last executing test programs: 52.691827496s ago: executing program 3 (id=322): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x34000}], 0x1}, 0x80) 52.403291822s ago: executing program 3 (id=325): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="88a49647", 0x4}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 51.097770009s ago: executing program 3 (id=331): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x17, 0x3, 0x8}]}}}], 0x18}, 0x0) 50.732595637s ago: executing program 3 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 50.41694366s ago: executing program 3 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.481781927s ago: executing program 3 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x377}], 0x1, 0x0, 0x6b}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 34.44977096s ago: executing program 32 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x377}], 0x1, 0x0, 0x6b}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 6.057512019s ago: executing program 4 (id=469): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x5}, 0x50) 5.889842061s ago: executing program 2 (id=470): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x2, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000780)="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", 0x881}], 0x1) 5.889537317s ago: executing program 4 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) 5.640193132s ago: executing program 2 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101420, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.182023666s ago: executing program 2 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x46050) 4.046705475s ago: executing program 4 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.885785378s ago: executing program 5 (id=360): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 3.802809211s ago: executing program 2 (id=481): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e804db9321ed9a0d3b0d49aa2") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 3.645850217s ago: executing program 4 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) fremovexattr(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$getregs(0xc, r3, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x6, 0x0, 0x7ff, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="9b15010000000000"], 0x38}, 0x1, 0x400000000000000}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3.6037775s ago: executing program 0 (id=483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063", 0x3c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.746118255s ago: executing program 1 (id=484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="3a3db963", 0x4, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xb, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001080)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/58, 0x3a}, &(0x7f0000000100)=0x40) 2.722964183s ago: executing program 2 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x0, 0x0, 0xffff, 0x101}, {0x0, 0x0, 0x0, 0x8, 0xa, 0x3}, 0xffffffff, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb3b74bdedfd15113}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x80}}, 0x4000080) 2.530927345s ago: executing program 0 (id=486): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) read$alg(r0, &(0x7f0000000380)=""/75, 0x4b) 2.530743566s ago: executing program 1 (id=487): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f0000000ec0)=""/4072, 0xfe8}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000180)=""/43, 0x2b}, {0x0}], 0x6}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2.530660917s ago: executing program 5 (id=488): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) listen(r0, 0x9) 2.09029156s ago: executing program 2 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) 2.088971485s ago: executing program 1 (id=490): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 1.970060914s ago: executing program 0 (id=491): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) 1.654260943s ago: executing program 0 (id=492): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfdeb}, 0x80) 1.587241539s ago: executing program 0 (id=493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "38b1acb1812aceed", "c36be3349b38a19268a4f736bb6e00", "25228821", "e5c8a6a300"}, 0x38) close(0x3) 1.401952419s ago: executing program 0 (id=494): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x179c, 0x0) 1.289708325s ago: executing program 5 (id=495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 1.17969265s ago: executing program 1 (id=496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063", 0x3c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.162088978s ago: executing program 4 (id=497): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 518.637417ms ago: executing program 1 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4072, 0xfe8}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/113, 0x71}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 258.576982ms ago: executing program 5 (id=499): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x38, r1, 0x615, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0xc040) 113.914949ms ago: executing program 4 (id=500): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 113.580129ms ago: executing program 5 (id=501): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 0s ago: executing program 1 (id=502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 35.118777][ T6518] cgroup: Unknown subsys name 'net' [ 35.243633][ T6518] cgroup: Unknown subsys name 'cpuset' [ 35.247389][ T6518] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.444025][ T6518] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.963679][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.964732][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.965299][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.966345][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.966713][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.967352][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.967796][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.968274][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.968532][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.969393][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.971317][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.987568][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.989864][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.998705][ T6534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.002480][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.004751][ T6534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.007395][ T6534] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.009613][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.015832][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.023609][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.042935][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.043665][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.044005][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.044658][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.045070][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.288932][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 37.359891][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 37.408749][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 37.462799][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.462945][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.463105][ T6529] bridge_slave_0: entered allmulticast mode [ 37.464025][ T6529] bridge_slave_0: entered promiscuous mode [ 37.465536][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.465584][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.466025][ T6533] bridge_slave_0: entered allmulticast mode [ 37.466874][ T6533] bridge_slave_0: entered promiscuous mode [ 37.469421][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.469474][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.469602][ T6533] bridge_slave_1: entered allmulticast mode [ 37.470417][ T6533] bridge_slave_1: entered promiscuous mode [ 37.503632][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.503725][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.503847][ T6529] bridge_slave_1: entered allmulticast mode [ 37.504699][ T6529] bridge_slave_1: entered promiscuous mode [ 37.537522][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.562839][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.567714][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.579170][ T6541] chnl_net:caif_netlink_parms(): no params data found [ 37.586270][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.618734][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 37.644038][ T6533] team0: Port device team_slave_0 added [ 37.644433][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.644507][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.644608][ T6528] bridge_slave_0: entered allmulticast mode [ 37.645466][ T6528] bridge_slave_0: entered promiscuous mode [ 37.647344][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.647437][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.647571][ T6528] bridge_slave_1: entered allmulticast mode [ 37.648446][ T6528] bridge_slave_1: entered promiscuous mode [ 37.666476][ T6529] team0: Port device team_slave_0 added [ 37.668084][ T6529] team0: Port device team_slave_1 added [ 37.675763][ T6533] team0: Port device team_slave_1 added [ 37.703432][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.703506][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.703542][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.741776][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.741838][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.741873][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.755856][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.757316][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.757356][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.758483][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.758508][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.758538][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.786357][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.788236][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.816183][ T6529] hsr_slave_0: entered promiscuous mode [ 37.816828][ T6529] hsr_slave_1: entered promiscuous mode [ 37.826594][ T6533] hsr_slave_0: entered promiscuous mode [ 37.827116][ T6533] hsr_slave_1: entered promiscuous mode [ 37.827451][ T6533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.827537][ T6533] Cannot create hsr debugfs directory [ 37.867527][ T6528] team0: Port device team_slave_0 added [ 37.897358][ T6528] team0: Port device team_slave_1 added [ 37.906041][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.908223][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.910810][ T6538] bridge_slave_0: entered allmulticast mode [ 37.913444][ T6538] bridge_slave_0: entered promiscuous mode [ 37.915156][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.915202][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.915311][ T6538] bridge_slave_1: entered allmulticast mode [ 37.916139][ T6538] bridge_slave_1: entered promiscuous mode [ 37.948568][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.951006][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.953221][ T6541] bridge_slave_0: entered allmulticast mode [ 37.955851][ T6541] bridge_slave_0: entered promiscuous mode [ 37.987098][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.987168][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.987210][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.988492][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.988520][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.988553][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.993365][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.993425][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.993532][ T6541] bridge_slave_1: entered allmulticast mode [ 37.994375][ T6541] bridge_slave_1: entered promiscuous mode [ 38.018993][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.021590][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.052041][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.057681][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.066483][ T6538] team0: Port device team_slave_0 added [ 38.109500][ T6538] team0: Port device team_slave_1 added [ 38.139225][ T6541] team0: Port device team_slave_0 added [ 38.142520][ T6541] team0: Port device team_slave_1 added [ 38.152468][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.152525][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.152571][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.153649][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.153674][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.153707][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.170026][ T6528] hsr_slave_0: entered promiscuous mode [ 38.170591][ T6528] hsr_slave_1: entered promiscuous mode [ 38.174213][ T6528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.174246][ T6528] Cannot create hsr debugfs directory [ 38.227923][ T6538] hsr_slave_0: entered promiscuous