: executing program 0 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x138, 0x1a, 0xffffffffffffffff, 0x70bd2a, 0x3, {{@in=@private=0xa010101, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0x1, 0xa6}, {0x936d, 0x3d49, 0x4000}, 0x0, 0x3503, 0xa, 0x0, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 2m4.396279575s ago: executing program 0 (id=72): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m48.863522185s ago: executing program 32 (id=72): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 57.561491706s ago: executing program 5 (id=193): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') 54.968087527s ago: executing program 5 (id=199): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000b00)="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", 0x215}], 0x1}, 0x40) 54.750367321s ago: executing program 5 (id=201): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) ppoll(&(0x7f0000000d40)=[{r0, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 53.368349531s ago: executing program 5 (id=203): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 53.106279154s ago: executing program 5 (id=204): mkdirat(0xffffffffffffff9c, 0x0, 0x179) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 51.064624927s ago: executing program 5 (id=207): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 35.226435694s ago: executing program 33 (id=207): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 33.509902411s ago: executing program 2 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) 32.033481842s ago: executing program 2 (id=247): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x128) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') 30.123939127s ago: executing program 2 (id=250): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x40) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x60600) syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 24.169768384s ago: executing program 2 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, 0x400}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000) symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000080)='./file1\x00') 23.15519012s ago: executing program 2 (id=261): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0xf}, {0x10000002, 0x0, 0x5, 0x2}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) 22.731529027s ago: executing program 2 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 16.550461938s ago: executing program 4 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) gettid() r3 = timerfd_create(0x8, 0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) 15.087341352s ago: executing program 1 (id=276): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a5, 0xe0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x3, 0xfffff00c}, {0x6, 0x0, 0x7, 0x4}]}, 0x10) 13.123811861s ago: executing program 1 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x80, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 9.07449832s ago: executing program 1 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x11) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) 8.795953833s ago: executing program 3 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r5}, 0x38) 8.548643917s ago: executing program 4 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 7.187546925s ago: executing program 1 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') 7.103158949s ago: executing program 34 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7.072809152s ago: executing program 3 (id=287): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a5, 0xe0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x3, 0xfffff00c}, {0x6, 0x0, 0x7, 0x4}]}, 0x10) 6.802099544s ago: executing program 4 (id=288): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x60600) syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 5.098398825s ago: executing program 1 (id=289): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c02", 0x17}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) 4.302641721s ago: executing program 3 (id=290): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000100), 0x8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000180)) 3.003307277s ago: executing program 3 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x80, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.873389635s ago: executing program 1 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r1, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.73835563s ago: executing program 4 (id=293): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000"], 0x15) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.625914113s ago: executing program 3 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 1.360613174s ago: executing program 4 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r5}, 0x38) 86.465617ms ago: executing program 4 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 0s ago: executing program 3 (id=297): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008050}, 0x4010) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 81.389253][ T5789] cgroup: Unknown subsys name 'net' [ 81.650501][ T5789] cgroup: Unknown subsys name 'cpuset' [ 81.695774][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.549264][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.392631][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.394320][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.420804][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.422031][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.423056][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.423989][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.487700][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.490302][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.491205][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.493691][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.494740][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.497047][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.500127][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.504113][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.504961][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.511804][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.512686][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.515343][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.535986][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.565568][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.609847][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.610007][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.611268][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.614305][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.649025][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.899424][ T10] cfg80211: failed to load regulatory.db [ 87.519346][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 87.577952][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 87.620830][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 87.776683][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 87.938934][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 