last executing test programs: 6m34.008988737s ago: executing program 1 (id=420): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001d80)=[{0x0, 0x30}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 6m32.230682721s ago: executing program 1 (id=426): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 6m31.933243416s ago: executing program 1 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff00052406"], 0x0) 6m30.485283186s ago: executing program 1 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xae2f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x5c}}, 0x0) 6m28.722482896s ago: executing program 1 (id=435): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_cancel(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setgroups(0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 6m27.987174644s ago: executing program 1 (id=440): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r3, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 6m11.607573063s ago: executing program 32 (id=440): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r3, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 11.832658509s ago: executing program 0 (id=1318): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 10.446954367s ago: executing program 4 (id=1330): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) 10.355236566s ago: executing program 4 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 10.332648802s ago: executing program 0 (id=1332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 9.698823088s ago: executing program 3 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000000)=0x6, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000100)=[{0x3, 0x7fff, 0x800}], 0x1f4) 8.45146879s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 8.191766865s ago: executing program 0 (id=1339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 7.970819836s ago: executing program 2 (id=1340): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 6.650977946s ago: executing program 2 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 6.643623323s ago: executing program 5 (id=1344): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 6.426534864s ago: executing program 2 (id=1345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r2) 6.078161463s ago: executing program 0 (id=1346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 6.055511405s ago: executing program 2 (id=1347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.914952867s ago: executing program 3 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000000)=0x6, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0x7fff, 0x800}], 0x1f4) 4.818152357s ago: executing program 5 (id=1349): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.817453495s ago: executing program 3 (id=1350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.368797187s ago: executing program 4 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.282772207s ago: executing program 0 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000500)={"6d121c3063643fd6a39710e95e9cf24068ab311182f7545d0f5b3db63e00"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x66c00) tee(r5, 0xffffffffffffffff, 0x3, 0x0) 4.244715557s ago: executing program 5 (id=1353): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f", 0x2a}], 0x1) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000100), 0xfe00, 0xfffffffffffffffe) 4.191012041s ago: executing program 2 (id=1354): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 4.094860274s ago: executing program 3 (id=1355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.094298965s ago: executing program 4 (id=1356): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x20, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b00)={r0, r5}, 0xc) 3.04140297s ago: executing program 5 (id=1357): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.040802371s ago: executing program 0 (id=1358): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x28) 1.611501671s ago: executing program 2 (id=1359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 1.610503623s ago: executing program 3 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.454875315s ago: executing program 4 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r7) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fc0200"/35], 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) 1.454415548s ago: executing program 5 (id=1362): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 22.165035ms ago: executing program 5 (id=1363): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 80.787968][ T5827] cgroup: Unknown subsys name 'net' [ 81.044581][ T5827] cgroup: Unknown subsys name 'cpuset' [ 81.119403][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.858443][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.792528][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.794662][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.795516][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.796734][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.797528][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.802859][ T31] cfg80211: failed to load regulatory.db [ 86.827273][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.840266][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.841482][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.842616][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.843350][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.911502][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.913930][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.914946][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.916078][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.916855][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.976959][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.978613][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.980157][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.981237][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.981950][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.052086][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.059631][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.060477][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.061683][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.062473][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.834387][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.872191][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.915992][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 87.975980][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 88.300208][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 88.890822][ T5849] Bluetooth: hci1: command tx timeout [ 88.890827][ T5158] Bluetooth: hci0: command tx timeout [ 88.921118][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.921208][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.921596][ T5844] bridge_slave_0: entered allmulticast mode [ 88.923231][ T5844] bridge_slave_0: entered promiscuous mode [ 88.926202][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.926327][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.926495][ T5842] bridge_slave_0: entered allmulticast mode [ 88.939106][ T5842] bridge_slave_0: entered promiscuous mode [ 88.968919][ T5849] Bluetooth: hci2: command tx timeout [ 89.048919][ T5849] Bluetooth: hci3: command tx timeout [ 89.099727][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.099825][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.099940][ T5844] bridge_slave_1: entered allmulticast mode [ 89.101393][ T5844] bridge_slave_1: entered promiscuous mode [ 89.105133][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.105239][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.105513][ T5842] bridge_slave_1: entered allmulticast mode [ 89.106941][ T5842] bridge_slave_1: entered promiscuous mode [ 89.107746][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.107818][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.107914][ T5851] bridge_slave_0: entered allmulticast mode [ 89.120339][ T5851] bridge_slave_0: entered promiscuous mode [ 89.129861][ T5849] Bluetooth: hci4: command tx timeout [ 89.359590][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.359701][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.359815][ T5851] bridge_slave_1: entered allmulticast mode [ 89.361266][ T5851] bridge_slave_1: entered promiscuous mode [ 89.367854][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.367940][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.368043][ T5854] bridge_slave_0: entered allmulticast mode [ 89.380286][ T5854] bridge_slave_0: entered promiscuous mode [ 89.640053][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.640209][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.640377][ T5854] bridge_slave_1: entered allmulticast mode [ 89.643385][ T5854] bridge_slave_1: entered promiscuous mode [ 89.663450][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.676033][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.872960][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.875089][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.879558][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.880817][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.880943][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.881110][ T5855] bridge_slave_0: entered allmulticast mode [ 89.883589][ T5855] bridge_slave_0: entered promiscuous mode [ 90.093684][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.094104][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.094238][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.094411][ T5855] bridge_slave_1: entered allmulticast mode [ 90.097023][ T5855] bridge_slave_1: entered promiscuous mode [ 90.282343][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.604095][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.606478][ T5844] team0: Port device team_slave_0 added [ 90.613424][ T5842] team0: Port device team_slave_0 added [ 90.843104][ T5844] team0: Port device team_slave_1 added [ 90.846408][ T5842] team0: Port device team_slave_1 added [ 90.851626][ T5851] team0: Port device team_slave_0 added [ 90.857242][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.969252][ T5849] Bluetooth: hci0: command tx timeout [ 90.969283][ T5849] Bluetooth: hci1: command tx timeout [ 91.048999][ T5158] Bluetooth: hci2: command tx timeout [ 91.103081][ T5851] team0: Port device team_slave_1 added [ 91.106867][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.110134][ T5854] team0: Port device team_slave_0 added [ 91.129098][ T5158] Bluetooth: hci3: command tx timeout [ 91.209148][ T5158] Bluetooth: hci4: command tx timeout [ 91.382587][ T5854] team0: Port device team_slave_1 added [ 