last executing test programs: 18m28.107044096s ago: executing program 1 (id=2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600"], 0x48) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x8, 0x4, 0x1, 0x9}, 'syz1\x00', 0x35}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x8) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x76) ioctl$UI_DEV_CREATE(r0, 0x5501) 18m12.26945776s ago: executing program 32 (id=2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600"], 0x48) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x8, 0x4, 0x1, 0x9}, 'syz1\x00', 0x35}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x8) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x76) ioctl$UI_DEV_CREATE(r0, 0x5501) 17m21.188463107s ago: executing program 3 (id=85): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x6, 0x0, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000f808bbae38c5d264749f2951249002100c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928e0772ff8f5e9ed32d3b"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000400)={@local, @multicast2}, 0x8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/155, 0x9b}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 17m15.275694742s ago: executing program 3 (id=90): syz_clone(0x98104200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000400)={0x1, 0x44}) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x2}, @ramp={0xc, 0x4, {0x6, 0x4, 0x100, 0x5}}}) write$char_usb(r4, 0x0, 0x0) 17m10.137640399s ago: executing program 3 (id=92): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0xfc2, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) 17m3.610822791s ago: executing program 3 (id=100): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r4, 0x303, 0x4, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x48, 0x0, &(0x7f00007d0000)) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)='./file0\x00') 16m55.793924744s ago: executing program 3 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x880ff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 16m40.37086917s ago: executing program 33 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x880ff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 15m45.993454133s ago: executing program 2 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x23, 0x1, 0x6, 0x7, 0x1000, 0x6, {0x1, 0xdc3f, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x5, 0x7, 0x4000, 0xe, r6, 0x0, 0x9, 0x7}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r6]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616363657373b5bbd8e47ed4f5243d", @ANYRESDEC=0x0, @ANYBLOB=',posixacl,nodevmap,cache=none,noextend,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) timer_create(0xfffffffffffffff4, 0x0, &(0x7f0000001400)) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) 15m43.958983476s ago: executing program 2 (id=176): mkdir(&(0x7f00000040c0)='./file0\x00', 0xdc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) removexattr(&(0x7f0000000140)='./file0\x00', 0x0) 15m39.246977139s ago: executing program 2 (id=181): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x16b286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15m35.077044625s ago: executing program 2 (id=186): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x1e}], 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)='./file0\x00') 15m31.64182825s ago: executing program 2 (id=188): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r4, 0x303, 0x4, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000080)=0xa, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) removexattr(&(0x7f0000000140)='./file0\x00', 0x0) 15m14.231406457s ago: executing program 34 (id=190): mkdir(&(0x7f00000040c0)='./file0\x00', 0xdc) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) removexattr(&(0x7f0000000140)='./file0\x00', 0x0) 14m50.19013995s ago: executing program 4 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x1fffffa8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket$inet(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) unshare(0x6020400) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x25, 0x0, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) getgid() openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 14m48.640302096s ago: executing program 4 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="040f51a719503bffe8011e8bb6bc0d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) 14m46.567050478s ago: executing program 4 (id=236): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) 14m45.019044968s ago: executing program 4 (id=238): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 14m43.119514471s ago: executing program 4 (id=239): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0xd, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0xffffffff, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x0, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0x1, 0x2, 0x1, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffff"], 0x174}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030002100000000000000000000000020008000840"], 0x80}, 0x1, 0x7}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 14m39.877960759s ago: executing program 4 (id=241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x146) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r4, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000), 0x4) inotify_init() r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) 14m23.989851819s ago: executing program 35 (id=241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x146) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r4, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000), 0x4) inotify_init() r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) 7.201901683s ago: executing program 8 (id=1277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 7.057221773s ago: executing program 8 (id=1278): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b65, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 5.78885157s ago: executing program 8 (id=1279): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) getitimer(0x2, &(0x7f0000000200)) setpriority(0x1, 0xff, 0x80000000008) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 5.788073632s ago: executing program 0 (id=1280): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000340)={'xfrm0\x00', {0x2, 0x4e20, @broadcast}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) 3.355850484s ago: executing program 8 (id=1281): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff0720"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 3.140525892s ago: executing program 8 (id=1282): prlimit64(0x0, 0xe, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) socket$packet(0x11, 0x3, 0x300) 2.464702532s ago: executing program 0 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) 2.283544611s ago: executing program 0 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.182548165s ago: executing program 0 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 2.009850563s ago: executing program 0 (id=1286): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b65, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.696072263s ago: executing program 8 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000"/105], 0x98}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 0s ago: executing program 0 (id=1288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00"], 0x98}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) kernel console output (not intermixed with test programs): 20.630371][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.630510][ T8440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.603436][ T8997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.835929][ T8997] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.923055][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.925595][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.993827][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.001376][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.155271][ T7591] bridge_slave_1: left allmulticast mode [ 824.155316][ T7591] bridge_slave_1: left promiscuous mode [ 824.155647][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.243649][ T7591] bridge_slave_0: left allmulticast mode [ 824.243679][ T7591] bridge_slave_0: left promiscuous mode [ 824.243924][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.333742][ T7591] bridge_slave_1: left allmulticast mode [ 824.333776][ T7591] bridge_slave_1: left promiscuous mode [ 824.334021][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.410519][ T7591] bridge_slave_0: left allmulticast mode [ 824.410543][ T7591] bridge_slave_0: left promiscuous mode [ 824.412611][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.495317][ T7591] bridge_slave_1: left allmulticast mode [ 824.495349][ T7591] bridge_slave_1: left promiscuous mode [ 824.495575][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.570769][ T7591] bridge_slave_0: left allmulticast mode [ 824.570798][ T7591] bridge_slave_0: left promiscuous mode [ 824.571035][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.710956][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.790138][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.843764][ T7591] bond0 (unregistering): Released all slaves [ 826.519779][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.639811][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.721601][ T7591] bond0 (unregistering): Released all slaves [ 826.887517][ T38] audit: type=1326 audit(1760206187.454:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9210 comm="syz.0.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x0 [ 827.489615][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.579545][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.663389][ T7591] bond0 (unregistering): Released all slaves [ 827.930647][ T9218] netlink: 'syz.0.624': attribute type 3 has an invalid length. [ 827.937514][ T9218] netlink: 'syz.0.624': attribute type 3 has an invalid length. [ 828.529390][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.929770][ T9221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'. [ 829.368781][ T7591] hsr_slave_0: left promiscuous mode [ 829.408836][ T7591] hsr_slave_1: left promiscuous mode [ 829.409617][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.459830][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.618964][ T7591] hsr_slave_0: left promiscuous mode [ 829.638928][ T7591] hsr_slave_1: left promiscuous mode [ 829.639764][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.693066][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.819449][ T7591] hsr_slave_0: left promiscuous mode [ 829.848896][ T7591] hsr_slave_1: left promiscuous mode [ 829.849974][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.890300][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.549721][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 830.700745][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 831.800901][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 831.930913][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 833.169928][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 833.284766][ T7904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 833.301889][ T7904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 833.303283][ T7904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 833.304397][ T7904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 833.305203][ T7904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 833.359450][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 834.612736][ T9037] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 835.977013][ T61] Bluetooth: hci5: command tx timeout [ 836.122215][ T9037] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 836.366939][ T9037] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 836.528959][ T9253] cgroup: Invalid name [ 837.361616][ T8997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.408964][ T9037] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 837.490905][ T9257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.632'. [ 837.818937][ T9233] chnl_net:caif_netlink_parms(): no params data found [ 837.851208][ T9057] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 838.398995][ T9276] netlink: 'syz.0.634': attribute type 3 has an invalid length. [ 838.400552][ T9276] netlink: 'syz.0.634': attribute