88.396330][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.397777][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.398165][ T5803] bridge_slave_0: entered allmulticast mode [ 88.399912][ T5803] bridge_slave_0: entered promiscuous mode [ 88.554407][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.554534][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.554723][ T5803] bridge_slave_1: entered allmulticast mode [ 88.557842][ T5803] bridge_slave_1: entered promiscuous mode [ 88.576892][ T5812] Bluetooth: hci4: command tx timeout [ 88.577109][ T5807] Bluetooth: hci1: command tx timeout [ 88.644407][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.644490][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.644655][ T5801] bridge_slave_0: entered allmulticast mode [ 88.647758][ T5801] bridge_slave_0: entered promiscuous mode [ 88.655384][ T5812] Bluetooth: hci3: command tx timeout [ 88.655479][ T5812] Bluetooth: hci0: command tx timeout [ 88.655659][ T5807] Bluetooth: hci2: command tx timeout [ 88.736091][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.736189][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.736307][ T5806] bridge_slave_0: entered allmulticast mode [ 88.738046][ T5806] bridge_slave_0: entered promiscuous mode [ 88.829017][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.835477][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.835963][ T5801] bridge_slave_1: entered allmulticast mode [ 88.839172][ T5801] bridge_slave_1: entered promiscuous mode [ 88.946103][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.946436][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.946949][ T5806] bridge_slave_1: entered allmulticast mode [ 88.948539][ T5806] bridge_slave_1: entered promiscuous mode [ 89.179302][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.236113][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.236303][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.236427][ T5802] bridge_slave_0: entered allmulticast mode [ 89.238126][ T5802] bridge_slave_0: entered promiscuous mode [ 89.368444][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.447135][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.447276][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.447464][ T5802] bridge_slave_1: entered allmulticast mode [ 89.449281][ T5802] bridge_slave_1: entered promiscuous mode [ 89.453121][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.453492][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.453619][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.453799][ T5800] bridge_slave_0: entered allmulticast mode [ 89.457541][ T5800] bridge_slave_0: entered promiscuous mode [ 89.559185][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.638468][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.638716][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.638808][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.638916][ T5800] bridge_slave_1: entered allmulticast mode [ 89.640386][ T5800] bridge_slave_1: entered promiscuous mode [ 89.928704][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.180625][ T5803] team0: Port device team_slave_0 added [ 90.248617][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.428132][ T5803] team0: Port device team_slave_1 added [ 90.508752][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.511470][ T5801] team0: Port device team_slave_0 added [ 90.519083][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.597524][ T5806] team0: Port device team_slave_0 added [ 90.655337][ T5813] Bluetooth: hci4: command tx timeout [ 90.655444][ T5807] Bluetooth: hci1: command tx timeout [ 90.658129][ T5801] team0: Port device team_slave_1 added [ 90.660480][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.735276][ T5807] Bluetooth: hci2: command tx timeout [ 90.735291][ T5813] Bluetooth: hci0: command tx timeout [ 90.735314][ T5813] Bluetooth: hci3: command tx timeout [ 90.764031][ T5806] team0: Port device team_slave_1 added [ 91.177067][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.177082][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.177095][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.257448][ T5802] team0: Port device team_slave_0 added [ 91.377470][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.377487][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.377510][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.458018][ T5802] team0: Port device team_slave_1 added [ 91.458868][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.458877][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.458890][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.462804][ T5800] team0: Port device team_slave_0 added [ 91.477580][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.477595][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.477618][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.564435][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.564447][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.564475][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.570410][ T5800] team0: Port device team_slave_1 added [ 91.574703][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.574718][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.574741][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.733059][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.733075][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.733088][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.868189][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.868200][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.868214][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.977001][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.977018][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.977038][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.156610][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.156622][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.156636][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.162687][ T5803] hsr_slave_0: entered promiscuous mode [ 92.163729][ T5803] hsr_slave_1: entered promiscuous mode [ 92.392591][ T5801] hsr_slave_0: entered promiscuous mode [ 92.393503][ T5801] hsr_slave_1: entered promiscuous mode [ 92.394203][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 92.394289][ T5801] Cannot create hsr debugfs directory [ 92.491118][ T5806] hsr_slave_0: entered promiscuous mode [ 92.492031][ T5806] hsr_slave_1: entered promiscuous mode [ 92.492807][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 92.492826][ T5806] Cannot create hsr debugfs directory [ 92.735261][ T5812] Bluetooth: hci4: command tx timeout [ 92.735294][ T5812] Bluetooth: hci1: command tx timeout [ 92.753004][ T5802] hsr_slave_0: entered promiscuous mode [ 92.754282][ T5802] hsr_slave_1: entered promiscuous mode [ 92.756015][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 92.756040][ T5802] Cannot create hsr debugfs directory [ 92.815466][ T5813] Bluetooth: hci3: command tx timeout [ 92.815500][ T5813] Bluetooth: hci2: command tx timeout [ 92.815521][ T5813] Bluetooth: hci0: command tx timeout [ 93.241185][ T5800] hsr_slave_0: entered promiscuous mode [ 93.244144][ T5800] hsr_slave_1: entered promiscuous mode [ 93.244722][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 