91.572556][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.572573][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.572597][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.575033][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.575047][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.575070][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.801008][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.801024][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.801047][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.803016][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.803028][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.803051][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.804260][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.804272][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.804285][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.806818][ T5855] team0: Port device team_slave_0 added [ 92.022575][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.022590][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.022614][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.026041][ T5855] team0: Port device team_slave_1 added [ 92.026857][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.026865][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.026884][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.173161][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.173173][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.173187][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.411966][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.411981][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.412005][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.620280][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.620291][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.620304][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.696459][ T5844] hsr_slave_0: entered promiscuous mode [ 92.697363][ T5844] hsr_slave_1: entered promiscuous mode [ 92.707717][ T5842] hsr_slave_0: entered promiscuous mode [ 92.709511][ T5842] hsr_slave_1: entered promiscuous mode [ 92.710524][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.710631][ T5842] Cannot create hsr debugfs directory [ 92.872313][ T5851] hsr_slave_0: entered promiscuous mode [ 92.873106][ T5851] hsr_slave_1: entered promiscuous mode [ 92.873645][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 92.873664][ T5851] Cannot create hsr debugfs directory [ 92.957418][ T5854] hsr_slave_0: entered promiscuous mode [ 92.958169][ T5854] hsr_slave_1: entered promiscuous mode [ 92.958658][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 92.958676][ T5854] Cannot create hsr debugfs directory [ 93.050115][ T5158] Bluetooth: hci1: command tx timeout [ 93.050122][ T5849] Bluetooth: hci0: command tx timeout [ 93.128955][ T5849] Bluetooth: hci2: command tx timeout [ 93.208885][ T5849] Bluetooth: hci3: command tx timeout [ 93.288942][ T5849] Bluetooth: hci4: command tx timeout [ 93.502017][ T5855] hsr_slave_0: entered promiscuous mode [ 93.503340][ T5855] hsr_slave_1: entered promiscuous mode [ 93.505721][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 93.505744][ T5855] Cannot create hsr debugfs directory [ 94.897169][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.930439][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.973697][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.033030][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.129109][ T5849] Bluetooth: hci1: command tx timeout [ 95.129115][ T5158] Bluetooth: hci0: command tx timeout [ 95.147018][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.191568][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.209023][ T5158] Bluetooth: hci2: command tx timeout [ 95.236412][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.281893][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.289274][ T5158] Bluetooth: hci3: command tx timeout [ 95.379050][ T5158] Bluetooth: hci4: command tx timeout [ 95.442702][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.505210][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.540870][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.585790][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.748580][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.794395][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.828203][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.885613][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.067940][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.111410][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.115255][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.151410][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.196463][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.301595][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.336038][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.366339][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.367177][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.417922][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.418111][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.479795][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.532479][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.537235][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.537356][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.605257][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.605403][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.685111][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.713639][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.733033][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.740368][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.792380][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.792550][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.905770][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.972056][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.008462][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.019005][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.100293][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.104090][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.183404][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.237778][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.238016][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.285788][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.300101][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.300769][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.577591][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.794557][ T5842] veth0_vlan: entered promiscuous mode [ 97.888069][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.899829][ T5842] veth1_vlan: entered promiscuous mode [ 97.962018][ T5844] veth0_vlan: entered promiscuous mode [ 98.024673][ T5844] veth1_vlan: entered promiscuous mode [ 98.065875][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.159775][ T5842] veth0_macvtap: entered promiscuous mode [ 98.224288][ T5842] veth1_macvtap: entered promiscuous mode [ 98.251275][ T5851] veth0_vlan: entered promiscuous mode [ 98.330411][ T5851] veth1_vlan: entered promiscuous mode [ 98.334173][ T5844] veth0_macvtap: entered promiscuous mode [ 98.375141][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.403403][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.404139][ T5844] veth1_macvtap: entered promiscuous mode [ 98.443122][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.504289][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.512833][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.520199][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.527601][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.531189][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.556939][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.645695][ T5851] veth0_macvtap: entered promiscuous mode [ 98.694804][ T1495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.712675][ T1495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.722720][ T1495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.724301][ T5851] veth1_macvtap: entered promiscuous mode [ 98.765906][ T1495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.957270][ T5855] veth0_vlan: entered promiscuous mode [ 99.003819][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.003844][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.038226][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.136646][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.162955][ T5855] veth1_vlan: entered promiscuous mode [ 99.226362][ T1495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.226380][ T1495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.236423][ T5854] veth0_vlan: entered promiscuous mode [ 99.248975][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.263592][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.295567][ T1447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.308408][ T1447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.359750][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.359768][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.426695][ T5854] veth1_vlan: entered promiscuous mode [ 99.655905][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.655924][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.704082][ T5855] veth0_macvtap: entered promiscuous mode [ 99.746453][ T5855] veth1_macvtap: entered promiscuous mode [ 99.847734][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.847752][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.889557][ T5854] veth0_macvtap: entered promiscuous mode [ 99.942258][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.993304][ T5854] veth1_macvtap: entered promiscuous mode [ 100.032429][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.032803][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.032818][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.174115][ T1558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.175046][ T1558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.176671][ T1558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.176929][ T1558] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.289702][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.467899][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.792855][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.889725][ T5963] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.897720][ T5963] unsupported nlmsg_type 40 [ 101.540084][ T1495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.547584][ T1495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.585742][ T1495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.830351][ T5965] bridge_slave_0: left allmulticast mode [ 101.830383][ T5965] bridge_slave_0: left promiscuous mode [ 101.832725][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.954317][ T5965] bridge_slave_1: left allmulticast mode [ 101.954349][ T5965] bridge_slave_1: left promiscuous mode [ 101.954607][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.090436][ T5965] bond0: (slave bond_slave_0): Releasing backup interface [ 102.181663][ T5965] bond0: (slave bond_slave_1): Releasing backup interface [ 102.294209][ T5965] team0: Port device team_slave_0 removed [ 102.334634][ T5965] team0: Port device team_slave_1 removed [ 102.335726][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.335754][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.396089][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.396123][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.540097][ T5977] binder: 5976:5977 ioctl c400941d 0 returned -22 [ 102.692999][ T1558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.693018][ T1558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.871616][ T1558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.871635][ T1558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.004984][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.005003][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.232305][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.232324][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.020095][ T5832] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.673676][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 104.706260][ T5832] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 104.706289][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.723840][ T5832] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 104.723867][ T5832] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 104.723886][ T5832] usb 1-1: Product: syz [ 104.723899][ T5832] usb 1-1: Manufacturer: syz [ 104.723912][ T5832] usb 1-1: SerialNumber: syz [ 104.817966][ T5832] usb 1-1: config 0 descriptor?? [ 104.883654][ T5832] ldusb 1-1:0.0: Interrupt in endpoint not found [ 105.130716][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.131262][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.180448][ T49] usb 1-1: USB disconnect, device number 2 [ 105.357520][ T6015] bridge_slave_0: left allmulticast mode [ 105.357556][ T6015] bridge_slave_0: left promiscuous mode [ 105.357902][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.491429][ T6015] bridge_slave_1: left allmulticast mode [ 105.491462][ T6015] bridge_slave_1: left promiscuous mode [ 105.491724][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.641157][ T6015] bond0: (slave bond_slave_0): Releasing backup interface [ 105.722117][ T6015] bond0: (slave bond_slave_1): Releasing backup interface [ 105.793153][ T5992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.098295][ T6015] team0: Port device team_slave_0 removed [ 106.165914][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.170693][ T6015] team0: Port device team_slave_1 removed [ 106.171718][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.171745][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.484006][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.484039][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.667388][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.493997][ T6017] team0: Mode changed to "loadbalance" [ 108.023780][ T5890] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.569733][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 108.572327][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.572352][ T5890] usb 4-1: config 0 has no interfaces? [ 108.576049][ T5890] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 108.576075][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.576094][ T5890] usb 4-1: Product: syz [ 108.576108][ T5890] usb 4-1: Manufacturer: syz [ 108.576129][ T5890] usb 4-1: SerialNumber: syz [ 108.695273][ T5890] usb 4-1: config 0 descriptor?? [ 109.324725][ T6051] binder: 6039:6051 ioctl c0306201 0 returned -14 [ 109.532110][ T6054] netlink: 256 bytes leftover after parsing attributes in process `syz.0.35'. [ 111.114447][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 111.186612][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 112.660817][ T6071] lo speed is unknown, defaulting to 1000 [ 112.661185][ T6071] lo speed is unknown, defaulting to 1000 [ 112.665003][ T6071] lo speed is unknown, defaulting to 1000 [ 112.737248][ T6071] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.828486][ T6071] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.829172][ T9] usb 4-1: USB disconnect, device number 2 [ 112.983841][ T6071] lo speed is unknown, defaulting to 1000 [ 112.987346][ T6071] lo speed is unknown, defaulting to 1000 [ 113.050642][ T6071] lo speed is unknown, defaulting to 1000 [ 113.129734][ T6071] lo speed is unknown, defaulting to 1000 [ 113.172251][ T6071] lo speed is unknown, defaulting to 1000 [ 113.279888][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.355727][ T6044] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.498910][ T6044] usb 4-1: Using ep0 maxpacket: 32 [ 116.500730][ T6044] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 116.500753][ T6044] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.505607][ T6044] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.505632][ T6044] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.505652][ T6044] usb 4-1: Product: syz [ 116.505665][ T6044] usb 4-1: Manufacturer: syz [ 116.505679][ T6044] usb 4-1: SerialNumber: syz [ 116.581819][ T6044] usb 4-1: config 0 descriptor?? [ 116.614625][ T6044] ldusb 4-1:0.0: Interrupt in endpoint not found [ 116.903527][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.904036][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.942022][ T5832] usb 4-1: USB disconnect, device number 3 [ 118.257175][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.854913][ T6138] bridge_slave_0: left allmulticast mode [ 118.854969][ T6138] bridge_slave_0: left promiscuous mode [ 118.855223][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.268656][ T6138] bridge_slave_1: left allmulticast mode [ 119.268690][ T6138] bridge_slave_1: left promiscuous mode [ 119.283951][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.300843][ T6138] bond0: (slave bond_slave_0): Releasing backup interface [ 120.410721][ T6138] bond0: (slave bond_slave_1): Releasing backup interface [ 121.679205][ T6138] team0: Port device team_slave_0 removed [ 121.754027][ T6138] team0: Port device team_slave_1 removed [ 121.755238][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.755269][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.857727][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.857760][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.325441][ T6140] team0: Mode changed to "loadbalance" [ 122.512580][ T5832] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.152554][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.152583][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 123.152633][ T5832] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 123.152655][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.215213][ T5832] usb 3-1: config 0 descriptor?? [ 123.598937][ T990] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.681983][ T5832] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 123.682022][ T5832] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 123.682048][ T5832] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 123.682073][ T5832] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 123.682098][ T5832] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 123.750741][ T5832] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 123.838872][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 123.841410][ T990] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 123.841435][ T990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.853227][ T990] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 123.853257][ T990] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 123.853277][ T990] usb 4-1: Product: syz [ 123.853290][ T990] usb 4-1: Manufacturer: syz [ 123.853304][ T990] usb 4-1: SerialNumber: syz [ 123.973647][ T990] usb 4-1: config 0 descriptor?? [ 124.025205][ T990] ldusb 4-1:0.0: Interrupt in endpoint not found [ 124.642573][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.643102][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.690699][ T990] usb 4-1: USB disconnect, device number 4 [ 125.338168][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.533351][ T5914] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.554003][ T6205] bridge_slave_0: left allmulticast mode [ 129.554034][ T6205] bridge_slave_0: left promiscuous mode [ 129.554290][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.738941][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 129.806331][ T5832] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 129.806379][ T5832] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 129.811820][ T5832] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71 [ 129.820219][ T5832] usb 3-1: USB disconnect, device number 2 [ 129.868298][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.868314][ T5914] usb 4-1: config 0 has no interfaces? [ 129.902501][ T6205] bridge_slave_1: left allmulticast mode [ 129.902531][ T6205] bridge_slave_1: left promiscuous mode [ 129.902770][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.904857][ T5914] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 129.904886][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.904905][ T5914] usb 4-1: Product: syz [ 129.904919][ T5914] usb 4-1: Manufacturer: syz [ 129.904933][ T5914] usb 4-1: SerialNumber: syz [ 129.963116][ T5914] usb 4-1: config 0 descriptor?? [ 130.221349][ T6205] bond0: (slave bond_slave_0): Releasing backup interface [ 130.599772][ T6205] bond0: (slave bond_slave_1): Releasing backup interface [ 130.745032][ T6205] team0: Port device team_slave_0 removed [ 130.757519][ T6220] binder: 6200:6220 ioctl c0306201 0 returned -14 [ 130.828533][ T6205] team0: Port device team_slave_1 removed [ 130.835664][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.835696][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.959273][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.962002][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.286405][ T6208] team0: Mode changed to "loadbalance" [ 133.142188][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.142359][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.258794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.674211][ T6234] Zero length message leads to an empty skb [ 134.153886][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.180399][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 135.180430][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 135.184226][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 135.184243][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.184253][ T9] usb 3-1: Product: syz [ 135.184260][ T9] usb 3-1: Manufacturer: syz [ 135.184268][ T9] usb 3-1: SerialNumber: syz [ 135.187296][ T9] usb 3-1: config 0 descriptor?? [ 135.188034][ T6238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 135.188159][ T6238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.299939][ T6238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.300070][ T6238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.972959][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 137.226023][ T9] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 137.264997][ T9] usb 3-1: USB disconnect, device number 3 [ 137.718802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.718843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.718875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.718907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.718939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.718971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.719003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.719034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.719066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.289694][ T6078] usb 4-1: USB disconnect, device number 5 [ 147.811932][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.963392][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.963421][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.963462][ T5907] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 147.963483][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.984713][ T5907] usb 1-1: config 0 descriptor?? [ 149.004947][ T5907] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 149.004978][ T5907] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 149.004993][ T5907] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 149.005008][ T5907] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 149.005022][ T5907] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 149.049286][ T5907] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 150.777478][ T5907] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 150.777531][ T5907] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 150.822971][ T5907] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 150.970920][ T5907] usb 1-1: USB disconnect, device number 3 [ 151.250514][ T6388] fido_id[6388]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1E7D:2D50.0002/report_descriptor': No such device [ 151.980146][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 152.151247][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.152916][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.152942][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.152961][ T9] usb 3-1: SerialNumber: syz [ 152.207643][ T9] cdc_acm 3-1:1.0: invalid descriptor buffer length [ 152.207665][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 152.207684][ T9] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 152.207719][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 152.455107][ T5890] usb 3-1: USB disconnect, device number 4 [ 153.532313][ T37] audit: type=1326 audit(1759038899.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6425 comm="syz.2.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1994cfeec9 code=0x0 [ 156.256350][ T6463] netlink: 256 bytes leftover after parsing attributes in process `syz.2.150'. [ 158.739050][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 159.024500][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 159.504527][ T6508] bridge1: port 1(veth0_to_bond) entered blocking state [ 159.504684][ T6508] bridge1: port 1(veth0_to_bond) entered disabled state [ 159.505007][ T6508] veth0_to_bond: entered allmulticast mode [ 159.509601][ T6508] veth0_to_bond: entered promiscuous mode [ 165.032864][ T6569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.369626][ T6578] netlink: 256 bytes leftover after parsing attributes in process `syz.1.181'. [ 166.559663][ T6586] virtio-fs: tag not found [ 167.356047][ T6571] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 167.392555][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 167.501035][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 167.552425][ T6574] bridge_slave_0: left allmulticast mode [ 167.552457][ T6574] bridge_slave_0: left promiscuous mode [ 167.554846][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.697709][ T6574] bridge_slave_1: left allmulticast mode [ 167.697741][ T6574] bridge_slave_1: left promiscuous mode [ 167.710081][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.955244][ T6574] bond0: (slave bond_slave_0): Releasing backup interface [ 168.068070][ T6574] bond0: (slave bond_slave_1): Releasing backup interface [ 168.346726][ T6574] team0: Port device team_slave_0 removed [ 168.442202][ T6574] team0: Port device team_slave_1 removed [ 168.443392][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.443419][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.602537][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.602568][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.742300][ T6574] bond1: (slave ip6gretap1): Removing an active aggregator [ 168.744427][ T6574] bond1: (slave ip6gretap1): Releasing backup interface [ 168.880561][ T5914] lo speed is unknown, defaulting to 1000 [ 169.079219][ T6610] lo speed is unknown, defaulting to 1000 [ 172.551181][ T6635] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 172.551181][ T6635] The task syz.1.195 (6635) triggered the difference, watch for misbehavior. [ 173.254698][ T6642] virtio-fs: tag not found [ 178.360742][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 178.532103][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 183.381238][ T6722] veth0_to_bond: left allmulticast mode [ 183.381269][ T6722] veth0_to_bond: left promiscuous mode [ 183.381533][ T6722] bridge1: port 1(veth0_to_bond) entered disabled state [ 183.692410][ T6718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.469446][ T6726] team0: Unable to change to the same mode the team is in [ 184.594268][ T6733] Illegal XDP return value 36047710 on prog (id 32) dev syz_tun, expect packet loss! [ 185.262740][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 185.429872][ T5935] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.783322][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 186.125179][ T5935] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.125213][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 186.125248][ T5935] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 186.125270][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.260668][ T5935] usb 1-1: config 0 descriptor?? [ 187.510368][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 187.540834][ T5935] usbhid 1-1:0.0: can't add hid device: -71 [ 187.540962][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 188.285999][ T6775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.288864][ T5935] usb 1-1: USB disconnect, device number 4 [ 188.459889][ T6775] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 188.538942][ T1848] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.648988][ T1157] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.784028][ T6777] bond1: (slave ip6gretap1): Removing an active aggregator [ 188.786629][ T6777] bond1: (slave ip6gretap1): Releasing backup interface [ 189.225545][ T6784] team0: Mode changed to "loadbalance" [ 190.229324][ T49] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.451367][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.451394][ T49] usb 4-1: config 0 has no interfaces? [ 190.454433][ T49] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 190.454460][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.454479][ T49] usb 4-1: Product: syz [ 190.454493][ T49] usb 4-1: Manufacturer: syz [ 190.454507][ T49] usb 4-1: SerialNumber: syz [ 190.521388][ T49] usb 4-1: config 0 descriptor?? [ 191.250556][ T5935] usb 4-1: USB disconnect, device number 6 [ 192.942065][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 193.334963][ T49] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.520463][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 194.066930][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.066956][ T49] usb 4-1: config 0 has no interfaces? [ 194.256541][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256617][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.333296][ T49] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 194.333324][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.333334][ T49] usb 4-1: Product: syz [ 194.333341][ T49] usb 4-1: Manufacturer: syz [ 194.333348][ T49] usb 4-1: SerialNumber: syz [ 194.388877][ T49] usb 4-1: config 0 descriptor?? [ 196.064385][ T5935] usb 4-1: USB disconnect, device number 7 [ 196.694655][ T6859] input: syz0 as /devices/virtual/input/input5 [ 197.005702][ T6838] syz.2.259 (6838) used greatest stack depth: 18760 bytes left [ 200.152801][ T6895] random: crng reseeded on system resumption [ 201.861676][ T6910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.866863][ T6910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.997388][ T6922] serio: Serial port ptm0 [ 204.746692][ T6924] lo speed is unknown, defaulting to 1000 [ 205.189037][ T6922] netlink: 'syz.0.269': attribute type 4 has an invalid length. [ 205.189060][ T6922] netlink: 17 bytes leftover after parsing attributes in process `syz.0.269'. [ 208.412042][ T6936] bridge_slave_0: default FDB implementation only supports local addresses [ 211.597085][ T6968] team0: Unable to change to the same mode the team is in [ 213.035890][ T6958] Bluetooth: hci1: command 0x0406 tx timeout [ 213.035926][ T6958] Bluetooth: hci2: command 0x0406 tx timeout [ 213.035947][ T6958] Bluetooth: hci4: command 0x0406 tx timeout [ 213.035969][ T6958] Bluetooth: hci3: command 0x0406 tx timeout [ 213.035990][ T6958] Bluetooth: hci0: command 0x0406 tx timeout [ 214.761897][ T7006] random: crng reseeded on system resumption [ 216.640559][ T7019] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 216.640584][ T7019] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 216.640594][ T7019] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 218.539590][ T7034] virtio-fs: tag not found [ 221.625236][ T7056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.059872][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 222.818837][ T5914] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 224.074670][ T5914] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 224.074699][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.211129][ T5914] usb 1-1: config 0 descriptor?? [ 224.451365][ T5914] kaweth 1-1:0.0: Firmware present in device. [ 224.644412][ T5914] kaweth 1-1:0.0: Error reading configuration (-32), no net device created [ 224.644572][ T5914] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 226.039930][ T5914] usb 1-1: USB disconnect, device number 5 [ 228.765378][ T7107] lo speed is unknown, defaulting to 1000 [ 233.148857][ T6078] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 233.280117][ T7144] tracefs: Unknown parameter 'rootcontext' [ 233.328934][ T6078] usb 1-1: Using ep0 maxpacket: 16 [ 233.334146][ T6078] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.334197][ T6078] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 233.399059][ T6078] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 233.399086][ T6078] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 233.399105][ T6078] usb 1-1: Product: syz [ 233.399118][ T6078] usb 1-1: Manufacturer: syz [ 233.817178][ T6078] usb 1-1: bad CDC descriptors [ 234.128183][ T6078] usb 1-1: USB disconnect, device number 6 [ 234.630924][ T7155] netlink: 'syz.2.354': attribute type 11 has an invalid length. [ 236.253460][ T7171] virtio-fs: tag not found [ 242.764157][ T7213] virtio-fs: tag not found [ 246.143285][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.374'. [ 248.548192][ T7257] capability: warning: `syz.3.381' uses deprecated v2 capabilities in a way that may be insecure [ 251.212596][ T7276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.388'. [ 252.742053][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 253.509719][ T7307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.856089][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.856166][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.582533][ T7359] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 259.582558][ T7359] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 259.582568][ T7359] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 270.519091][ T7459] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 273.058277][ T7480] binder: 7475:7480 ioctl c0306201 0 returned -14 [ 289.695125][ T37] audit: type=1326 audit(1759039035.