type 3 has an invalid length. [ 838.813002][ T61] Bluetooth: hci5: command tx timeout [ 838.854769][ T9057] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 839.027871][ T9057] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 840.144910][ T9282] netlink: 'syz.0.635': attribute type 3 has an invalid length. [ 840.145135][ T9282] netlink: 'syz.0.635': attribute type 3 has an invalid length. [ 840.150824][ T9057] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 840.361874][ T9291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.637'. [ 841.592569][ T61] Bluetooth: hci5: command tx timeout [ 841.713684][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.713778][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.714074][ T9233] bridge_slave_0: entered allmulticast mode [ 841.716190][ T9233] bridge_slave_0: entered promiscuous mode [ 841.751490][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.751629][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.751893][ T9233] bridge_slave_1: entered allmulticast mode [ 841.753870][ T9233] bridge_slave_1: entered promiscuous mode [ 842.035236][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.048430][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.262332][ T9233] team0: Port device team_slave_0 added [ 842.297863][ T9233] team0: Port device team_slave_1 added [ 842.597599][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.597615][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.597647][ T9233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.601212][ T8997] veth0_vlan: entered promiscuous mode [ 842.634984][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.635001][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.635029][ T9233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.871738][ T8997] veth1_vlan: entered promiscuous mode [ 842.952415][ T9233] hsr_slave_0: entered promiscuous mode [ 842.953813][ T9233] hsr_slave_1: entered promiscuous mode [ 843.226225][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.609057][ T61] Bluetooth: hci5: command tx timeout [ 844.196096][ T9037] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.402815][ T9305] netlink: 48 bytes leftover after parsing attributes in process `syz.0.639'. [ 844.459877][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.668105][ T7904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 844.684648][ T7904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 844.689120][ T7904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 844.692809][ T7904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 844.693817][ T7904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 844.734483][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.734618][ T8498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.788472][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.788604][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.828201][ T9057] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.071653][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.071824][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.119197][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.119376][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.884664][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 845.913661][ T7591] bridge_slave_1: left allmulticast mode [ 845.913687][ T7591] bridge_slave_1: left promiscuous mode [ 845.913888][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.037317][ T7591] bridge_slave_0: left allmulticast mode [ 846.037341][ T7591] bridge_slave_0: left promiscuous mode [ 846.037592][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.729376][ T7904] Bluetooth: hci1: command tx timeout [ 847.912897][ T9330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.646'. [ 848.109581][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.219801][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.252773][ T7591] bond0 (unregistering): Released all slaves [ 848.822754][ T7904] Bluetooth: hci1: command tx timeout [ 849.588946][ T7591] hsr_slave_0: left promiscuous mode [ 849.669123][ T7591] hsr_slave_1: left promiscuous mode [ 849.730060][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.775074][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.399517][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 850.450938][ T9352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'. [ 850.561783][ T38] audit: type=1326 audit(1760206211.134:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 850.561938][ T38] audit: type=1326 audit(1760206211.134:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 850.562379][ T38] audit: type=1326 audit(1760206211.134:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 850.631130][ T38] audit: type=1326 audit(1760206211.204:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 850.631190][ T38] audit: type=1326 audit(1760206211.204:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 850.888884][ T7904] Bluetooth: hci1: command tx timeout [ 851.049776][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 851.209527][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 852.969273][ T7904] Bluetooth: hci1: command tx timeout [ 854.719660][ T9362] netlink: 'syz.0.651': attribute type 3 has an invalid length. [ 854.719828][ T9362] netlink: 'syz.0.651': attribute type 3 has an invalid length. [ 854.869897][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.870075][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.870299][ T9310] bridge_slave_0: entered allmulticast mode [ 854.872974][ T9310] bridge_slave_0: entered promiscuous mode [ 854.892292][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.892439][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.892740][ T9310] bridge_slave_1: entered allmulticast mode [ 854.895723][ T9310] bridge_slave_1: entered promiscuous mode [ 855.259455][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.266220][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.310330][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.051637][ T9310] team0: Port device team_slave_0 added [ 856.072126][ T9310] team0: Port device team_slave_1 added [ 856.363341][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 856.381120][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.382292][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.383489][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.385565][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 857.289708][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.289725][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.289752][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.298103][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.298121][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.298151][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.364402][ T9233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 857.493570][ T9233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 857.558789][ T9233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 857.684300][ T9233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 857.894298][ T9310] hsr_slave_0: entered promiscuous mode [ 857.898516][ T9310] hsr_slave_1: entered promiscuous mode [ 857.902920][ T9310] debugfs: 'hsr0' already exists in 'hsr' [ 857.902950][ T9310] Cannot create hsr debugfs directory [ 858.488837][ T61] Bluetooth: hci3: command tx timeout [ 859.224029][ T9057] veth0_vlan: entered promiscuous mode [ 859.289617][ T9439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.653'. [ 860.569312][ T61] Bluetooth: hci3: command tx timeout [ 860.692387][ T9057] veth1_vlan: entered promiscuous mode [ 862.361099][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 862.648820][ T61] Bluetooth: hci3: command tx timeout [ 863.567285][ T7904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 863.602227][ T7904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 863.610107][ T7904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 863.624693][ T7904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 863.642444][ T7904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 863.678972][ T7591] bridge_slave_1: left allmulticast mode [ 863.679003][ T7591] bridge_slave_1: left promiscuous mode [ 863.679279][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.761986][ T7591] bridge_slave_0: left allmulticast mode [ 863.762027][ T7591] bridge_slave_0: left promiscuous mode [ 863.762319][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.843217][ T7591] bridge_slave_1: left allmulticast mode [ 863.843247][ T7591] bridge_slave_1: left promiscuous mode [ 863.843497][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.109890][ T7591] bridge_slave_0: left allmulticast mode [ 864.109913][ T7591] bridge_slave_0: left promiscuous mode [ 864.110109][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.029716][ T61] Bluetooth: hci3: command tx timeout [ 865.239556][ T9482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.660'. [ 865.307797][ T38] audit: type=1326 audit(1760206225.874:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9483 comm="syz.0.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x0 [ 865.703779][ T7904] Bluetooth: hci0: command tx timeout [ 867.815829][ T7904] Bluetooth: hci0: command tx timeout [ 868.569581][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.630142][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.651270][ T7591] bond0 (unregistering): Released all slaves [ 869.848885][ T7904] Bluetooth: hci0: command tx timeout [ 870.079546][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.141282][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.161550][ T7591] bond0 (unregistering): Released all slaves [ 870.875447][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.875580][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.875784][ T9391] bridge_slave_0: entered allmulticast mode [ 870.878904][ T9391] bridge_slave_0: entered promiscuous mode [ 870.921247][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.921399][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.921612][ T9391] bridge_slave_1: entered allmulticast mode [ 870.926444][ T9391] bridge_slave_1: entered promiscuous mode [ 871.270204][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.296093][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.342684][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.359413][ T9507] netlink: 48 bytes leftover after parsing attributes in process `syz.0.667'. [ 871.979814][ T7904] Bluetooth: hci0: command tx timeout [ 872.928938][ T7591] hsr_slave_0: left promiscuous mode [ 872.978862][ T7591] hsr_slave_1: left promiscuous mode [ 872.980008][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.002419][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.588875][ T7591] hsr_slave_0: left promiscuous mode [ 873.628929][ T7591] hsr_slave_1: left promiscuous mode [ 873.629788][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.682508][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.019274][ T7591] veth1_vlan: left promiscuous mode [ 874.019414][ T7591] veth0_vlan: left promiscuous mode [ 874.052029][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 874.052599][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 875.294975][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.295050][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.939466][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 878.213238][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 878.243031][ T9535] netlink: 48 bytes leftover after parsing attributes in process `syz.0.674'. [ 879.857315][ T38] audit: type=1326 audit(1760206240.424:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9546 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 879.857386][ T38] audit: type=1326 audit(1760206240.424:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9546 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 879.858042][ T38] audit: type=1326 audit(1760206240.424:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9546 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 879.912595][ T38] audit: type=1326 audit(1760206240.484:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9546 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 879.912691][ T38] audit: type=1326 audit(1760206240.484:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9546 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 