93.244744][ T5800] Cannot create hsr debugfs directory [ 94.482104][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.515819][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.551504][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.601413][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.695396][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.722963][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.765848][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.811437][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.815782][ T5807] Bluetooth: hci4: command tx timeout [ 94.815828][ T5812] Bluetooth: hci1: command tx timeout [ 94.897959][ T5812] Bluetooth: hci0: command tx timeout [ 94.897989][ T5812] Bluetooth: hci2: command tx timeout [ 94.898007][ T5812] Bluetooth: hci3: command tx timeout [ 94.927388][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.964448][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.989309][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.040171][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.174469][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.205015][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.242557][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.277157][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.420519][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.461542][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.494211][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.502962][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.532626][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.641374][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.652806][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.690303][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.691201][ T4933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.738819][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.738975][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.776908][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.814049][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.831688][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.831840][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.872880][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.873356][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.929034][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.957833][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.963060][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.963220][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.008654][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.008774][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.091236][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.122667][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.144716][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.144930][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.196290][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.196459][ T4933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.281885][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.328863][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.329298][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.392086][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.392232][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.474029][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.750348][ T5803] veth0_vlan: entered promiscuous mode [ 96.780202][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.825720][ T5803] veth1_vlan: entered promiscuous mode [ 96.983550][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.012672][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.044883][ T5803] veth0_macvtap: entered promiscuous mode [ 97.091787][ T5803] veth1_macvtap: entered promiscuous mode [ 97.112658][ T5801] veth0_vlan: entered promiscuous mode [ 97.173468][ T5801] veth1_vlan: entered promiscuous mode [ 97.181993][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.194859][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.232190][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.290864][ T2469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.306176][ T2469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.310839][ T2469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.312973][ T5806] veth0_vlan: entered promiscuous mode [ 97.322865][ T2469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.424826][ T5806] veth1_vlan: entered promiscuous mode [ 97.471851][ T5801] veth0_macvtap: entered promiscuous mode [ 97.556363][ T5801] veth1_macvtap: entered promiscuous mode [ 97.609276][ T5800] veth0_vlan: entered promiscuous mode [ 97.671768][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.671789][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.690619][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.712445][ T5800] veth1_vlan: entered promiscuous mode [ 97.750773][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.774406][ T5806] veth0_macvtap: entered promiscuous mode [ 97.820822][ T2469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824377][ T1205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.824396][ T1205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.826970][ T5806] veth1_macvtap: entered promiscuous mode [ 97.828476][ T5802] veth0_vlan: entered promiscuous mode [ 97.830240][ T2469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.843421][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.851535][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.951422][ T5802] veth1_vlan: entered promiscuous mode [ 98.017779][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.040766][ T5800] veth0_macvtap: entered promiscuous mode [ 98.131026][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.149098][ T5800] veth1_macvtap: entered promiscuous mode [ 98.208778][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.247475][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.252923][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.294532][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.327368][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.327387][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.466864][ T5926] netlink: 'syz.3.7': attribute type 11 has an invalid length. [ 98.466957][ T5926] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7'. [ 98.469759][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.531732][ T5802] veth0_macvtap: entered promiscuous mode [ 98.568609][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.625314][ T5802] veth1_macvtap: entered promiscuous mode [ 98.641355][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.641372][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.667722][ T2469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.669573][ T2469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.693405][ T2469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.739415][ T2469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.913689][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.990992][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.991012][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.043606][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.176064][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.176080][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.176330][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.227922][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.238169][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.246393][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.401920][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.401940][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.921548][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.921569][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.005723][ T1438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.005743][ T1438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.147530][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.147549][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.641043][ T5979] fuse: Bad value for 'fd' [ 106.170598][ T6012] netlink: 'syz.4.34': attribute type 14 has an invalid length. [ 106.170623][ T6012] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.34'. [ 112.571838][ T37] audit: type=1326 audit(1760291072.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.572439][ T37] audit: type=1326 audit(1760291072.440:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827083][ T37] audit: type=1326 audit(1760291072.690:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827135][ T37] audit: type=1326 audit(1760291072.690:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827179][ T37] audit: type=1326 audit(1760291072.690:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827222][ T37] audit: type=1326 audit(1760291072.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827265][ T37] audit: type=1326 audit(1760291072.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827308][ T37] audit: type=1326 audit(1760291072.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827351][ T37] audit: type=1326 audit(1760291072.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 112.827399][ T37] audit: type=1326 audit(1760291072.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8ba7eec9 code=0x7ffc0000 [ 115.398200][ T6074] Bluetooth: MGMT ver 1.23 [ 118.440313][ T6091] tipc: Can't bind to reserved service type 0 [ 119.145388][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.652993][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 120.683027][ T31] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 120.683054][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.683147][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.721608][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.721636][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.721655][ T31] usb 3-1: Product: syz [ 120.721668][ T31] usb 3-1: Manufacturer: syz [ 120.721682][ T31] usb 3-1: SerialNumber: syz [ 121.183668][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 121.183689][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 121.183701][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 121.183713][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 121.183730][ T31] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 121.183775][ T31] cdc_ncm 3-1:1.0: bind() failure [ 121.911205][ T31] usb 3-1: USB disconnect, device number 2 [ 123.267954][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.655250][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 123.663768][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.663817][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 123.663839][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.899031][ T10] usb 5-1: config 0 descriptor?? [ 124.360383][ T10] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 124.360428][ T10] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 124.360541][ T10] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 124.360568][ T10] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 124.525221][ T10] usb 5-1: USB disconnect, device number 2 [ 125.155317][ T6150] syz.1.75 (6150) used greatest stack depth: 18376 bytes left [ 126.655369][ T6160] serio: Serial port ptm0 [ 133.005843][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005937][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.785903][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.157049][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 136.378960][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 136.378988][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 136.379008][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 136.379060][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.379081][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.379104][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.379152][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 136.379174][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.539005][ T10] usb 4-1: config 0 descriptor?? [ 136.819457][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.839909][ T10] usb 4-1: USB disconnect, device number 2 [ 136.869631][ T10] usblp0: removed [ 137.305226][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.459390][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 137.462961][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.462988][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 137.463007][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 137.463072][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.463092][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.463115][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.463155][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 137.463176][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.557263][ T10] usb 4-1: config 0 descriptor?? [ 137.770256][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.276554][ T5879] usb 4-1: USB disconnect, device number 3 [ 139.470628][ T6221] usblp0: removed [ 139.572198][ T6246] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 141.377842][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.399878][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.400985][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.403840][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.404667][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.546093][ T5812] Bluetooth: hci5: command tx timeout [ 143.706915][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 145.616090][ T5812] Bluetooth: hci5: command tx timeout [ 146.578862][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.578989][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.579238][ T6260] bridge_slave_0: entered allmulticast mode [ 146.588097][ T6260] bridge_slave_0: entered promiscuous mode [ 146.603047][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.611095][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.611389][ T6260] bridge_slave_1: entered allmulticast mode [ 146.627520][ T6260] bridge_slave_1: entered promiscuous mode [ 147.466603][ T6302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.472893][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.775486][ T5812] Bluetooth: hci5: command tx timeout [ 151.151186][ T5812] Bluetooth: hci5: command tx timeout [ 