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7566 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c9deec9 code=0x7fc00000 [ 289.805171][ T7573] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 289.805197][ T7573] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 289.805207][ T7573] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 290.351306][ T7588] netlink: 'syz.3.482': attribute type 11 has an invalid length. [ 291.828999][ T7588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.049974][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.062139][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.063353][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.064927][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.065762][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.469960][ T7603] lo speed is unknown, defaulting to 1000 [ 294.909064][ T7615] netlink: 44 bytes leftover after parsing attributes in process `syz.3.488'. [ 296.172012][ T5849] Bluetooth: hci5: command tx timeout [ 298.870169][ T5849] Bluetooth: hci5: command tx timeout [ 299.029947][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 299.113995][ T7632] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 299.114020][ T7632] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 299.114030][ T7632] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 300.907860][ T5849] Bluetooth: hci5: command tx timeout [ 300.988475][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 302.978858][ T5849] Bluetooth: hci5: command tx timeout [ 303.470263][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.470342][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.470488][ T7603] bridge_slave_0: entered allmulticast mode [ 303.482390][ T7603] bridge_slave_0: entered promiscuous mode [ 303.491151][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.508978][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.509242][ T7603] bridge_slave_1: entered allmulticast mode [ 303.518986][ T7603] bridge_slave_1: entered promiscuous mode [ 305.033870][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 305.151858][ T7682] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 305.151882][ T7682] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 305.151892][ T7682] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 305.193932][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.216842][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.553255][ T7603] team0: Port device team_slave_0 added [ 308.587026][ T7603] team0: Port device team_slave_1 added [ 309.063193][ T5849] Bluetooth: hci1: Unable to find connection for big 0x4a [ 310.219733][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.219749][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.219770][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.226249][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.226258][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.226270][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.257773][ T7603] hsr_slave_0: entered promiscuous mode [ 311.441920][ T7603] hsr_slave_1: entered promiscuous mode [ 311.446589][ T7603] debugfs: 'hsr0' already exists in 'hsr' [ 311.446616][ T7603] Cannot create hsr debugfs directory [ 313.722136][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 317.134011][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.134058][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.316024][ T7746] 9pnet_fd: Insufficient options for proto=fd [ 322.796232][ T7603] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.980902][ T7603] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 323.328460][ T7777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 323.347735][ T7777] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 323.358257][ T7603] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.636469][ T7782] bond1: (slave macvlan2): Releasing backup interface [ 323.782344][ T7603] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.032935][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 327.359629][ T7825] veth0_to_team: entered promiscuous mode [ 327.359661][ T7825] veth0_to_team: entered allmulticast mode [ 327.916460][ T1157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.841312][ T1157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.984316][ T7851] wg2: entered promiscuous mode [ 328.984343][ T7851] wg2: entered allmulticast mode [ 329.621904][ T7860] process 'syz.0.560' launched './file0' with NULL argv: empty string added [ 329.737683][ T1157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.341901][ T1157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.518782][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.628613][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.774092][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.774246][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.844570][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.844720][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.312959][ T1157] bond0 (unregistering): Released all slaves [ 336.460776][ T7922] wireguard: wg2: Could not create IPv4 socket [ 338.322700][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 339.759279][ T7938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.058484][ T7979] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 342.058530][ T7979] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 342.058549][ T7979] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 342.105329][ T37] audit: type=1800 audit(1759039088.210:4): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.592" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 342.631927][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.869140][ T1157] hsr_slave_0: left promiscuous mode [ 342.954217][ T1157] hsr_slave_1: left promiscuous mode [ 343.352807][ T1157] veth1_macvtap: left promiscuous mode [ 343.353056][ T1157] veth0_macvtap: left promiscuous mode [ 343.354140][ T1157] veth1_vlan: left promiscuous mode [ 343.354491][ T1157] veth0_vlan: left promiscuous mode [ 344.244052][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 347.270262][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.289659][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.291335][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.292914][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.294048][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.369001][ T5158] Bluetooth: hci0: command tx timeout [ 349.398830][ T6044] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 349.568966][ T6044] usb 4-1: Using ep0 maxpacket: 32 [ 349.577765][ T6044] usb 4-1: no configurations [ 349.577783][ T6044] usb 4-1: can't read configurations, error -22 [ 349.728888][ T6044] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 349.880672][ T6044] usb 4-1: Using ep0 maxpacket: 32 [ 349.883033][ T6044] usb 4-1: no configurations [ 349.883065][ T6044] usb 4-1: can't read configurations, error -22 [ 349.883458][ T6044] usb usb4-port1: attempt power cycle [ 350.248990][ T6044] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 350.286079][ T6044] usb 4-1: Using ep0 maxpacket: 32 [ 350.286934][ T6044] usb 4-1: no configurations [ 350.286948][ T6044] usb 4-1: can't read configurations, error -22 [ 350.438928][ T6044] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 350.476628][ T6044] usb 4-1: Using ep0 maxpacket: 32 [ 350.477488][ T6044] usb 4-1: no configurations [ 350.477504][ T6044] usb 4-1: can't read configurations, error -22 [ 350.485191][ T6044] usb usb4-port1: unable to enumerate USB device [ 351.448838][ T5158] Bluetooth: hci0: command tx timeout [ 353.528789][ T5158] Bluetooth: hci0: command tx timeout [ 353.579002][ T7997] warning: `syz.4.596' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 354.772337][ T8016] lo speed is unknown, defaulting to 1000 [ 356.418711][ T5158] Bluetooth: hci0: command tx timeout [ 357.853749][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 358.766734][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.869017][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 359.301130][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.301155][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.302664][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.302691][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.302711][ T5914] usb 4-1: SerialNumber: syz [ 359.781683][ T5914] usb 4-1: 0:2 : does not exist [ 359.781798][ T5914] usb 4-1: unit 5: unexpected type 0x09 [ 360.103515][ T5914] usb 4-1: USB disconnect, device number 12 [ 360.383799][ T8018] udevd[8018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.641499][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.641641][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.641879][ T8016] bridge_slave_0: entered allmulticast mode [ 360.657681][ T8016] bridge_slave_0: entered promiscuous mode [ 360.662785][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.662919][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.663132][ T8016] bridge_slave_1: entered allmulticast mode [ 360.666062][ T8016] bridge_slave_1: entered promiscuous mode [ 362.281328][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.297820][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.492102][ T8120] netlink: 27 bytes leftover after parsing attributes in process `syz.2.629'. [ 362.777246][ T8016] team0: Port device team_slave_0 added [ 362.791195][ T8016] team0: Port device team_slave_1 added [ 362.918889][ T5914] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 363.378947][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 