880.132765][ T9553] netlink: 48 bytes leftover after parsing attributes in process `syz.0.681'. [ 886.219555][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 886.429573][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 890.298386][ T9592] FAT-fs (loop1): unable to read boot sector [ 891.461639][ T9391] team0: Port device team_slave_0 added [ 891.495550][ T9391] team0: Port device team_slave_1 added [ 891.518427][ T9310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 891.680373][ T9310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 891.864161][ T9310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 891.885939][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.885957][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.885985][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.901798][ T9310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 891.985918][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.985938][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.985968][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.024306][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.314433][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.314648][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.494577][ T9391] hsr_slave_0: entered promiscuous mode [ 892.496217][ T9391] hsr_slave_1: entered promiscuous mode [ 892.497266][ T9391] debugfs: 'hsr0' already exists in 'hsr' [ 892.497293][ T9391] Cannot create hsr debugfs directory [ 892.578596][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.579127][ T8498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.543551][ T9475] chnl_net:caif_netlink_parms(): no params data found [ 894.875764][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 894.881222][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 894.882332][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 894.883440][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 894.884304][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 895.096606][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.097567][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.105477][ T9475] bridge_slave_0: entered allmulticast mode [ 895.377439][ T9475] bridge_slave_0: entered promiscuous mode [ 896.146306][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.146510][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.146779][ T9475] bridge_slave_1: entered allmulticast mode [ 896.160458][ T9475] bridge_slave_1: entered promiscuous mode [ 896.507414][ T9475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.542908][ T9475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.910536][ T9475] team0: Port device team_slave_0 added [ 896.940533][ T9475] team0: Port device team_slave_1 added [ 896.969333][ T61] Bluetooth: hci4: command tx timeout [ 898.129311][ T9702] netlink: 'syz.0.703': attribute type 3 has an invalid length. [ 898.129528][ T9702] netlink: 'syz.0.703': attribute type 3 has an invalid length. [ 899.048743][ T61] Bluetooth: hci4: command tx timeout [ 899.093054][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.093068][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.093088][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.166970][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.166987][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.167014][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.185254][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.296258][ T9475] hsr_slave_0: entered promiscuous mode [ 900.297574][ T9475] hsr_slave_1: entered promiscuous mode [ 900.298975][ T9475] debugfs: 'hsr0' already exists in 'hsr' [ 900.299000][ T9475] Cannot create hsr debugfs directory [ 900.311283][ T9391] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 900.376213][ T9391] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 900.423356][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.611923][ T9391] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 900.746786][ T9391] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 901.138812][ T61] Bluetooth: hci4: command tx timeout [ 901.197541][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.197687][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.483526][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.483793][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.082899][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 903.203537][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.203742][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.203940][ T9669] bridge_slave_0: entered allmulticast mode [ 903.206700][ T9669] bridge_slave_0: entered promiscuous mode [ 903.212173][ T61] Bluetooth: hci4: command tx timeout [ 903.480126][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.480281][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.480521][ T9669] bridge_slave_1: entered allmulticast mode [ 903.483267][ T9669] bridge_slave_1: entered promiscuous mode [ 904.561503][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.573045][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.855983][ T9669] team0: Port device team_slave_0 added [ 904.877042][ T9669] team0: Port device team_slave_1 added [ 905.267270][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.267283][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.267301][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.302005][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.302023][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.302054][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.724707][ T7591] bridge_slave_1: left allmulticast mode [ 905.724735][ T7591] bridge_slave_1: left promiscuous mode [ 905.724960][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.840720][ T7904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 906.845769][ T7904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 906.846969][ T7904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 906.848100][ T7904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 906.849446][ T7904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 906.970692][ T7591] bridge_slave_0: left allmulticast mode [ 906.970725][ T7591] bridge_slave_0: left promiscuous mode [ 906.970970][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.072325][ T7591] bridge_slave_1: left allmulticast mode [ 907.072349][ T7591] bridge_slave_1: left promiscuous mode [ 907.072552][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.130408][ T7591] bridge_slave_0: left allmulticast mode [ 907.130439][ T7591] bridge_slave_0: left promiscuous mode [ 907.130704][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.462466][ T9829] FAT-fs (loop1): unable to read boot sector [ 909.112225][ T7904] Bluetooth: hci1: command tx timeout [ 911.128996][ T7904] Bluetooth: hci1: command tx timeout [ 911.400373][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.479607][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.503445][ T7591] bond0 (unregistering): Released all slaves [ 912.849298][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.932160][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.954612][ T7591] bond0 (unregistering): Released all slaves [ 913.208801][ T7904] Bluetooth: hci1: command tx timeout [ 913.327741][ T9669] hsr_slave_0: entered promiscuous mode [ 913.329276][ T9669] hsr_slave_1: entered promiscuous mode [ 913.330224][ T9669] debugfs: 'hsr0' already exists in 'hsr' [ 913.330248][ T9669] Cannot create hsr debugfs directory [ 913.524778][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.859107][ T7591] hsr_slave_0: left promiscuous mode [ 913.898796][ T7591] hsr_slave_1: left promiscuous mode [ 913.899778][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.952380][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.218962][ T7591] hsr_slave_0: left promiscuous mode [ 915.222552][ T38] audit: type=1326 audit(1760206275.794:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.0.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x0 [ 915.270125][ T7591] hsr_slave_1: left promiscuous mode [ 915.270920][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.288787][ T7904] Bluetooth: hci1: command tx timeout [ 915.319522][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.393575][ T7591] veth1_vlan: left promiscuous mode [ 915.393754][ T7591] veth0_vlan: left promiscuous mode [ 916.339476][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 916.559535][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 917.654512][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.665733][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.667058][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.669946][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.671096][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 919.768986][ T61] Bluetooth: hci5: command tx timeout [ 920.240250][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 921.699456][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 921.848742][ T61] Bluetooth: hci5: command tx timeout [ 923.932757][ T61] Bluetooth: hci5: command tx timeout [ 925.680940][ T7904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 925.683311][ T7904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 925.710274][ T7904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 925.713410][ T7904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 925.714793][ T7904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 926.008769][ T61] Bluetooth: hci5: command tx timeout [ 927.179880][ T9895] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 927.780783][ T61] Bluetooth: hci0: command tx timeout [ 927.863947][ T9820] chnl_net:caif_netlink_parms(): no params data found [ 929.849091][ T61] Bluetooth: hci0: command tx timeout [ 929.991504][ T9868] chnl_net:caif_netlink_parms(): no params data found [ 930.026989][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.027157][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.027294][ T9820] bridge_slave_0: entered allmulticast mode [ 930.030591][ T9820] bridge_slave_0: entered promiscuous mode [ 930.082889][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.083044][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.083266][ T9820] bridge_slave_1: entered allmulticast mode [ 930.085635][ T9820] bridge_slave_1: entered promiscuous mode [ 930.403020][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.435061][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.777132][ T9669] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 930.891649][ T9820] team0: Port device team_slave_0 added [ 930.892458][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.892945][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.893328][ T9868] bridge_slave_0: entered allmulticast mode [ 930.895176][ T9868] bridge_slave_0: entered promiscuous mode [ 930.929362][ T9669] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 930.958878][ T9820] team0: Port device team_slave_1 added [ 930.959982][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.960118][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.960300][ T9868] bridge_slave_1: entered allmulticast mode [ 930.963142][ T9868] bridge_slave_1: entered promiscuous mode [ 930.997229][ T9669] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 931.280529][ T9669] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 931.634314][ T38] audit: type=1326 audit(1760206292.204:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x0 [ 931.704543][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.704570][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.704598][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.715176][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.844442][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.844458][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.844484][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.856261][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.856787][ T9888] chnl_net:caif_netlink_parms(): no params data found [ 931.928765][ T61] Bluetooth: hci0: command tx timeout [ 932.320856][ T9868] team0: Port device team_slave_0 added [ 932.622250][ T9868] team0: Port device team_slave_1 added [ 934.008986][ T61] Bluetooth: hci0: command tx timeout [ 935.315778][ T9820] hsr_slave_0: entered promiscuous mode [ 935.316729][ T9820] hsr_slave_1: entered promiscuous mode [ 