152.652720][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.075659][ T6260] team0: Port device team_slave_0 added [ 156.108346][ T6260] team0: Port device team_slave_1 added [ 156.369319][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.369337][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.369360][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.373222][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.373237][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.373262][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.648831][ T6260] hsr_slave_0: entered promiscuous mode [ 157.650435][ T6260] hsr_slave_1: entered promiscuous mode [ 157.651541][ T6260] debugfs: 'hsr0' already exists in 'hsr' [ 157.651580][ T6260] Cannot create hsr debugfs directory [ 162.977623][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 162.977641][ T37] audit: type=1326 audit(1760291122.840:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.018342][ T37] audit: type=1326 audit(1760291122.860:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.134624][ T37] audit: type=1326 audit(1760291123.010:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.167801][ T37] audit: type=1326 audit(1760291123.050:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.168735][ T37] audit: type=1326 audit(1760291123.050:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.169051][ T37] audit: type=1326 audit(1760291123.050:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.171144][ T37] audit: type=1326 audit(1760291123.050:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.172316][ T37] audit: type=1326 audit(1760291123.050:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.172594][ T37] audit: type=1326 audit(1760291123.050:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 163.173244][ T37] audit: type=1326 audit(1760291123.050:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6392 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d062eec9 code=0x7ffc0000 [ 164.227313][ T6260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.327942][ T6260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.389486][ T6260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.457603][ T6260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.075469][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.145644][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.193641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.217590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.230043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.230182][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.584333][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.640424][ T6442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.736253][ T6260] veth0_vlan: entered promiscuous mode [ 176.771334][ T6260] veth1_vlan: entered promiscuous mode [ 176.902857][ T6260] veth0_macvtap: entered promiscuous mode [ 177.567678][ T6480] Zero length message leads to an empty skb [ 177.624245][ T6260] veth1_macvtap: entered promiscuous mode [ 177.987677][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.039361][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.359621][ T2469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.628986][ T6489] serio: Serial port ptm0 [ 179.329215][ T2469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.340546][ T2469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.411739][ T2469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.685298][ T6501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.762726][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 180.762743][ T37] audit: type=1326 audit(1760291140.640:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.762786][ T37] audit: type=1326 audit(1760291140.640:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.822731][ T37] audit: type=1326 audit(1760291140.700:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.822783][ T37] audit: type=1326 audit(1760291140.700:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.822826][ T37] audit: type=1326 audit(1760291140.700:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.825302][ T37] audit: type=1326 audit(1760291140.700:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.837087][ T37] audit: type=1326 audit(1760291140.720:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.837147][ T37] audit: type=1326 audit(1760291140.720:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.837196][ T37] audit: type=1326 audit(1760291140.720:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.846105][ T37] audit: type=1326 audit(1760291140.720:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ffbbdedeec9 code=0x7ffc0000 [ 180.896224][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.896258][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.530781][ T119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.530803][ T119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.773072][ T6579] netlink: 64 bytes leftover after parsing attributes in process `syz.5.187'. [ 193.651865][ T5981] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 193.820094][ T5981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.820119][ T5981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.850300][ T5981] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.850329][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.850347][ T5981] usb 2-1: SerialNumber: syz [ 195.125215][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 195.285127][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 195.288560][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.288593][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.288614][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 195.288637][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 27680, setting to 1024 [ 195.288662][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 195.288683][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 195.290272][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.290296][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.290322][ T31] usb 4-1: SerialNumber: syz [ 195.402701][ T6615] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 195.416130][ T31] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 195.425842][ T31] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 195.510898][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.511678][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.687054][ T6615] sit0: entered promiscuous mode [ 195.730899][ T6615] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 195.730923][ T6615] netlink: 1 bytes leftover after parsing attributes in process `syz.3.202'. [ 195.780602][ T6457] usb 4-1: USB disconnect, device number 4 [ 197.253965][ T5981] usb 2-1: 0:2 : does not exist [ 197.559080][ T5981] usb 2-1: USB disconnect, device number 2 [ 198.752089][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.184440][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 203.350023][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.350070][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 203.350093][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.357170][ T31] usb 5-1: config 0 descriptor?? [ 204.578097][ T31] hid (null): report_id 0 is invalid [ 204.626635][ T31] logitech-djreceiver 0003:046D:C71F.0002: report_id 0 is invalid [ 204.626657][ T31] logitech-djreceiver 0003:046D:C71F.0002: item 0 0 1 8 parsing failed [ 204.627462][ T31] logitech-djreceiver 0003:046D:C71F.0002: logi_dj_probe: parse failed [ 204.627550][ T31] logitech-djreceiver 0003:046D:C71F.0002: probe with driver logitech-djreceiver failed with error -22 [ 204.828165][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.828745][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.893538][ T5981] usb 5-1: USB disconnect, device number 3 [ 212.598785][ T5120] Bluetooth: hci3: command 0x0406 tx timeout [ 212.737086][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 212.737131][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 212.740352][ T5120] Bluetooth: hci4: command 0x0406 tx timeout [ 215.299609][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.035971][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.040749][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.041928][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.042969][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.287404][ T62] Bluetooth: hci2: command tx timeout [ 220.166384][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 220.544343][ T62] Bluetooth: hci2: command tx timeout [ 222.667505][ T62] Bluetooth: hci2: command tx timeout [ 224.916532][ T5813] Bluetooth: hci2: command tx timeout [ 225.235731][ T6757] chnl_net:caif_netlink_parms(): no params data found [ 231.698028][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.698220][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.698540][ T6757] bridge_slave_0: entered allmulticast mode [ 231.701402][ T6757] bridge_slave_0: entered promiscuous mode [ 231.746411][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.746563][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.747156][ T6757] bridge_slave_1: entered allmulticast mode [ 231.749880][ T6757] bridge_slave_1: entered promiscuous mode [ 236.643420][ T6757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.651608][ T6757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.592116][ T6935] serio: Serial port ptm0 [ 245.474956][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 246.670290][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.672908][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.679891][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.681329][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.682043][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.642015][ T6757] team0: Port device team_slave_0 added [ 250.842793][ T23] ================================================================== [ 250.842810][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 250.842845][ T23] Read of size 8 at addr ffffc90005c1d090 by task irq_work/0/23 [ 250.842861][ T23] [ 250.842883][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.842905][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.842923][ T23] Call Trace: [ 250.842934][ T23] [ 250.842943][ T23] dump_stack_lvl+0x189/0x250 [ 250.842965][ T23] ? run_irq_workd+0x116/0x190 [ 250.842990][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.843011][ T23] ? __pfx__printk+0x10/0x10 [ 250.843034][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 250.843055][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 250.843077][ T23] print_report+0xca/0x240 [ 250.843101][ T23] ? run_irq_workd+0x116/0x190 [ 250.843119][ T23] kasan_report+0x118/0x150 [ 250.843139][ T23] ? run_irq_workd+0x116/0x190 [ 250.843163][ T23] run_irq_workd+0x116/0x190 [ 250.843182][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 250.843200][ T23] ? schedule+0x91/0x360 [ 250.843233][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 250.843252][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 250.843268][ T23] smpboot_thread_fn+0x542/0xa60 [ 250.843285][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 250.843307][ T23] kthread+0x711/0x8a0 [ 250.843328][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 250.843345][ T23] ? __pfx_kthread+0x10/0x10 [ 250.843364][ T23] ? rt_spin_unlock+0x150/0x200 [ 250.843388][ T23] ? rt_spin_unlock+0x161/0x200 [ 250.843408][ T23] ? __pfx_kthread+0x10/0x10 [ 250.843429][ T23] ret_from_fork+0x4bc/0x870 [ 250.843456][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 250.843484][ T23] ? __switch_to_asm+0x39/0x70 [ 250.843507][ T23] ? __switch_to_asm+0x33/0x70 [ 250.843529][ T23] ? __pfx_kthread+0x10/0x10 [ 250.843549][ T23] ret_from_fork_asm+0x1a/0x30 [ 250.843580][ T23] [ 250.843587][ T23] [ 250.843591][ T23] The buggy address belongs to a vmalloc virtual mapping [ 250.843617][ T23] Memory state around the buggy address: [ 250.843627][ T23] ffffc90005c1cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 250.843640][ T23] ffffc90005c1d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 250.843652][ T23] >ffffc90005c1d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 250.843665][ T23] ^ [ 250.843674][ T23] ffffc90005c1d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 250.843687][ T23] ffffc90005c1d180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 250.843696][ T23] ================================================================== [ 250.843714][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 250.843728][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.843748][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.843759][ T23] Call Trace: [ 250.843765][ T23] [ 250.843772][ T23] dump_stack_lvl+0x99/0x250 [ 250.843794][ T23] ? __asan_memcpy+0x40/0x70 [ 250.843818][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.843839][ T23] ? __pfx__printk+0x10/0x10 [ 250.843865][ T23] vpanic+0x237/0x6d0 [ 250.843882][ T23] ? __pfx_vpanic+0x10/0x10 [ 250.843904][ T23] panic+0xb9/0xc0 [ 250.843921][ T23] ? __pfx_panic+0x10/0x10 [ 250.843936][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 250.843964][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 250.843993][ T23] ? run_irq_workd+0x116/0x190 [ 250.844011][ T23] check_panic_on_warn+0x89/0xb0 [ 250.844034][ T23] ? run_irq_workd+0x116/0x190 [ 250.844052][ T23] end_report+0x78/0x160 [ 250.844070][ T23] kasan_report+0x129/0x150 [ 250.844090][ T23] ? run_irq_workd+0x116/0x190 [ 250.844113][ T23] run_irq_workd+0x116/0x190 [ 250.844132][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 250.844151][ T23] ? schedule+0x91/0x360 [ 250.844175][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 250.844193][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 250.844209][ T23] smpboot_thread_fn+0x542/0xa60 [ 250.844233][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 250.844254][ T23] kthread+0x711/0x8a0 [ 250.844276][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 250.844293][ T23] ? __pfx_kthread+0x10/0x10 [ 250.844312][ T23] ? rt_spin_unlock+0x150/0x200 [ 250.844336][ T23] ? rt_spin_unlock+0x161/0x200 [ 250.844356][ T23] ? __pfx_kthread+0x10/0x10 [ 250.844377][ T23] ret_from_fork+0x4bc/0x870 [ 250.844403][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 250.844431][ T23] ? __switch_to_asm+0x39/0x70 [ 250.844453][ T23] ? __switch_to_asm+0x33/0x70 [ 250.844475][ T23] ? __pfx_kthread+0x10/0x10 [ 250.844495][ T23] ret_from_fork_asm+0x1a/0x30 [ 250.844526][ T23] [ 250.844787][ T23] Kernel Offset: disabled