363.382936][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.382962][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.383011][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.386230][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.386258][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.386277][ T5914] usb 4-1: Product: syz [ 363.386291][ T5914] usb 4-1: Manufacturer: syz [ 363.386306][ T5914] usb 4-1: SerialNumber: syz [ 363.643926][ T8127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.735440][ T5914] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 363.735489][ T5914] cdc_ncm 4-1:1.0: bind() failure [ 363.771510][ T5914] usb 4-1: USB disconnect, device number 13 [ 364.430723][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.430739][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.430761][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.957060][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.957077][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.957102][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.237928][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.367691][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 367.476938][ T8016] hsr_slave_0: entered promiscuous mode [ 367.478288][ T8016] hsr_slave_1: entered promiscuous mode [ 367.509377][ T8016] debugfs: 'hsr0' already exists in 'hsr' [ 367.509405][ T8016] Cannot create hsr debugfs directory [ 375.421682][ T1157] bridge_slave_1: left allmulticast mode [ 375.421716][ T1157] bridge_slave_1: left promiscuous mode [ 375.422404][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.549781][ T1157] bridge_slave_0: left allmulticast mode [ 375.549814][ T1157] bridge_slave_0: left promiscuous mode [ 375.552576][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.621876][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.621953][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.407521][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.515607][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.548090][ T1157] bond0 (unregistering): Released all slaves [ 383.855885][ T8265] team0: Unable to change to the same mode the team is in [ 385.928825][ T1157] hsr_slave_0: left promiscuous mode [ 385.958897][ T1157] hsr_slave_1: left promiscuous mode [ 385.959831][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.002314][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.078818][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 386.266366][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.266401][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.266445][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 386.266467][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.325247][ T9] usb 4-1: config 0 descriptor?? [ 386.341233][ T9] hub 4-1:0.0: USB hub found [ 386.548211][ T9] hub 4-1:0.0: 1 port detected [ 387.408792][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 387.408820][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 387.460604][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 387.460718][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 387.520066][ T9] usb 4-1: USB disconnect, device number 14 [ 390.019725][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 390.321606][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 392.194247][ T8362] ======================================================= [ 392.194247][ T8362] WARNING: The mand mount option has been deprecated and [ 392.194247][ T8362] and is ignored by this kernel. Remove the mand [ 392.194247][ T8362] option from the mount to silence this warning. [ 392.194247][ T8362] ======================================================= [ 392.269809][ T8362] 9pnet_fd: p9_fd_create_tcp (8362): problem connecting socket to 127.0.0.1 [ 392.690180][ T8362] syz.2.692 (8362) used greatest stack depth: 18488 bytes left [ 398.210467][ T8350] team0: Unable to change to the same mode the team is in [ 401.722366][ T8016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 401.795045][ T8016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.123628][ T8016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 403.119627][ T8016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 403.755241][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.852018][ T8456] lo speed is unknown, defaulting to 1000 [ 403.919551][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.075137][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.075290][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.131507][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.131656][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.778662][ T8494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 408.252344][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.438193][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.443979][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.446903][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.447653][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 410.254869][ T8515] lo speed is unknown, defaulting to 1000 [ 410.588847][ T5849] Bluetooth: hci5: command tx timeout [ 411.008747][ T6005] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 411.163223][ T6005] usb 4-1: Using ep0 maxpacket: 32 [ 411.168102][ T6005] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 411.213949][ T6005] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 411.213979][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.213998][ T6005] usb 4-1: Product: syz [ 411.214011][ T6005] usb 4-1: Manufacturer: syz [ 411.214025][ T6005] usb 4-1: SerialNumber: syz [ 411.290177][ T6005] usb 4-1: config 0 descriptor?? [ 411.291183][ T8529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.325919][ T6005] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.590444][ T6044] usb 4-1: USB disconnect, device number 15 [ 411.792272][ T8537] udevd[8537]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.648902][ T5849] Bluetooth: hci5: command tx timeout [ 414.728738][ T5849] Bluetooth: hci5: command tx timeout [ 416.336490][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 416.808925][ T5849] Bluetooth: hci5: command tx timeout [ 417.312947][ T1495] bridge_slave_1: left allmulticast mode [ 417.312980][ T1495] bridge_slave_1: left promiscuous mode [ 417.313253][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.411785][ T1495] bridge_slave_0: left allmulticast mode [ 417.411818][ T1495] bridge_slave_0: left promiscuous mode [ 417.412902][ T1495] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.729463][ T1495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.819523][ T1495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.895690][ T1495] bond0 (unregistering): Released all slaves [ 426.952889][ T8672] lo speed is unknown, defaulting to 1000 [ 428.233277][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.233418][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.233639][ T8515] bridge_slave_0: entered allmulticast mode [ 428.237557][ T8515] bridge_slave_0: entered promiscuous mode [ 428.459059][ T1495] hsr_slave_0: left promiscuous mode [ 428.528871][ T1495] hsr_slave_1: left promiscuous mode [ 428.529787][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.552188][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.685727][ T8702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.775'. [ 431.689949][ T1495] team0 (unregistering): Port device team_slave_1 removed [ 432.241440][ T1495] team0 (unregistering): Port device team_slave_0 removed [ 433.958912][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 434.033243][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 434.454107][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.454300][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.454524][ T8515] bridge_slave_1: entered allmulticast mode [ 434.488022][ T8515] bridge_slave_1: entered promiscuous mode [ 435.178453][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 436.113609][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.286079][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.445802][ T8515] team0: Port device team_slave_0 added [ 439.480221][ T8515] team0: Port device team_slave_1 added [ 440.014744][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.014818][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.121681][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 440.867485][ T8779] Invalid option length (158) for dns_resolver key [ 440.973718][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 440.973741][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 441.040521][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.040536][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.040558][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.042875][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.042887][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.042910][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.618080][ T8515] hsr_slave_0: entered promiscuous mode [ 441.625317][ T8515] hsr_slave_1: entered promiscuous mode [ 441.636735][ T8515] debugfs: 'hsr0' already exists in 'hsr' [ 441.636763][ T8515] Cannot create hsr debugfs directory [ 444.678907][ T5849] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 445.110930][ T8830] fuse: Bad value for 'fd' [ 448.282461][ T8854] team0: Mode changed to "loadbalance" [ 449.391941][ T8871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.196981][ T8895] virtio-fs: tag not found [ 451.058970][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.830'. [ 452.670327][ T8921] team0: Unable to change to the same mode the team is in [ 453.010713][ T8515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.071913][ T8515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 453.329529][ T8515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.398063][ T8936] virtio-fs: tag not found [ 454.208879][ T8515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.241071][ T8940] fuse: Bad value for 'fd' [ 455.013107][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.066412][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.108337][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.108551][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.297669][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.297790][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.624581][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.979887][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.849313][ T8994] virtio-fs: tag not found [ 462.624449][ T9036] 9pnet_fd: Insufficient options for proto=fd [ 462.985242][ T9046] virtio-fs: tag not found [ 464.027648][ T8515] veth0_vlan: entered promiscuous mode [ 464.321027][ T8515] veth1_vlan: entered promiscuous mode [ 465.459667][ T8515] veth0_macvtap: entered promiscuous mode [ 465.473305][ T8515] veth1_macvtap: entered promiscuous mode [ 