mode [ 38.230226][ T6538] hsr_slave_1: entered promiscuous mode [ 38.232483][ T6538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.234917][ T6538] Cannot create hsr debugfs directory [ 38.248907][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.248971][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.249040][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.250269][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.250295][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.250330][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.385397][ T6541] hsr_slave_0: entered promiscuous mode [ 38.387874][ T6541] hsr_slave_1: entered promiscuous mode [ 38.390070][ T6541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.391105][ T6541] Cannot create hsr debugfs directory [ 38.439713][ T6529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.461185][ T6529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.486163][ T6529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.503999][ T6529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.550593][ T6533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.559888][ T6533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.565190][ T6533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.569161][ T6533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.618133][ T6538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.622410][ T6538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.626728][ T6538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.655458][ T6538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.695205][ T6528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.705695][ T6528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.716187][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.723680][ T6528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.736324][ T6528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.772763][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.777765][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.807025][ T6541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.818389][ T6541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.823448][ T6541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.827134][ T6541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.833967][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.834103][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.843043][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.855774][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.863457][ T600] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.863537][ T600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.867843][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.867921][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.878449][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.878719][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.911905][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.957578][ T600] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.957662][ T600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.958593][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.958664][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.041592][ T6532] Bluetooth: hci3: command tx timeout [ 39.041593][ T52] Bluetooth: hci0: command tx timeout [ 39.041738][ T6532] Bluetooth: hci2: command tx timeout [ 39.041818][ T6532] Bluetooth: hci1: command tx timeout [ 39.066712][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.085660][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.109716][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.109796][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.112556][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.112605][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.125307][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.131094][ T6534] Bluetooth: hci4: command tx timeout [ 39.144103][ T6528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.147135][ T6528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.158393][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.187123][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.187234][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.195052][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.195125][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.215112][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.283927][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.329212][ T6529] veth0_vlan: entered promiscuous mode [ 39.335413][ T6529] veth1_vlan: entered promiscuous mode [ 39.350379][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.399082][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.408124][ T6533] veth0_vlan: entered promiscuous mode [ 39.414702][ T6533] veth1_vlan: entered promiscuous mode [ 39.436470][ T6529] veth0_macvtap: entered promiscuous mode [ 39.459969][ T6529] veth1_macvtap: entered promiscuous mode [ 39.483887][ T6533] veth0_macvtap: entered promiscuous mode [ 39.494355][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.518609][ T6533] veth1_macvtap: entered promiscuous mode [ 39.528330][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.529934][ T6529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.529999][ T6529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.530047][ T6529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.530076][ T6529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546733][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.554416][ T6541] veth0_vlan: entered promiscuous mode [ 39.558413][ T6541] veth1_vlan: entered promiscuous mode [ 39.572692][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.608508][ T6541] veth0_macvtap: entered promiscuous mode [ 39.612756][ T6541] veth1_macvtap: entered promiscuous mode [ 39.614892][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.616737][ T6533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.616778][ T6533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.616807][ T6533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.616836][ T6533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.633027][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.678486][ T6538] veth0_vlan: entered promiscuous mode [ 39.702494][ T6528] veth0_vlan: entered promiscuous mode [ 39.705179][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.725417][ T6538] veth1_vlan: entered promiscuous mode [ 39.728106][ T6541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.728932][ T6541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.728965][ T6541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.729013][ T6541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.740048][ T6528] veth1_vlan: entered promiscuous mode [ 39.744713][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.748988][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.775799][ T6528] veth0_macvtap: entered promiscuous mode [ 39.813319][ T6528] veth1_macvtap: entered promiscuous mode [ 39.829194][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.829254][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.842375][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.845486][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.868661][ T6538] veth0_macvtap: entered promiscuous mode [ 39.873413][ T6538] veth1_macvtap: entered promiscuous mode [ 39.877651][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.877709][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.897208][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.897274][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.908784][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.920215][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.932834][ T6529] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.965402][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.967073][ T6528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967115][ T6528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967156][ T6528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967187][ T6528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.004944][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.006592][ T6538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.006634][ T6538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.006663][ T6538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.006691][ T6538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.087677][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.087744][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.185899][ T6652] block device autoloading is deprecated and will be removed. [ 40.239286][ T6654] loop1: detected capacity change from 0 to 512 [ 40.264548][ T6654] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.267528][ T6654] EXT4-fs (loop1): blocks per group (42) and clusters per group (32768) inconsistent [ 40.301059][ T709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.301116][ T709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.441048][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.441441][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.450063][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.450124][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.150769][ T6534] Bluetooth: hci1: command tx timeout [ 41.150845][ T6534] Bluetooth: hci2: command tx timeout [ 41.150907][ T6534] Bluetooth: hci3: command tx timeout [ 41.150948][ T6534] Bluetooth: hci0: command tx timeout [ 41.202048][ T52] Bluetooth: hci4: command tx timeout [ 41.221672][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.221730][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.346628][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.346688][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.593421][ T6663] loop0: detected capacity change from 0 to 8192 [ 41.867166][ T6668] syz.2.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.729543][ T31] audit: type=1326 audit(42.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.796778][ T31] audit: type=1326 audit(42.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.796855][ T31] audit: type=1326 audit(42.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.796909][ T31] audit: type=1326 audit(42.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.796953][ T31] audit: type=1326 audit(42.780:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.796996][ T31] audit: type=1326 audit(42.780:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.884125][ T31] audit: type=1326 audit(42.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.884213][ T31] audit: type=1326 audit(42.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.884281][ T31] audit: type=1326 audit(42.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.884326][ T31] audit: type=1326 audit(42.870:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 42.935291][ T6678] netlink: 1000 bytes leftover after parsing attributes in process `syz.3.14'. [ 42.995448][ T6680] netlink: 'syz.4.15': attribute type 32 has an invalid length. [ 43.230754][ T52] Bluetooth: hci0: command tx timeout [ 43.230851][ T52] Bluetooth: hci3: command tx timeout [ 43.230905][ T52] Bluetooth: hci2: command tx timeout [ 43.230945][ T52] Bluetooth: hci1: command tx timeout [ 43.288442][ T52] Bluetooth: hci4: command tx timeout [ 43.983138][ T6694] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 43.983267][ T6694] FAT-fs (loop0): Filesystem has been set read-only [ 44.565524][ T6697] input: syz0 as /devices/virtual/input/input2 [ 45.350730][ T6534] Bluetooth: hci1: command tx timeout [ 45.350810][ T6534] Bluetooth: hci2: command tx timeout [ 45.350852][ T6534] Bluetooth: hci3: command tx timeout [ 45.350893][ T6534] Bluetooth: hci0: command tx timeout [ 45.370857][ T52] Bluetooth: hci4: command tx timeout [ 46.787785][ T6730] loop4: detected capacity change from 0 to 256 [ 46.807079][ T6730] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 48.794702][ T6759] loop4: detected capacity change from 0 to 256 [ 48.797371][ T6759] ======================================================= [ 48.797371][ T6759] WARNING: The mand mount option has been deprecated and [ 48.797371][ T6759] and is ignored by this kernel. Remove the mand [ 48.797371][ T6759] option from the mount to silence this warning. [ 48.797371][ T6759] ======================================================= [ 48.807939][ T6759] vfat: Unknown parameter 'chehk' [ 49.456956][ T6772] tipc: Enabling of bearer rejected, failed to enable media [ 51.533026][ T6776] loop2: detected capacity change from 0 to 512 [ 51.848115][ T6776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.692262][ T6796] loop4: detected capacity change from 0 to 256 [ 53.871856][ T6794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.841253][ T6541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.842850][ T6796] FAT-fs (loop4): Directory bread(block 64) failed [ 57.842946][ T6796] FAT-fs (loop4): Directory bread(block 65) failed [ 57.843016][ T6796] FAT-fs (loop4): Directory bread(block 66) failed [ 57.843055][ T6796] FAT-fs (loop4): Directory bread(block 67) failed [ 57.843112][ T6796] FAT-fs (loop4): Directory bread(block 68) failed [ 57.843160][ T6796] FAT-fs (loop4): Directory bread(block 69) failed [ 57.843224][ T6796] FAT-fs (loop4): Directory bread(block 70) failed [ 57.843262][ T6796] FAT-fs (loop4): Directory bread(block 71) failed [ 57.843318][ T6796] FAT-fs (loop4): Directory bread(block 72) failed [ 57.843356][ T6796] FAT-fs (loop4): Directory bread(block 73) failed [ 58.048253][ T6815] loop4: detected capacity change from 0 to 1024 [ 58.048932][ T6815] EXT4-fs: Ignoring removed orlov option [ 58.066971][ T6811] overlayfs: missing 'workdir' [ 58.992050][ T6815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.972888][ T6826] 9pnet_virtio: no channels available for device syz [ 61.329976][ T6538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.363369][ T6830] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.447511][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.451631][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.968229][ T6847] tipc: Enabling of bearer rejected, failed to enable media [ 64.472554][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 64.951469][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.951614][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.295139][ T3922] cfg80211: failed to load regulatory.db [ 71.592235][ T6887] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.595899][ T6887] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 71.612050][ T6916] bridge_slave_1: left allmulticast mode [ 71.612124][ T6916] bridge_slave_1: left promiscuous mode [ 71.612756][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.764725][ T6916] bridge_slave_0: left allmulticast mode [ 71.766705][ T6916] bridge_slave_0: left promiscuous mode [ 71.768885][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.083420][ T6926] input: syz0 as /devices/virtual/input/input5 [ 72.398553][ T6927] loop2: detected capacity change from 0 to 512 [ 72.605717][ T6927] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.688905][ T6927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 72.712034][ T6927] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.80: corrupted in-inode xattr: e_value size too large [ 72.724972][ T6927] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.80: couldn't read orphan inode 15 (err -117) [ 72.748871][ T6927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.285700][ T6541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.290162][ T6942] loop3: detected capacity change from 0 to 256 [ 74.314704][ T6942] vfat: Unknown parameter 'chehk' [ 75.078387][ T6946] loop2: detected capacity change from 0 to 512 [ 75.091107][ T6946] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.095230][ T6946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.118138][ T6946] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 75.127213][ T6946] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.130798][ T6946] EXT4-fs (loop2): 1 truncate cleaned up [ 75.135439][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.263586][ T6541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.263780][ T6952] syzkaller0: entered promiscuous mode [ 75.263823][ T6952] syzkaller0: entered allmulticast mode [ 75.334393][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'. [ 75.520942][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.523732][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.529547][ T6960] tipc: Started in network mode [ 75.531763][ T6960] tipc: Node identity 2a55f87deb0e, cluster identity 4711 [ 75.534946][ T6960] tipc: Enabled bearer , priority 0 [ 75.553170][ T6958] tipc: Disabling bearer [ 75.704946][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.705296][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.557615][ T6972] loop3: detected capacity change from 0 to 8192 [ 76.866307][ T6973] tipc: Enabling of bearer rejected, failed to enable media [ 77.555576][ T6982] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 77.555753][ T6982] FAT-fs (loop3): Filesystem has been set read-only [ 77.839713][ T6985] netlink: 76 bytes leftover after parsing attributes in process `syz.1.97'. [ 77.850899][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 77.936890][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'. [ 79.153006][ T7014] tipc: Enabling of bearer rejected, failed to enable media [ 81.293832][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.112'. [ 81.480357][ T7045] syzkaller0: entered promiscuous mode [ 81.480427][ T7045] syzkaller0: entered allmulticast mode [ 81.838647][ T7048] netlink: 'syz.2.113': attribute type 7 has an invalid length. [ 81.841414][ T7048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.113'. [ 83.619849][ T7072] tipc: Enabling of bearer rejected, failed to enable media [ 84.037880][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'. [ 84.747902][ T7080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.751585][ T7080] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.360480][ T7080] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.369041][ T7080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.369122][ T7080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.381880][ T7080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.431739][ T7080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.431827][ T7080] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.566664][ T7080] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.572498][ T7080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.575026][ T7080] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.579361][ T7080] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.583240][ T7080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.585027][ T7080] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 85.588078][ T7080] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.192500][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.383108][ T7123] loop4: detected capacity change from 0 to 16 [ 86.396545][ T7123] erofs (device loop4): mounted with root inode @ nid 36. [ 86.565287][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.140'. [ 86.598845][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.687163][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.142'. [ 86.763841][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.763952][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.773709][ T10] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 86.773770][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.773811][ T10] usb 1-1: Product: syz [ 86.773838][ T10] usb 1-1: Manufacturer: syz [ 86.773865][ T10] usb 1-1: SerialNumber: syz [ 86.794537][ T10] usb 1-1: config 0 descriptor?? [ 86.804555][ T10] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 86.804652][ T10] usb 1-1: No valid video chain found. [ 