935.403010][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.403023][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.403041][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.683291][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.683310][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.683338][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.852631][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.854276][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.854484][ T9888] bridge_slave_0: entered allmulticast mode [ 935.856518][ T9888] bridge_slave_0: entered promiscuous mode [ 935.878825][ T9888] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.878976][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.879192][ T9888] bridge_slave_1: entered allmulticast mode [ 935.882089][ T9888] bridge_slave_1: entered promiscuous mode [ 936.273486][ T9888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.345303][ T9868] hsr_slave_0: entered promiscuous mode [ 936.346233][ T9868] hsr_slave_1: entered promiscuous mode [ 936.346898][ T9868] debugfs: 'hsr0' already exists in 'hsr' [ 936.346916][ T9868] Cannot create hsr debugfs directory [ 936.352104][ T9888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.715430][ T9888] team0: Port device team_slave_0 added [ 936.735356][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.735421][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.802385][ T9888] team0: Port device team_slave_1 added [ 937.073948][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.073966][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.073994][ T9888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.156042][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.156059][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.156087][ T9888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.297890][ T9986] FAT-fs (loop1): unable to read boot sector [ 940.635354][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 942.857817][ T9888] hsr_slave_0: entered promiscuous mode [ 942.860859][ T9888] hsr_slave_1: entered promiscuous mode [ 942.862089][ T9888] debugfs: 'hsr0' already exists in 'hsr' [ 942.862114][ T9888] Cannot create hsr debugfs directory [ 943.393338][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.537455][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.583154][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.583346][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.696038][ T7591] bridge_slave_1: left allmulticast mode [ 943.696068][ T7591] bridge_slave_1: left promiscuous mode [ 943.696317][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.750918][ T7591] bridge_slave_0: left allmulticast mode [ 943.750950][ T7591] bridge_slave_0: left promiscuous mode [ 943.751190][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.821891][ T7591] bridge_slave_1: left allmulticast mode [ 943.821913][ T7591] bridge_slave_1: left promiscuous mode [ 943.822073][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.891363][ T7591] bridge_slave_0: left allmulticast mode [ 943.891398][ T7591] bridge_slave_0: left promiscuous mode [ 943.891560][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.951884][ T7591] bridge_slave_1: left allmulticast mode [ 943.951905][ T7591] bridge_slave_1: left promiscuous mode [ 943.952060][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.020027][ T7591] bridge_slave_0: left allmulticast mode [ 944.020049][ T7591] bridge_slave_0: left promiscuous mode [ 944.020223][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.429622][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.529563][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.591307][ T7591] bond0 (unregistering): Released all slaves [ 946.385447][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 949.639707][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.719354][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.791599][ T7591] bond0 (unregistering): Released all slaves [ 951.010943][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.069638][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.091125][ T7591] bond0 (unregistering): Released all slaves [ 951.136197][T10015] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 951.136423][T10015] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 951.140004][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.140148][ T8113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.235087][ T7591] hsr_slave_0: left promiscuous mode [ 952.271418][ T7591] hsr_slave_1: left promiscuous mode [ 952.272300][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.309625][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.668813][ T7591] hsr_slave_0: left promiscuous mode [ 952.709424][ T7591] hsr_slave_1: left promiscuous mode [ 952.729392][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.941491][T10035] FAT-fs (loop1): unable to read boot sector [ 953.789590][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.990078][ T7591] hsr_slave_0: left promiscuous mode [ 953.994259][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 954.038773][ T7591] hsr_slave_1: left promiscuous mode [ 954.039738][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.039825][T10041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.764'. [ 954.093060][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.029324][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 956.169405][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 956.973684][ T7904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 956.976090][ T7904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 956.978464][ T7904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 957.000686][ T7904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 957.001811][ T7904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 957.898155][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 958.029536][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 959.048734][ T7904] Bluetooth: hci3: command tx timeout [ 960.959332][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 961.128689][ T7904] Bluetooth: hci3: command tx timeout [ 961.144767][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 963.209580][ T7904] Bluetooth: hci3: command tx timeout [ 964.654993][T10074] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 964.655228][T10074] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 965.600056][ T7904] Bluetooth: hci3: command tx timeout [ 966.949614][T10079] netlink: 'syz.0.772': attribute type 3 has an invalid length. [ 966.949841][T10079] netlink: 'syz.0.772': attribute type 3 has an invalid length. [ 967.305837][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 967.324218][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 967.347993][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 967.389540][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 967.390254][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 967.655219][T10050] chnl_net:caif_netlink_parms(): no params data found [ 968.581658][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.581848][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.582012][T10050] bridge_slave_0: entered allmulticast mode [ 968.588193][T10050] bridge_slave_0: entered promiscuous mode [ 968.636419][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.636574][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.636750][T10050] bridge_slave_1: entered allmulticast mode [ 968.645513][T10050] bridge_slave_1: entered promiscuous mode [ 968.977634][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.075094][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.449644][ T7904] Bluetooth: hci4: command tx timeout [ 969.468436][T10050] team0: Port device team_slave_0 added [ 969.519735][T10050] team0: Port device team_slave_1 added [ 971.531997][ T7904] Bluetooth: hci4: command tx timeout [ 972.339818][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.339835][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.339863][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.378983][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.379004][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.379036][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.575305][ T9888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 972.761860][ T9888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 972.912317][ T9888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 973.050063][T10050] hsr_slave_0: entered promiscuous mode [ 973.051668][T10050] hsr_slave_1: entered promiscuous mode [ 973.052670][T10050] debugfs: 'hsr0' already exists in 'hsr' [ 973.052693][T10050] Cannot create hsr debugfs directory [ 973.058646][ T9888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 973.152154][T10087] chnl_net:caif_netlink_parms(): no params data found [ 973.608885][ T7904] Bluetooth: hci4: command tx timeout [ 973.821648][T10135] FAT-fs (loop1): unable to read boot sector [ 975.322981][ T9868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 975.470847][ T9868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 975.763718][ T9868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 975.807377][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.808280][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.808478][T10087] bridge_slave_0: entered allmulticast mode [ 975.824392][T10087] bridge_slave_0: entered promiscuous mode [ 975.835448][ T9868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 975.919482][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.919618][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.919824][T10087] bridge_slave_1: entered allmulticast mode [ 975.923101][T10087] bridge_slave_1: entered promiscuous mode [ 976.088904][ T7904] Bluetooth: hci4: command tx timeout [ 976.334748][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.372171][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.881776][T10087] team0: Port device team_slave_0 added [ 976.991802][T10087] team0: Port device team_slave_1 added [ 977.431032][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.431050][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.431076][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.661401][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.661418][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.661444][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.325967][ T38] audit: type=1326 audit(1760206338.894:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10156 comm="syz.0.790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x0 [ 978.389150][T10087] hsr_slave_0: entered promiscuous mode [ 978.391980][T10087] hsr_slave_1: entered promiscuous mode [ 978.393159][T10087] debugfs: 'hsr0' already exists in 'hsr' [ 978.393182][T10087] Cannot create hsr debugfs directory [ 978.556478][ T7591] bridge_slave_1: left allmulticast mode [ 978.556505][ T7591] bridge_slave_1: left promiscuous mode [ 978.556757][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.610215][ T7591] bridge_slave_0: left allmulticast mode [ 978.610242][ T7591] bridge_slave_0: left promiscuous mode [ 978.610488][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.653561][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 978.657422][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 978.658503][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 978.677801][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 978.680403][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 978.697924][ T7591] bridge_slave_1: left allmulticast mode [ 978.697947][ T7591] bridge_slave_1: left promiscuous mode [ 978.698175][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.779827][ T7591] bridge_slave_0: left allmulticast mode [ 978.779850][ T7591] bridge_slave_0: left promiscuous mode [ 978.780013][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.139330][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.241449][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.307003][ T7591] bond0 (unregistering): Released all slaves [ 980.729205][ T61] Bluetooth: hci1: command tx timeout [ 981.799595][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.859467][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.912497][ T7591] bond0 (unregistering): Released all slaves [ 982.628858][ T7591] hsr_slave_0: left promiscuous mode [ 982.826879][ T61] Bluetooth: hci1: command tx