465.546502][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.576725][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.601597][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.621111][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.625425][ T169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.625663][ T169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.777185][ T37] audit: type=1326 audit(1759039213.927:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.3.874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc26e5eec9 code=0x0 [ 467.444143][ T9091] virtio-fs: tag not found [ 471.074035][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.076642][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.077738][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.094039][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.098414][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.559426][ T9150] No source specified [ 473.346964][ T5849] Bluetooth: hci0: command tx timeout [ 474.889284][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 475.371272][ T5849] Bluetooth: hci0: command tx timeout [ 476.026898][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 476.044138][ T9131] lo speed is unknown, defaulting to 1000 [ 477.651147][ T5849] Bluetooth: hci0: command tx timeout [ 478.426298][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.707817][ T5849] Bluetooth: hci0: command tx timeout [ 480.696575][ T5849] Bluetooth: hci3: Malformed LE Event: 0x0d [ 480.930265][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.329950][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.475355][ T9131] chnl_net:caif_netlink_parms(): no params data found [ 483.287254][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.042637][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 487.863185][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.863326][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.863576][ T9131] bridge_slave_0: entered allmulticast mode [ 487.893620][ T9131] bridge_slave_0: entered promiscuous mode [ 488.123251][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.123392][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.123915][ T9131] bridge_slave_1: entered allmulticast mode [ 488.153549][ T9131] bridge_slave_1: entered promiscuous mode [ 491.555859][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.616439][ T9343] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 491.805019][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.608930][ T57] bridge_slave_1: left allmulticast mode [ 492.608963][ T57] bridge_slave_1: left promiscuous mode [ 492.609274][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.192889][ T57] bridge_slave_0: left allmulticast mode [ 493.192921][ T57] bridge_slave_0: left promiscuous mode [ 493.193205][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.463086][ T9360] 9pnet_fd: Insufficient options for proto=fd [ 500.463119][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.539467][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.626834][ T57] bond0 (unregistering): Released all slaves [ 501.120070][ T9348] team0: Unable to change to the same mode the team is in [ 501.154389][ T9131] team0: Port device team_slave_0 added [ 501.455120][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455166][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.465898][ T9425] cgroup: Unknown subsys name 'cpuset' [ 501.469835][ T9425] fuse: Bad value for 'fd' [ 501.577818][ T9131] team0: Port device team_slave_1 added [ 502.050070][ T5158] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 502.491656][ T5158] Bluetooth: hci1: command 0x0406 tx timeout [ 502.973172][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.973183][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.973196][ T9131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.097193][ T57] hsr_slave_0: left promiscuous mode [ 505.117841][ T57] hsr_slave_1: left promiscuous mode [ 505.118814][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.119006][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.149832][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.149853][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.301483][ T57] veth1_macvtap: left promiscuous mode [ 505.301606][ T57] veth0_macvtap: left promiscuous mode [ 505.301898][ T57] veth1_vlan: left promiscuous mode [ 505.303848][ T57] veth0_vlan: left promiscuous mode [ 507.362078][ T5158] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 511.302925][ T57] team0 (unregistering): Port device team_slave_1 removed [ 511.729486][ T57] team0 (unregistering): Port device team_slave_0 removed [ 514.180126][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.180142][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.180166][ T9131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.228645][ T9449] bond1: option mode: unable to set because the bond device is up [ 514.439072][ T9460] bridge_slave_1: default FDB implementation only supports local addresses [ 515.981651][ T9500] cgroup: Unknown subsys name 'cpuset' [ 516.282416][ T9499] lo speed is unknown, defaulting to 1000 [ 516.386310][ T9131] hsr_slave_0: entered promiscuous mode [ 516.387589][ T9131] hsr_slave_1: entered promiscuous mode [ 516.401868][ T9131] debugfs: 'hsr0' already exists in 'hsr' [ 516.401896][ T9131] Cannot create hsr debugfs directory [ 519.530563][ T9513] Bluetooth: hci1: command 0x0406 tx timeout [ 520.801358][ T9536] lo speed is unknown, defaulting to 1000 [ 531.112191][ T9609] ecryptfs: Unknown parameter '³(' [ 534.314385][ T9625] lo speed is unknown, defaulting to 1000 [ 534.581605][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.585758][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.587640][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.600541][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.601268][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.979846][ T9628] lo speed is unknown, defaulting to 1000 [ 536.475146][ T9647] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 536.776348][ T5849] Bluetooth: hci5: command tx timeout [ 538.808773][ T9513] Bluetooth: hci5: command tx timeout [ 540.456265][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 541.560745][ T5849] Bluetooth: hci5: command tx timeout [ 542.152928][ T9691] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 542.167120][ T9691] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 542.167531][ T1128] bridge_slave_1: left allmulticast mode [ 542.167550][ T1128] bridge_slave_1: left promiscuous mode [ 542.167719][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.242230][ T1128] bridge_slave_0: left allmulticast mode [ 542.242253][ T1128] bridge_slave_0: left promiscuous mode [ 542.242441][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.633877][ T5849] Bluetooth: hci5: command tx timeout [ 544.048945][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.217772][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.353257][ T1128] bond0 (unregistering): Released all slaves [ 547.569567][ T1128] hsr_slave_0: left promiscuous mode [ 547.628859][ T1128] hsr_slave_1: left promiscuous mode [ 547.630933][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.669775][ T5849] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 547.679822][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.097881][ T9739] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1057'. [ 549.723015][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 550.921224][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 552.555121][ T9739] syz_tun: entered promiscuous mode [ 554.355042][ T9780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.373499][ T9784] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 554.377479][ T9784] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 554.402328][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.402462][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.402678][ T9628] bridge_slave_0: entered allmulticast mode [ 554.412708][ T9628] bridge_slave_0: entered promiscuous mode [ 554.520027][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.520214][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.520411][ T9628] bridge_slave_1: entered allmulticast mode [ 554.528053][ T9628] bridge_slave_1: entered promiscuous mode [ 557.112558][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.192705][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.075983][ T9628] team0: Port device team_slave_0 added [ 558.171712][ T9822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 558.190954][ T9628] team0: Port device team_slave_1 added [ 559.271550][ T9822] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 561.099640][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.099665][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.099689][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.168444][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.168462][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.168485][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.565484][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 562.424639][ T9628] hsr_slave_0: entered promiscuous mode [ 562.427570][ T9628] hsr_slave_1: entered promiscuous mode [ 562.440239][ T9628] debugfs: 'hsr0' already exists in 'hsr' [ 562.440265][ T9628] Cannot create hsr debugfs directory [ 562.897489][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.897637][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.738618][ T9628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.844160][ T9628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.988821][ T9628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 566.090198][ T9628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 566.525522][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.593808][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.711407][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.711669][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.714349][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.714509][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.661287][ T37] audit: type=1326 audit(1759039570.