87.626544][ T7138] input: syz0 as /devices/virtual/input/input6 [ 87.768398][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.768990][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.770300][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.771731][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.055811][ T9] usb 1-1: USB disconnect, device number 2 [ 89.049243][ T6534] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.860757][ T6534] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.860842][ T6534] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.860898][ T6534] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.860941][ T6534] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.051035][ T7159] process 'syz.1.150' launched '/dev/fd/5' with NULL argv: empty string added [ 91.382606][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.473014][ T7161] loop3: detected capacity change from 0 to 1024 [ 91.493049][ T7161] EXT4-fs: Ignoring removed nobh option [ 91.546776][ T7161] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.410811][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.412748][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.414591][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.416344][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.501072][ T7161] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.148: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 93.504635][ T7161] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.148: couldn't read orphan inode 11 (err -117) [ 93.509174][ T7161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.962062][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.153'. [ 93.979004][ T6528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.211663][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.214547][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.152889][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.275425][ T7194] input: syz0 as /devices/virtual/input/input7 [ 95.392268][ T7194] loop4: detected capacity change from 0 to 512 [ 95.422946][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 95.483574][ T7194] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 95.530375][ T7194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 95.564714][ T7194] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.160: corrupted in-inode xattr: e_value size too large [ 95.581102][ T7194] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.160: couldn't read orphan inode 15 (err -117) [ 95.616052][ T7194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.395392][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.395461][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.395516][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.395547][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.421954][ T24] usb 1-1: config 0 descriptor?? [ 96.444771][ T24] hub 1-1:0.0: USB hub found [ 96.716771][ T24] hub 1-1:0.0: 1 port detected [ 97.867744][ T24] usb 1-1: USB disconnect, device number 3 [ 97.918943][ T6538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.823527][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.166'. [ 99.027790][ T7221] loop3: detected capacity change from 0 to 512 [ 99.159436][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.336801][ T7234] loop4: detected capacity change from 0 to 16 [ 99.363761][ T7234] erofs (device loop4): mounted with root inode @ nid 36. [ 99.862185][ T7239] erofs (device loop4): read error -117 @ 8200 of nid 36 [ 100.493801][ T6528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.516281][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 100.817907][ T7257] Zero length message leads to an empty skb [ 101.747785][ T7274] loop3: detected capacity change from 0 to 1024 [ 101.765346][ T7274] ext4: Unknown parameter 'nouser_xattr' [ 104.221384][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 106.641964][ T7305] loop4: detected capacity change from 0 to 128 [ 106.677381][ T7307] veth1_macvtap: left promiscuous mode [ 106.677460][ T7307] macsec0: entered promiscuous mode [ 108.674015][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 111.374108][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.374539][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.379938][ T7349] loop4: detected capacity change from 0 to 512 [ 111.383521][ T7349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.385003][ T7349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 111.385090][ T7349] System zones: 1-12 [ 111.386844][ T7349] EXT4-fs (loop4): 1 truncate cleaned up [ 111.387820][ T7349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.969609][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 112.550272][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 112.988348][ T7366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.988507][ T7366] IPv6: NLM_F_CREATE should be set when creating new route [ 113.058264][ T7366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.029767][ T6538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.034552][ T7383] vlan2: entered allmulticast mode [ 116.101453][ T7390] loop4: detected capacity change from 0 to 1024 [ 116.144657][ T7390] EXT4-fs: Ignoring removed oldalloc option [ 116.146736][ T7390] EXT4-fs: Ignoring removed bh option [ 116.188422][ T7390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.244898][ T7396] netlink: 4844 bytes leftover after parsing attributes in process `syz.0.228'. [ 116.254894][ T6538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.505404][ T7380] loop3: detected capacity change from 0 to 512 [ 117.283633][ T7380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.297328][ T7413] futex_wake_op: syz.4.232 tries to shift op by -1; fix this program [ 117.309083][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.309404][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.384632][ T6528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.471133][ T7401] input: syz0 as /devices/virtual/input/input8 [ 123.532096][ T7458] netlink: 'syz.0.243': attribute type 4 has an invalid length. [ 125.923248][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.923338][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.513465][ T7465] tipc: Enabling of bearer rejected, failed to enable media [ 126.570599][ T7473] input: syz0 as /devices/virtual/input/input9 [ 127.495977][ T7462] loop4: detected capacity change from 0 to 512 [ 127.530889][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 127.530972][ T31] audit: type=1326 audit(127.510:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.431805][ T31] audit: type=1326 audit(128.410:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.441587][ T31] audit: type=1326 audit(128.420:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.441677][ T31] audit: type=1326 audit(128.420:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.441723][ T31] audit: type=1326 audit(128.420:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.465624][ T31] audit: type=1326 audit(128.450:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.465705][ T31] audit: type=1326 audit(128.450:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.465767][ T31] audit: type=1326 audit(128.450:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.465811][ T31] audit: type=1326 audit(128.450:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.465854][ T31] audit: type=1326 audit(128.450:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b5ce28 code=0x7ffc0000 [ 128.619553][ T7462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.752994][ T6538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.434787][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.256'. [ 140.134601][ T7561] veth0_to_bond: entered allmulticast mode [ 140.705419][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 140.707363][ T31] audit: type=1107 audit(140.060:52): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='¯' [ 143.121817][ T7589] input: syz0 as /devices/virtual/input/input12 [ 147.622658][ T7612] loop4: detected capacity change from 0 to 512 [ 148.508606][ T7637] kthread_run failed with err -4 [ 148.588586][ T7612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.640348][ T6538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.514700][ T7678] input: syz0 as /devices/virtual/input/input14 [ 152.611490][ T7682] loop4: detected capacity change from 0 to 512 [ 153.089575][ T7682] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 153.469432][ T7682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 153.473404][ T7682] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.300: corrupted in-inode xattr: e_value size too large [ 153.478114][ T7682] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.300: couldn't read orphan inode 15 (err -117) [ 153.509282][ T7682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.704489][ T7687] netlink: 'syz.0.305': attribute type 39 has an invalid length. [ 155.041057][ T6538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.115433][ T7701] tipc: Enabling of bearer rejected, failed to enable media [ 155.293940][ T7710] loop3: detected capacity change from 0 to 256 [ 155.301560][ T7710] vfat: Bad value for 'nonumtail' [ 160.055479][ T31] audit: type=1107 audit(160.030:53): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='¯' [ 161.016353][ T7782] syzkaller0: entered promiscuous mode [ 161.019431][ T7782] syzkaller0: entered allmulticast mode [ 161.249722][ T7807] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.695357][ T31] audit: type=1107 audit(163.670:54): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='¯' [ 175.460403][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'. [ 175.548822][ T7833] netlink: 'syz.2.359': attribute type 3 has an invalid length. [ 175.548895][ T7833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.359'. [ 175.831136][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.813312][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.816192][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.819388][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.822739][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.145614][ T600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.319844][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.376'. [ 178.320219][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.376'. [ 178.360484][ T7885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.376'. [ 178.583293][ T600] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.903289][ T600] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.052984][ T6534] Bluetooth: hci5: command tx timeout [ 180.002271][ T600] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.817303][ T7949] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.403'. [ 181.736764][ T6534] Bluetooth: hci5: command tx timeout [ 183.761399][ T6534] Bluetooth: hci5: command tx timeout [ 185.841855][ T6534] Bluetooth: hci5: command tx timeout [ 187.372999][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.375026][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.548956][ T7939] netlink: 830 bytes leftover after parsing attributes in process `syz.1.399'. [ 192.682495][ T7962] tipc: Enabling of bearer rejected, failed to enable media [ 192.685468][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 192.775531][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.410'. [ 193.097967][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.099329][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.099484][ T7848] bridge_slave_0: entered allmulticast mode [ 193.102117][ T7848] bridge_slave_0: entered promiscuous mode [ 193.106773][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.106848][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.120949][ T7848] bridge_slave_1: entered allmulticast mode [ 193.127847][ T7848] bridge_slave_1: entered promiscuous mode [ 195.129844][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 196.314419][ T600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.354646][ T600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.403344][ T600] bond0 (unregistering): Released all slaves [ 196.495017][ T8041] tipc: Enabling of bearer rejected, failed to enable media [ 196.501318][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.510443][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.578224][ T8056] syz.4.429 uses obsolete (PF_INET,SOCK_PACKET) [ 196.594049][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 196.716903][ T8056] hsr0: entered promiscuous mode [ 196.716973][ T8056] hsr0: entered allmulticast mode [ 196.716995][ T8056] hsr_slave_0: entered allmulticast mode [ 196.717018][ T8056] hsr_slave_1: entered allmulticast mode [ 196.729940][ T7848] team0: Port device team_slave_0 added [ 196.972176][ T7848] team0: Port device team_slave_1 added [ 197.366636][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.369925][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.370027][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.396831][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.396891][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.396961][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.484352][ T7848] hsr_slave_0: entered promiscuous mode [ 197.486679][ T7848] hsr_slave_1: entered promiscuous mode [ 197.488918][ T7848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.491702][ T7848] Cannot create hsr debugfs directory [ 197.719560][ T600] hsr_slave_0: left promiscuous mode [ 197.725982][ T600] hsr_slave_1: left promiscuous mode [ 197.728375][ T600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.731953][ T600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.738688][ T600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.741639][ T600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.774512][ T600] veth1_macvtap: left promiscuous mode [ 197.778240][ T600] veth0_macvtap: left promiscuous mode [ 197.780349][ T600] veth1_vlan: left promiscuous mode [ 197.782421][ T600] veth0_vlan: left promiscuous mode [ 197.924711][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 198.316978][ T8119] vxcan1: tx address claim with different name [ 199.493847][ T600] team0 (unregistering): Port device team_slave_1 removed [ 199.653539][ T600] team0 (unregistering): Port device team_slave_0 removed [ 202.534705][ T8107] tipc: Enabling of bearer rejected, failed to enable media [ 202.694365][ T8134] warning: `syz.1.447' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 202.719649][ T7848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.736027][ T7848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.754642][ T7848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.764339][ T8132] tipc: Started in network mode [ 202.764411][ T8132] tipc: Node identity 6a8b2a6ce60d, cluster identity 4711 [ 202.777387][ T8132] tipc: Enabled bearer , priority 0 [ 202.784708][ T8132] syzkaller0: entered promiscuous mode [ 202.784777][ T8132] syzkaller0: entered allmulticast mode [ 202.798431][ T7848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.040587][ T8130] tipc: Resetting bearer [ 203.152141][ T8130] tipc: Disabling bearer [ 203.212980][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.226270][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.234240][ T2149] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.234329][ T2149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.245996][ T2149] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.246081][ T2149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.364606][ T8179] tipc: Enabled bearer , priority 0 [ 203.367246][ T8179] syzkaller0: entered promiscuous mode [ 203.370222][ T8179] syzkaller0: entered allmulticast mode [ 203.381498][ T8179] tipc: Resetting bearer [ 203.412584][ T8178] tipc: Resetting bearer [ 203.482253][ T8178] tipc: Disabling bearer [ 203.655265][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.747315][ T8205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.464'. [ 203.866707][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 204.100776][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 204.308187][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.323611][ T8226] bond0: (slave rose0): Enslaving as an active interface with an up link [ 204.412976][ T7848] veth0_vlan: entered promiscuous mode [ 204.417615][ T7848] veth1_vlan: entered promiscuous mode [ 204.429789][ T7848] veth0_macvtap: entered promiscuous mode [ 204.433795][ T7848] veth1_macvtap: entered promiscuous mode [ 204.442992][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.482999][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.489917][ T7848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.492750][ T7848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.495263][ T7848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.498043][ T7848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.534727][ T8246] tipc: Enabling of bearer rejected, failed to enable media [ 204.588930][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.588996][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.756719][ T2190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.756777][ T2190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.766686][ T8267] tipc: Enabled bearer , priority 0 [ 204.769506][ T8267] syzkaller0: entered promiscuous mode [ 204.773326][ T8267] syzkaller0: entered allmulticast mode [ 205.750084][ T8267] tipc: Resetting bearer [ 205.840181][ T8265] tipc: Resetting bearer [ 205.953050][ T8265] tipc: Disabling bearer [ 206.337259][ T8302] netlink: 'syz.5.360': attribute type 10 has an invalid length. [ 206.424184][ T8302] veth0_vlan: left promiscuous mode [ 206.446430][ T8302] veth0_vlan: entered promiscuous mode [ 206.465808][ T8302] team0: Device veth0_vlan failed to register rx_handler [ 207.550523][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 207.776639][ T8334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.487'. [ 207.786756][ T8324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.487'. [ 210.139049][ T8397] [ 210.139917][ T8397] ============================= [ 210.141566][ T8397] WARNING: suspicious RCU usage [ 210.143073][ T8397] 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 Not tainted [ 210.145951][ T8397] ----------------------------- [ 210.147402][ T8397] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 210.149877][ T8397] [ 210.149877][ T8397] other info that might help us debug this: [ 210.149877][ T8397] [ 210.152892][ T8397] [ 210.152892][ T8397] rcu_scheduler_active = 2, debug_locks = 1 [ 210.155172][ T8397] 1 lock held by syz.1.502/8397: [ 210.156779][ T8397] #0: ffff80008f869b60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x18/0x54 [ 210.159694][ T8397] [ 210.159694][ T8397] stack backtrace: [ 210.161485][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.1.502 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 210.164564][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.167382][ T8397] Call trace: [ 210.168360][ T8397] show_stack+0x2c/0x3c (C) [ 210.169606][ T8397] __dump_stack+0x30/0x40 [ 210.171024][ T8397] dump_stack_lvl+0xd8/0x12c [ 210.172336][ T8397] dump_stack+0x1c/0x28 [ 210.173672][ T8397] lockdep_rcu_suspicious+0x168/0x274 [ 210.175198][ T8397] task_cls_state+0x1d0/0x1f0 [ 210.176542][ T8397] bpf_get_cgroup_classid_curr+0x1c/0x6c [ 210.178130][ T8397] bpf_prog_cd2e46495e8fe8a5+0x4c/0x70 [ 210.179635][ T8397] bpf_prog_run_pin_on_cpu+0x70/0x1e8 [ 210.181138][ T8397] bpf_prog_test_run_syscall+0x2fc/0x4ac [ 210.182707][ T8397] bpf_prog_test_run+0x2b4/0x33c [ 210.184041][ T8397] __sys_bpf+0x4b0/0x614 [ 210.185381][ T8397] __arm64_sys_bpf+0x80/0x98 [ 210.186705][ T8397] invoke_syscall+0x98/0x2b8 [ 210.188030][ T8397] el0_svc_common+0x130/0x23c [ 210.189423][ T8397] do_el0_svc+0x48/0x58 [ 210.190609][ T8397] el0_svc+0x58/0x180 [ 210.191736][ T8397] el0t_64_sync_handler+0x84/0x12c [ 210.193207][ T8397] el0t_64_sync+0x198/0x19c [ 210.368037][ T8396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list