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.1102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1994cfeec9 code=0x0 [ 568.777975][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.508965][ T9920] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 570.513695][ T9920] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 570.808165][ T9628] veth0_vlan: entered promiscuous mode [ 570.846550][ T9628] veth1_vlan: entered promiscuous mode [ 571.071103][ T9628] veth0_macvtap: entered promiscuous mode [ 571.092311][ T9628] veth1_macvtap: entered promiscuous mode [ 571.138299][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.154388][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.200197][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.212411][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.235543][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.256032][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.797487][ T1848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.797508][ T1848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.925832][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.925851][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.581000][ T9940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.283643][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 585.333317][T10005] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1130'. [ 585.333575][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1130'. [ 586.926943][T10011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.388006][T10106] cgroup: Unknown subsys name 'cpuset' [ 594.603271][ T5849] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 596.709360][T10113] bond1: option mode: unable to set because the bond device has slaves [ 596.738373][T10113] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 598.289010][T10119] lo speed is unknown, defaulting to 1000 [ 598.977601][T10137] Invalid option length (64439) for dns_resolver key [ 600.906178][T10146] team0: Unable to change to the same mode the team is in [ 616.329349][T10233] wg2: left promiscuous mode [ 616.329381][T10233] wg2: left allmulticast mode [ 616.427165][T10234] wg2: entered promiscuous mode [ 616.427193][T10234] wg2: entered allmulticast mode [ 616.899005][T10248] bond1: (slave macvlan3): Releasing backup interface [ 616.978961][ T9513] Bluetooth: hci5: Invalid handle: 0xe300 > 0x0eff [ 622.225504][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 622.248764][T10293] wg2: entered promiscuous mode [ 622.248792][T10293] wg2: entered allmulticast mode [ 622.264843][T10295] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 622.265741][T10295] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 622.265769][T10295] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 622.557973][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 624.339754][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.339839][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.504570][T10328] Invalid option length (64439) for dns_resolver key [ 627.952367][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 630.656586][T10378] lo speed is unknown, defaulting to 1000 [ 630.706659][T10377] lo speed is unknown, defaulting to 1000 [ 631.188958][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 638.054293][T10445] wg2: entered promiscuous mode [ 638.054326][T10445] wg2: entered allmulticast mode [ 641.667813][T10501] lo speed is unknown, defaulting to 1000 [ 642.014505][T10510] lo speed is unknown, defaulting to 1000 [ 644.475777][T10561] Invalid option length (64439) for dns_resolver key [ 646.742153][T10597] lo speed is unknown, defaulting to 1000 [ 646.765661][T10595] lo speed is unknown, defaulting to 1000 [ 650.404947][T10618] wg2: left promiscuous mode [ 650.404979][T10618] wg2: left allmulticast mode [ 650.559101][T10622] wg2: entered promiscuous mode [ 650.559130][T10622] wg2: entered allmulticast mode [ 653.137079][T10663] Invalid option length (64439) for dns_resolver key [ 656.285970][T10679] lo speed is unknown, defaulting to 1000 [ 656.830539][T10693] bond1: option mode: unable to set because the bond device has slaves [ 656.905103][T10693] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 656.931858][T10695] ------------[ cut here ]------------ [ 656.931872][T10695] DEBUG_LOCKS_WARN_ON(this_cpu_read(softirq_ctrl.cnt)) [ 656.931947][T10695] WARNING: CPU: 0 PID: 10695 at kernel/softirq.c:172 __local_bh_disable_ip+0x342/0x400 [ 656.931996][T10695] Modules linked in: [ 656.932031][T10695] CPU: 0 UID: 0 PID: 10695 Comm: syz.5.1363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 656.932053][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.932072][T10695] RIP: 0010:__local_bh_disable_ip+0x342/0x400 [ 656.932097][T10695] Code: 0f b6 04 28 84 c0 0f 85 b5 00 00 00 83 3d 89 95 98 0d 00 75 19 90 48 c7 c7 40 b4 09 8b 48 c7 c6 80 b4 09 8b e8 3f 61 fe ff 90 <0f> 0b 90 90 90 e9 fc fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 656.932113][T10695] RSP: 0018:ffffc9000621f980 EFLAGS: 00010246 [ 656.932129][T10695] RAX: 566a39ea5e0ced00 RBX: 1ffff92000c43f34 RCX: 0000000000080000 [ 656.932144][T10695] RDX: ffffc9001176e000 RSI: 0000000000000260 RDI: 0000000000000261 [ 656.932157][T10695] RBP: ffffc9000621fa80 R08: 0000000000000000 R09: 0000000000000000 [ 656.932170][T10695] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff110043f28d1 [ 656.932185][T10695] R13: dffffc0000000000 R14: ffffffff8184db31 R15: ffff888021f9468c [ 656.932200][T10695] FS: 00007fbd6483e6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 656.932225][T10695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.932238][T10695] CR2: 000000110c362934 CR3: 000000006850e000 CR4: 00000000003526f0 [ 656.932256][T10695] Call Trace: [ 656.932263][T10695] [ 656.932272][T10695] ? sock_hash_delete_elem+0xb9/0x320 [ 656.932294][T10695] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 656.932319][T10695] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 656.932340][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.932369][T10695] ? sock_hash_bucket_hash+0x3d1/0x750 [ 656.932389][T10695] ? sock_hash_delete_elem+0xb9/0x320 [ 656.932408][T10695] sock_hash_delete_elem+0xc6/0x320 [ 656.932428][T10695] bpf_prog_2c29ac5cdc6b1842+0x43/0x4b [ 656.932451][T10695] bpf_flow_dissect+0x34c/0x400 [ 656.932470][T10695] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 656.932504][T10695] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 656.932533][T10695] ? __fget_files+0x2a/0x420 [ 656.932563][T10695] ? __fget_files+0x2a/0x420 [ 656.932589][T10695] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 656.932616][T10695] bpf_prog_test_run+0x2cd/0x340 [ 656.932642][T10695] __sys_bpf+0x581/0x870 [ 656.932664][T10695] ? __pfx___sys_bpf+0x10/0x10 [ 656.932694][T10695] ? rcu_is_watching+0x15/0xb0 [ 656.932724][T10695] __x64_sys_bpf+0x7c/0x90 [ 656.932744][T10695] do_syscall_64+0xfa/0x3b0 [ 656.932762][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.932789][T10695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.932808][T10695] ? clear_bhb_loop+0x60/0xb0 [ 656.932828][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.932846][T10695] RIP: 0033:0x7fbd665deec9 [ 656.932862][T10695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.932877][T10695] RSP: 002b:00007fbd6483e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.932896][T10695] RAX: ffffffffffffffda RBX: 00007fbd66835fa0 RCX: 00007fbd665deec9 [ 656.932911][T10695] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 656.932923][T10695] RBP: 00007fbd66661f91 R08: 0000000000000000 R09: 0000000000000000 [ 656.932935][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.932948][T10695] R13: 00007fbd66836038 R14: 00007fbd66835fa0 R15: 00007fff0fd9b948 [ 656.932969][T10695] [ 656.932980][T10695] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 656.932994][T10695] CPU: 0 UID: 0 PID: 10695 Comm: syz.5.1363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 656.933016][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.933027][T10695] Call Trace: [ 656.933035][T10695] [ 656.933042][T10695] dump_stack_lvl+0x99/0x250 [ 656.933070][T10695] ? __asan_memcpy+0x40/0x70 [ 656.933089][T10695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.933117][T10695] ? __pfx__printk+0x10/0x10 [ 656.933142][T10695] vpanic+0x281/0x750 [ 656.933168][T10695] ? __pfx__printk+0x10/0x10 [ 656.933187][T10695] ? __pfx_vpanic+0x10/0x10 [ 656.933321][T10695] ? is_bpf_text_address+0x26/0x2b0 [ 656.933354][T10695] panic+0xb9/0xc0 [ 656.933380][T10695] ? __pfx_panic+0x10/0x10 [ 656.933413][T10695] __warn+0x31b/0x4b0 [ 656.933440][T10695] ? __local_bh_disable_ip+0x342/0x400 [ 656.933466][T10695] ? __local_bh_disable_ip+0x342/0x400 [ 656.933512][T10695] report_bug+0x2be/0x4f0 [ 656.933540][T10695] ? __local_bh_disable_ip+0x342/0x400 [ 656.933565][T10695] ? __local_bh_disable_ip+0x342/0x400 [ 656.933588][T10695] ? __local_bh_disable_ip+0x344/0x400 [ 656.933611][T10695] handle_bug+0x84/0x160 [ 656.933632][T10695] exc_invalid_op+0x1a/0x50 [ 656.933652][T10695] asm_exc_invalid_op+0x1a/0x20 [ 656.933670][T10695] RIP: 0010:__local_bh_disable_ip+0x342/0x400 [ 656.933696][T10695] Code: 0f b6 04 28 84 c0 0f 85 b5 00 00 00 83 3d 89 95 98 0d 00 75 19 90 48 c7 c7 40 b4 09 8b 48 c7 c6 80 b4 09 8b e8 3f 61 fe ff 90 <0f> 0b 90 90 90 e9 fc fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 656.933712][T10695] RSP: 0018:ffffc9000621f980 EFLAGS: 00010246 [ 656.933730][T10695] RAX: 566a39ea5e0ced00 RBX: 1ffff92000c43f34 RCX: 0000000000080000 [ 656.933745][T10695] RDX: ffffc9001176e000 RSI: 0000000000000260 RDI: 0000000000000261 [ 656.933759][T10695] RBP: ffffc9000621fa80 R08: 0000000000000000 R09: 0000000000000000 [ 656.933773][T10695] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff110043f28d1 [ 656.933787][T10695] R13: dffffc0000000000 R14: ffffffff8184db31 R15: ffff888021f9468c [ 656.933803][T10695] ? __local_bh_disable_ip+0xa1/0x400 [ 656.933833][T10695] ? sock_hash_delete_elem+0xb9/0x320 [ 656.933852][T10695] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 656.933877][T10695] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 656.933899][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.933929][T10695] ? sock_hash_bucket_hash+0x3d1/0x750 [ 656.933949][T10695] ? sock_hash_delete_elem+0xb9/0x320 [ 656.933967][T10695] sock_hash_delete_elem+0xc6/0x320 [ 656.933988][T10695] bpf_prog_2c29ac5cdc6b1842+0x43/0x4b [ 656.934006][T10695] bpf_flow_dissect+0x34c/0x400 [ 656.934027][T10695] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 656.934062][T10695] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 656.934092][T10695] ? __fget_files+0x2a/0x420 [ 656.934121][T10695] ? __fget_files+0x2a/0x420 [ 656.934148][T10695] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 656.934175][T10695] bpf_prog_test_run+0x2cd/0x340 [ 656.934201][T10695] __sys_bpf+0x581/0x870 [ 656.934224][T10695] ? __pfx___sys_bpf+0x10/0x10 [ 656.934252][T10695] ? rcu_is_watching+0x15/0xb0 [ 656.934283][T10695] __x64_sys_bpf+0x7c/0x90 [ 656.934303][T10695] do_syscall_64+0xfa/0x3b0 [ 656.934320][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.934348][T10695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.934366][T10695] ? clear_bhb_loop+0x60/0xb0 [ 656.934387][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.934406][T10695] RIP: 0033:0x7fbd665deec9 [ 656.934422][T10695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.934438][T10695] RSP: 002b:00007fbd6483e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.934458][T10695] RAX: ffffffffffffffda RBX: 00007fbd66835fa0 RCX: 00007fbd665deec9 [ 656.934473][T10695] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 656.934494][T10695] RBP: 00007fbd66661f91 R08: 0000000000000000 R09: 0000000000000000 [ 656.934506][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.934518][T10695] R13: 00007fbd66836038 R14: 00007fbd66835fa0 R15: 00007fff0fd9b948 [ 656.934540][T10695] [ 656.934801][T10695] Kernel Offset: disabled