timeout [ 982.845586][ T7591] hsr_slave_1: left promiscuous mode [ 982.846534][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.899842][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.138784][ T7591] hsr_slave_0: left promiscuous mode [ 984.168955][ T7591] hsr_slave_1: left promiscuous mode [ 984.169941][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.219751][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.888997][ T61] Bluetooth: hci1: command tx timeout [ 984.973030][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 985.099320][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 986.503285][ T7904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 986.514432][ T7904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 986.516510][ T7904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 986.518284][ T7904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 986.520235][ T7904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 986.970980][ T7904] Bluetooth: hci1: command tx timeout [ 987.681057][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 987.929774][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 988.569008][ T7904] Bluetooth: hci5: command tx timeout [ 990.514977][T10216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.809'. [ 990.648709][ T7904] Bluetooth: hci5: command tx timeout [ 991.926830][T10222] netlink: 48 bytes leftover after parsing attributes in process `syz.0.811'. [ 993.328631][ T7904] Bluetooth: hci5: command tx timeout [ 995.368241][ T9888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.368826][ T7904] Bluetooth: hci5: command tx timeout [ 995.385417][T10050] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 995.440994][T10050] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 995.495857][T10050] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 995.778734][T10050] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 998.233183][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.233253][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.531375][T10254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.819'. [ 998.694866][ T38] audit: type=1326 audit(1760206359.264:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.695065][ T38] audit: type=1326 audit(1760206359.264:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.695400][ T38] audit: type=1326 audit(1760206359.264:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.695683][ T38] audit: type=1326 audit(1760206359.264:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.695846][ T38] audit: type=1326 audit(1760206359.264:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.696145][ T38] audit: type=1326 audit(1760206359.264:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.696277][ T38] audit: type=1326 audit(1760206359.264:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.696420][ T38] audit: type=1326 audit(1760206359.264:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.696672][ T38] audit: type=1326 audit(1760206359.264:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 998.696974][ T38] audit: type=1326 audit(1760206359.264:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1000.210189][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.328243][T10159] chnl_net:caif_netlink_parms(): no params data found [ 1000.340036][T10200] chnl_net:caif_netlink_parms(): no params data found [ 1000.678910][T10050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.003536][T10159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.003710][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.003972][T10159] bridge_slave_0: entered allmulticast mode [ 1001.007404][T10159] bridge_slave_0: entered promiscuous mode [ 1001.015092][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.015232][ T8440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.130413][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.130569][T10159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.130766][T10159] bridge_slave_1: entered allmulticast mode [ 1001.132504][T10159] bridge_slave_1: entered promiscuous mode [ 1001.171570][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.171673][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.171889][T10200] bridge_slave_0: entered allmulticast mode [ 1001.188402][T10200] bridge_slave_0: entered promiscuous mode [ 1002.471663][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.471812][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.471989][T10200] bridge_slave_1: entered allmulticast mode [ 1002.474460][T10200] bridge_slave_1: entered promiscuous mode [ 1002.477668][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.477792][ T8440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.764930][T10159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.906272][T10159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.915443][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.164713][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.345993][T10159] team0: Port device team_slave_0 added [ 1003.426378][T10159] team0: Port device team_slave_1 added [ 1003.527721][T10200] team0: Port device team_slave_0 added [ 1003.654924][T10200] team0: Port device team_slave_1 added [ 1003.809981][T10087] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1003.832709][T10159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.832722][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.832759][T10159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.920125][T10087] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1003.965689][T10159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.965706][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.965733][T10159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.977828][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.977846][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.977877][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.981369][T10087] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1004.070129][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.070142][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.070160][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.189102][T10087] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1004.359957][T10301] overlayfs: failed to clone upperpath [ 1005.058478][T10159] hsr_slave_0: entered promiscuous mode [ 1005.061811][T10159] hsr_slave_1: entered promiscuous mode [ 1005.431385][T10200] hsr_slave_0: entered promiscuous mode [ 1005.432743][T10200] hsr_slave_1: entered promiscuous mode [ 1005.433642][T10200] debugfs: 'hsr0' already exists in 'hsr' [ 1005.433665][T10200] Cannot create hsr debugfs directory [ 1008.383223][T10337] overlayfs: failed to clone upperpath [ 1008.916927][T10050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.123571][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.166198][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.176471][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.176656][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.197874][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.198104][ T8498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.019833][ T7591] bridge_slave_1: left allmulticast mode [ 1010.019861][ T7591] bridge_slave_1: left promiscuous mode [ 1010.020105][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.112671][ T7591] bridge_slave_0: left allmulticast mode [ 1010.112708][ T7591] bridge_slave_0: left promiscuous mode [ 1010.112965][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.193293][ T7591] bridge_slave_1: left allmulticast mode [ 1010.193325][ T7591] bridge_slave_1: left promiscuous mode [ 1010.193564][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.280504][ T7591] bridge_slave_0: left allmulticast mode [ 1010.280533][ T7591] bridge_slave_0: left promiscuous mode [ 1010.280789][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.183583][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 1011.183600][ T38] audit: type=1326 audit(1760206371.754:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10379 comm="syz.0.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x0 [ 1012.010473][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.129571][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.211255][ T7591] bond0 (unregistering): Released all slaves [ 1012.560491][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.640264][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.712617][ T7591] bond0 (unregistering): Released all slaves [ 1013.338772][ T7591] hsr_slave_0: left promiscuous mode [ 1013.381315][ T7591] hsr_slave_1: left promiscuous mode [ 1013.383516][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.430855][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.601647][ T7591] hsr_slave_0: left promiscuous mode [ 1013.638760][ T7591] hsr_slave_1: left promiscuous mode [ 1013.639751][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.689847][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.349271][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1014.469341][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1015.459796][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1015.609592][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1016.245773][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.294927][T10050] veth0_vlan: entered promiscuous mode [ 1016.351873][T10050] veth1_vlan: entered promiscuous mode [ 1016.462261][T10050] veth0_macvtap: entered promiscuous mode [ 1016.481175][T10050] veth1_macvtap: entered promiscuous mode [ 1016.515022][T10050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.528225][T10050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.543902][ T8113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.545489][ T8113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.545687][ T8113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.545727][ T8113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.382467][T10159] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1018.689498][T10087] veth0_vlan: entered promiscuous mode [ 1018.689903][T10159] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1018.748104][T10159] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1018.796827][T10159] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1019.087663][T10087] veth1_vlan: entered promiscuous mode [ 1019.164958][T10200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1019.207530][T10200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1019.436087][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1019.454164][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1019.456172][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1019.471496][T10200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1019.484225][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1019.486059][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1019.804866][T10200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1019.950134][T10461] FAT-fs (loop1): unable to read boot sector [ 1021.061428][T10087] veth0_macvtap: entered promiscuous mode [ 1021.138158][T10087] veth1_macvtap: entered promiscuous mode [ 1021.447057][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.523992][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.529301][ T61] Bluetooth: hci0: command tx timeout [ 1021.762266][ T1217] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.815350][ T8113] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.829304][ T8113] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.881172][ T8113] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.154504][T10159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.346791][T10452] chnl_net:caif_netlink_parms(): no params data found [ 1022.677699][ T7591] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.356104][ T7591] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.441789][T10159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.447434][T10200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.608861][ T61] Bluetooth: hci0: command tx timeout [ 1023.705540][ T7591] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.866304][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.866340][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.872595][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.877376][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.878405][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.879619][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.879835][T10452] bridge_slave_0: entered allmulticast mode [ 1023.882820][T10452] bridge_slave_0: entered promiscuous mode [ 1024.045765][ T7591] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.102908][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.103016][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.103234][T10452] bridge_slave_1: entered allmulticast mode [ 1024.105063][T10452] bridge_slave_1: entered promiscuous mode [ 1024.321803][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.321910][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.350447][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.358164][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.384025][T10200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.385678][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.385696][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.623523][T10452] team0: Port device team_slave_0 added [ 1024.676647][T10452] team0: Port device team_slave_1 added [ 1024.717100][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.717386][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.142163][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.142422][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.145679][T10452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.145690][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.145716][T10452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.048609][ T61] Bluetooth: hci0: command tx timeout [ 1026.123666][T10452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.123685][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.123714][T10452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.487413][ T7591] bridge_slave_1: left allmulticast mode [ 1026.487444][ T7591] bridge_slave_1: left promiscuous mode [ 1026.487704][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.879803][ T7591] bridge_slave_0: left allmulticast mode [ 1026.879826][ T7591] bridge_slave_0: left promiscuous mode [ 1026.880039][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.088738][ T61] Bluetooth: hci0: command tx timeout [ 1029.047117][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.8.858'. [ 1032.569387][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.932739][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.924371][ T7591] bond0 (unregistering): Released all slaves [ 1034.150429][T10452] hsr_slave_0: entered promiscuous mode [ 1034.152901][T10452] hsr_slave_1: entered promiscuous mode [ 1034.154005][T10452] debugfs: 'hsr0' already exists in 'hsr' [ 1034.154031][T10452] Cannot create hsr debugfs directory [ 1034.774997][ T7591] hsr_slave_0: left promiscuous mode [ 1034.809953][ T7591] hsr_slave_1: left promiscuous mode [ 1034.810792][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.810814][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.849761][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.849792][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.013483][ T7591] veth1_macvtap: left promiscuous mode [ 1036.013610][ T7591] veth0_macvtap: left promiscuous mode [ 1036.013881][ T7591] veth1_vlan: left promiscuous mode [ 1036.014062][ T7591] veth0_vlan: left promiscuous mode [ 1037.101986][ T6003] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1037.348762][ T6003] usb 9-1: Invalid ep0 maxpacket: 16 [ 1037.623646][ T6003] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 1037.788516][ T6003] usb 9-1: Invalid ep0 maxpacket: 16 [ 1038.671616][ T6003] usb usb9-port1: attempt power cycle [ 1039.041734][ T6003] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1039.059436][ T6003] usb 9-1: Invalid ep0 maxpacket: 16 [ 1040.048492][ T38] audit: type=1326 audit(1760206400.614:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10604 comm="syz.0.884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x0 [ 1040.255435][ T7904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1040.283989][ T7904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1040.297746][ T7904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1040.311666][ T7904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1040.328776][ T7904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1040.489585][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1040.691362][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1042.415638][ T7904] Bluetooth: hci3: command tx timeout [ 1044.031930][T10603] xfrm0: entered promiscuous mode [ 1044.031954][T10603] xfrm0: entered allmulticast mode [ 1044.498647][ T7904] Bluetooth: hci3: command tx timeout [ 1044.516841][ T38] audit: type=1326 audit(1760206404.824:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.8.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f412d4deec9 code=0x0 [ 1046.470069][ T6003] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1046.629264][ T6003] usb 9-1: Using ep0 maxpacket: 8 [ 1046.661300][ T7904] Bluetooth: hci3: command tx timeout [ 1047.033750][ T6003] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1047.033803][ T6003] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1047.033826][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.723796][ T6003] usb 9-1: string descriptor 0 read error: -71 [ 1048.730094][ T7904] Bluetooth: hci3: command tx timeout [ 1049.049258][ T6003] usb 9-1: USB disconnect, device number 6 [ 1049.945397][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1049.954204][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1049.955269][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1049.956825][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1049.964917][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1050.280100][T10607] chnl_net:caif_netlink_parms(): no params data found [ 1050.404417][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 1052.500551][ T7904] Bluetooth: hci1: command tx timeout [ 1053.576170][T10452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1053.950800][T10452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1054.360011][T10714] fuse: Unknown parameter 'user_id00000000000000000000' [ 1054.583119][ T7904] Bluetooth: hci1: command tx timeout [ 1055.439282][T10452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1055.475234][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.475428][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.475613][T10607] bridge_slave_0: entered allmulticast mode [ 1055.478301][T10607] bridge_slave_0: entered promiscuous mode [ 1055.514471][T10452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1055.637157][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.637287][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.638281][T10607] bridge_slave_1: entered allmulticast mode [ 1055.642151][T10607] bridge_slave_1: entered promiscuous mode [ 1056.325308][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.360066][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.648930][ T7904] Bluetooth: hci1: command tx timeout [ 1056.704370][T10607] team0: Port device team_slave_0 added [ 1056.717341][T10607] team0: Port device team_slave_1 added [ 1057.017811][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.017827][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.017852][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.036518][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.036538][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.036571][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.680989][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 1058.728826][ T7904] Bluetooth: hci1: command tx timeout [ 1058.877619][T10607] hsr_slave_0: entered promiscuous mode [ 1058.889805][T10607] hsr_slave_1: entered promiscuous mode [ 1058.890866][T10607] debugfs: 'hsr0' already exists in 'hsr' [ 1058.890889][T10607] Cannot create hsr debugfs directory [ 1059.144736][T10666] chnl_net:caif_netlink_parms(): no params data found [ 1059.614699][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.614783][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.006977][T10766] FAT-fs (loop1): unable to read boot sector [ 1061.469364][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'. [ 1063.443943][T10792] overlayfs: failed to clone upperpath [ 1065.791044][T10795] netlink: 'syz.8.935': attribute type 3 has an invalid length. [ 1065.791851][T10795] netlink: 'syz.8.935': attribute type 3 has an invalid length. [ 1067.115940][T10821] overlayfs: failed to clone upperpath [ 1067.138293][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.138482][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.153084][T10666] bridge_slave_0: entered allmulticast mode [ 1067.155853][T10666] bridge_slave_0: entered promiscuous mode [ 1068.111960][T10824] netlink: 'syz.8.945': attribute type 3 has an invalid length. [ 1068.112202][T10824] netlink: 'syz.8.945': attribute type 3 has an invalid length. [ 1068.116155][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.116377][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.116559][T10666] bridge_slave_1: entered allmulticast mode [ 1068.157632][T10666] bridge_slave_1: entered promiscuous mode [ 1068.688905][T10833] FAT-fs (loop1): unable to read boot sector [ 1069.587949][T10666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.674675][T10666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.163378][T10666] team0: Port device team_slave_0 added [ 1070.207727][T10666] team0: Port device team_slave_1 added [ 1070.876941][ T38] audit: type=1326 audit(1760206431.334:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.876999][ T38] audit: type=1326 audit(1760206431.334:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877045][ T38] audit: type=1326 audit(1760206431.334:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877095][ T38] audit: type=1326 audit(1760206431.334:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877139][ T38] audit: type=1326 audit(1760206431.334:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877183][ T38] audit: type=1326 audit(1760206431.334:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877226][ T38] audit: type=1326 audit(1760206431.334:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877270][ T38] audit: type=1326 audit(1760206431.334:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877314][ T38] audit: type=1326 audit(1760206431.334:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1070.877358][ T38] audit: type=1326 audit(1760206431.334:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10856 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1072.056194][T10666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.056213][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.056240][T10666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.093927][T10452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.125795][T10666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.125811][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.125838][T10666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.393354][ T7591] bridge_slave_1: left allmulticast mode [ 1072.393382][ T7591] bridge_slave_1: left promiscuous mode [ 1072.393612][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.480372][ T7591] bridge_slave_0: left allmulticast mode [ 1072.480416][ T7591] bridge_slave_0: left promiscuous mode [ 1072.480694][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.576927][ T7591] bridge_slave_1: left allmulticast mode [ 1072.576958][ T7591] bridge_slave_1: left promiscuous mode [ 1072.577183][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.650168][ T7591] bridge_slave_0: left allmulticast mode [ 1072.650195][ T7591] bridge_slave_0: left promiscuous mode [ 1072.650436][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.649309][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.730351][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.751076][ T7591] bond0 (unregistering): Released all slaves [ 1080.743135][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1081.056068][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1081.090903][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1081.130607][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1081.151511][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1083.210915][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.317147][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.362260][ T7591] bond0 (unregistering): Released all slaves [ 1083.869761][ T61] Bluetooth: hci5: command tx timeout [ 1085.427789][T10666] hsr_slave_0: entered promiscuous mode [ 1085.429631][T10666] hsr_slave_1: entered promiscuous mode [ 1085.430538][T10666] debugfs: 'hsr0' already exists in 'hsr' [ 1085.430562][T10666] Cannot create hsr debugfs directory [ 1085.928826][ T61] Bluetooth: hci5: command tx timeout [ 1087.011789][T11007] syz.0.988 (11007) used greatest stack depth: 18056 bytes left [ 1088.594518][ T61] Bluetooth: hci5: command tx timeout [ 1089.613140][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 1089.689493][ T7591] hsr_slave_0: left promiscuous mode [ 1090.073024][ T7591] hsr_slave_1: left promiscuous mode [ 1090.077389][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.109375][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.408910][ T7904] Bluetooth: hci5: command tx timeout [ 1091.994384][ T8737] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1092.352175][ T7591] hsr_slave_0: left promiscuous mode [ 1092.388927][ T7591] hsr_slave_1: left promiscuous mode [ 1092.390706][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.394474][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 1092.394489][ T38] audit: type=1326 audit(1760206452.964:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.394749][ T38] audit: type=1326 audit(1760206452.964:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.396702][ T38] audit: type=1326 audit(1760206452.964:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.396841][ T38] audit: type=1326 audit(1760206452.964:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.397000][ T38] audit: type=1326 audit(1760206452.964:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.397373][ T38] audit: type=1326 audit(1760206452.964:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.397522][ T38] audit: type=1326 audit(1760206452.964:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.397670][ T38] audit: type=1326 audit(1760206452.964:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.397955][ T38] audit: type=1326 audit(1760206452.964:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.398102][ T38] audit: type=1326 audit(1760206452.964:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11048 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1092.408754][ T8737] usb 9-1: Using ep0 maxpacket: 8 [ 1092.411240][ T8737] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1092.411284][ T8737] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1092.411308][ T8737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.644679][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.808705][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 1093.840742][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1094.119530][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1094.217965][ T8737] usb 9-1: string descriptor 0 read error: -71 [ 1094.349473][ T8737] usb 9-1: USB disconnect, device number 7 [ 1100.929583][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1101.139504][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1101.840834][ T7904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1101.861173][ T7904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1101.870473][ T7904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1101.872311][ T7904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1101.875238][ T7904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1103.959273][ T7904] Bluetooth: hci0: command tx timeout [ 1106.559607][ T6003] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 1106.838388][ T7904] Bluetooth: hci0: command tx timeout [ 1106.878893][ T6003] usb 9-1: Invalid ep0 maxpacket: 16 [ 1107.011461][ T6003] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 1107.183916][ T6003] usb 9-1: Invalid ep0 maxpacket: 16 [ 1107.184513][ T6003] usb usb9-port1: attempt power cycle [ 1107.528798][ T6003] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1107.569744][ T6003] usb 9-1: Invalid ep0 maxpacket: 16 [ 1107.715046][ T6003] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1107.731158][ T6003] usb 9-1: Invalid ep0 maxpacket: 16 [ 1107.731463][ T6003] usb usb9-port1: unable to enumerate USB device [ 1108.330972][T11148] netlink: 'syz.0.1032': attribute type 3 has an invalid length. [ 1108.332029][T11148] netlink: 'syz.0.1032': attribute type 3 has an invalid length. [ 1108.895132][ T7904] Bluetooth: hci0: command tx timeout [ 1109.649045][T10925] chnl_net:caif_netlink_parms(): no params data found [ 1110.013205][T11104] chnl_net:caif_netlink_parms(): no params data found [ 1110.333691][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.333834][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.333992][T10925] bridge_slave_0: entered allmulticast mode [ 1110.335901][T10925] bridge_slave_0: entered promiscuous mode [ 1110.355204][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.355355][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.355569][T10925] bridge_slave_1: entered allmulticast mode [ 1110.358490][T10925] bridge_slave_1: entered promiscuous mode [ 1110.855322][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.978770][ T7904] Bluetooth: hci0: command tx timeout [ 1111.098896][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.107764][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1036'. [ 1111.374193][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1111.376758][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1111.377854][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.401254][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.404263][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1111.458795][T11104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.458936][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.459169][T11104] bridge_slave_0: entered allmulticast mode [ 1111.462643][T11104] bridge_slave_0: entered promiscuous mode [ 1111.729154][T11104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.729295][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.729527][T11104] bridge_slave_1: entered allmulticast mode [ 1111.731681][T11104] bridge_slave_1: entered promiscuous mode [ 1111.974748][T10925] team0: Port device team_slave_0 added [ 1112.442575][T10925] team0: Port device team_slave_1 added [ 1112.451171][T11104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.915848][T11104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.025378][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1045'. [ 1113.140106][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.140122][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.140148][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.449341][ T7904] Bluetooth: hci1: command tx timeout [ 1113.469843][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.469855][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.469874][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.474361][T11104] team0: Port device team_slave_0 added [ 1113.598375][T11104] team0: Port device team_slave_1 added [ 1115.505939][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 1115.528800][ T7904] Bluetooth: hci1: command tx timeout [ 1115.935450][T11104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.935467][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.935625][T11104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.083641][T11104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.083658][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.083684][T11104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.156770][T10925] hsr_slave_0: entered promiscuous mode [ 1116.157997][T10925] hsr_slave_1: entered promiscuous mode [ 1116.635178][T11104] hsr_slave_0: entered promiscuous mode [ 1116.636539][T11104] hsr_slave_1: entered promiscuous mode [ 1116.637588][T11104] debugfs: 'hsr0' already exists in 'hsr' [ 1116.637613][T11104] Cannot create hsr debugfs directory [ 1117.620229][ T7904] Bluetooth: hci1: command tx timeout [ 1117.861479][ T7591] bridge_slave_1: left allmulticast mode [ 1117.861509][ T7591] bridge_slave_1: left promiscuous mode [ 1117.861781][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.910594][ T7591] bridge_slave_0: left allmulticast mode [ 1117.910622][ T7591] bridge_slave_0: left promiscuous mode [ 1117.910902][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.108282][ T7591] bridge_slave_1: left allmulticast mode [ 1118.108309][ T7591] bridge_slave_1: left promiscuous mode [ 1118.110119][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.181224][ T7591] bridge_slave_0: left allmulticast mode [ 1118.181253][ T7591] bridge_slave_0: left promiscuous mode [ 1118.181483][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.275520][ T7591] bridge_slave_1: left allmulticast mode [ 1118.275546][ T7591] bridge_slave_1: left promiscuous mode [ 1118.289313][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.330241][ T7591] bridge_slave_0: left allmulticast mode [ 1118.330267][ T7591] bridge_slave_0: left promiscuous mode [ 1118.330595][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.397293][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 1119.659278][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.689107][ T7904] Bluetooth: hci1: command tx timeout [ 1119.739238][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.791136][ T7591] bond0 (unregistering): Released all slaves [ 1119.989210][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.244626][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.320701][ T7591] bond0 (unregistering): Released all slaves [ 1121.057115][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.057188][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.346925][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1074'. [ 1121.660597][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.375305][ T6003] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1122.572285][ T6003] usb 9-1: Using ep0 maxpacket: 8 [ 1122.611010][ T6003] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1122.611282][ T6003] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1122.611360][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.775166][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.831339][ T7591] bond0 (unregistering): Released all slaves [ 1123.270906][T11292] netlink: 'syz.0.1078': attribute type 3 has an invalid length. [ 1123.272207][T11292] netlink: 'syz.0.1078': attribute type 3 has an invalid length. [ 1125.610033][ T6003] usb 9-1: string descriptor 0 read error: -71 [ 1125.854984][ T6003] usb 9-1: USB disconnect, device number 12 [ 1125.949929][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 1126.057654][T11179] chnl_net:caif_netlink_parms(): no params data found [ 1126.179667][T11309] netlink: 'syz.8.1083': attribute type 3 has an invalid length. [ 1126.182454][T11309] netlink: 'syz.8.1083': attribute type 3 has an invalid length. [ 1127.868712][ T7591] hsr_slave_0: left promiscuous mode [ 1127.888732][ T7591] hsr_slave_1: left promiscuous mode [ 1127.889761][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.929418][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.346866][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 1128.352641][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 1128.388451][ T7591] hsr_slave_0: left promiscuous mode [ 1129.199019][ T7591] hsr_slave_1: left promiscuous mode [ 1129.199976][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.239646][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.408956][ T7591] hsr_slave_0: left promiscuous mode [ 1129.428867][ T7591] hsr_slave_1: left promiscuous mode [ 1129.429670][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.469544][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.169318][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1130.299443][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1131.351948][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1131.529411][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1132.510612][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1132.639296][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1134.206413][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1097'. [ 1134.207039][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1097'. [ 1136.592800][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.592958][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.593176][T11179] bridge_slave_0: entered allmulticast mode [ 1136.596533][T11179] bridge_slave_0: entered promiscuous mode [ 1136.877406][T11179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.923344][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.970907][T11179] bridge_slave_1: entered allmulticast mode [ 1137.627200][T11179] bridge_slave_1: entered promiscuous mode [ 1138.074780][T11179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.128039][T11179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.140582][T11179] team0: Port device team_slave_0 added [ 1143.751735][T11179] team0: Port device team_slave_1 added [ 1143.834032][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1143.855656][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1143.856851][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1143.858426][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1143.880475][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1144.342022][T11179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.342039][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.446943][T11179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.447652][T11410] netlink: 'syz.0.1116': attribute type 3 has an invalid length. [ 1144.451140][T11410] netlink: 'syz.0.1116': attribute type 3 has an invalid length. [ 1145.532787][T11179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.532805][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.532835][T11179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.008928][ T61] Bluetooth: hci3: command tx timeout [ 1146.582592][T11179] hsr_slave_0: entered promiscuous mode [ 1146.583931][T11179] hsr_slave_1: entered promiscuous mode [ 1146.584913][T11179] debugfs: 'hsr0' already exists in 'hsr' [ 1146.584939][T11179] Cannot create hsr debugfs directory [ 1146.633718][T11104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1146.657835][ T38] kauditd_printk_skb: 31 callbacks suppressed [ 1146.657854][ T38] audit: type=1326 audit(1760206507.224:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.658015][ T38] audit: type=1326 audit(1760206507.224:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.663012][ T38] audit: type=1326 audit(1760206507.224:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.665329][ T38] audit: type=1326 audit(1760206507.234:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.665669][ T38] audit: type=1326 audit(1760206507.234:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.674680][ T38] audit: type=1326 audit(1760206507.244:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.684228][ T38] audit: type=1326 audit(1760206507.254:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.685208][ T38] audit: type=1326 audit(1760206507.254:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.686052][ T38] audit: type=1326 audit(1760206507.254:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.687024][ T38] audit: type=1326 audit(1760206507.254:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1146.758980][T11104] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1147.645954][T11104] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1148.090064][ T7904] Bluetooth: hci3: command tx timeout [ 1148.693268][T11104] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1149.971436][T11400] chnl_net:caif_netlink_parms(): no params data found [ 1150.168687][ T7904] Bluetooth: hci3: command tx timeout [ 1150.881389][T11179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1151.171782][T11179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1151.689306][ T8737] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 1151.889368][ T8737] usb 9-1: Invalid ep0 maxpacket: 16 [ 1152.058715][ T8737] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1152.106870][T11179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1152.209715][ T8737] usb 9-1: Invalid ep0 maxpacket: 16 [ 1152.210084][ T8737] usb usb9-port1: attempt power cycle [ 1152.248640][ T7904] Bluetooth: hci3: command tx timeout [ 1152.338601][T11179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1152.372666][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.373117][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.373284][T11400] bridge_slave_0: entered allmulticast mode [ 1152.375177][T11400] bridge_slave_0: entered promiscuous mode [ 1152.430873][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.430999][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.431208][T11400] bridge_slave_1: entered allmulticast mode [ 1152.436952][T11400] bridge_slave_1: entered promiscuous mode [ 1152.548659][ T8737] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 1152.569886][ T8737] usb 9-1: Invalid ep0 maxpacket: 16 [ 1152.698685][ T8737] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 1152.719199][ T8737] usb 9-1: Invalid ep0 maxpacket: 16 [ 1152.719538][ T8737] usb usb9-port1: unable to enumerate USB device [ 1152.764778][T11400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.779564][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.962042][T11400] team0: Port device team_slave_0 added [ 1152.976531][T11400] team0: Port device team_slave_1 added [ 1152.990148][T11104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.164944][T11400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.164959][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.164984][T11400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.205983][T11400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.206002][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.206033][T11400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.296391][T11400] hsr_slave_0: entered promiscuous mode [ 1155.297652][T11400] hsr_slave_1: entered promiscuous mode [ 1155.306102][T11400] debugfs: 'hsr0' already exists in 'hsr' [ 1155.306131][T11400] Cannot create hsr debugfs directory [ 1155.324183][T11104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.406093][T11517] capability: warning: `syz.0.1147' uses 32-bit capabilities (legacy support in use) [ 1155.474890][ T7591] bridge_slave_1: left allmulticast mode [ 1155.474920][ T7591] bridge_slave_1: left promiscuous mode [ 1155.475162][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.552596][ T7591] bridge_slave_0: left allmulticast mode [ 1155.552633][ T7591] bridge_slave_0: left promiscuous mode [ 1155.552915][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.109234][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.209965][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.270785][ T7591] bond0 (unregistering): Released all slaves [ 1157.461398][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.461528][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.857254][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.857396][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.249915][ T7591] hsr_slave_0: left promiscuous mode [ 1159.278864][ T7591] hsr_slave_1: left promiscuous mode [ 1159.279789][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.323530][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.999310][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1160.109190][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1161.544616][T11556] netlink: 'syz.8.1160': attribute type 3 has an invalid length. [ 1161.549531][T11556] netlink: 'syz.8.1160': attribute type 3 has an invalid length. [ 1162.161234][T11179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.533414][T11179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.565504][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.565606][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.615634][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.615749][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.499119][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1167'. [ 1164.660354][T11583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1164.671080][T11583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1164.672536][T11583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1164.674431][T11583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1164.675443][T11583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.058402][T11400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1166.109385][T11400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1166.414106][T11400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1166.454712][T11179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.484647][T11400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1166.963668][ T7904] Bluetooth: hci0: command tx timeout [ 1168.554936][ T7591] bridge_slave_1: left allmulticast mode [ 1168.554966][ T7591] bridge_slave_1: left promiscuous mode [ 1168.555294][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.620287][ T7591] bridge_slave_0: left allmulticast mode [ 1168.620315][ T7591] bridge_slave_0: left promiscuous mode [ 1168.620595][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.968676][ T7904] Bluetooth: hci0: command tx timeout [ 1171.151982][ T7904] Bluetooth: hci0: command tx timeout [ 1172.039267][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.119218][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.183299][ T7591] bond0 (unregistering): Released all slaves [ 1172.323611][T11581] chnl_net:caif_netlink_parms(): no params data found [ 1172.828945][ T7591] hsr_slave_0: left promiscuous mode [ 1172.868668][ T7591] hsr_slave_1: left promiscuous mode [ 1172.869783][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.923553][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.208584][ T7904] Bluetooth: hci0: command tx timeout [ 1174.853670][T11583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1174.871205][T11583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1174.872418][T11583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1174.873603][T11583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1174.874353][T11583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.189191][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1176.968866][ T7904] Bluetooth: hci1: command tx timeout [ 1177.409287][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1179.051912][ T7904] Bluetooth: hci1: command tx timeout [ 1180.339295][T11685] netlink: 'syz.8.1189': attribute type 3 has an invalid length. [ 1180.339539][T11685] netlink: 'syz.8.1189': attribute type 3 has an invalid length. [ 1181.130800][ T7904] Bluetooth: hci1: command tx timeout [ 1182.550313][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.551405][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.854464][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 1182.967115][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.967278][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.967446][T11581] bridge_slave_0: entered allmulticast mode [ 1182.974115][T11581] bridge_slave_0: entered promiscuous mode [ 1182.987995][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.989418][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.989651][T11581] bridge_slave_1: entered allmulticast mode [ 1183.000793][T11581] bridge_slave_1: entered promiscuous mode [ 1183.218829][ T7904] Bluetooth: hci1: command tx timeout [ 1183.249359][T11581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.281982][T11581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.573505][T11581] team0: Port device team_slave_0 added [ 1184.596885][T11400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.625446][T11581] team0: Port device team_slave_1 added [ 1184.882040][T11581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.882057][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.882085][T11581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.912676][T11581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.912694][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.912723][T11581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.275995][T11400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.367823][T11581] hsr_slave_0: entered promiscuous mode [ 1187.369378][T11581] hsr_slave_1: entered promiscuous mode [ 1187.394765][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.395024][ T8440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.678282][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.680020][ T8440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.539020][T11690] chnl_net:caif_netlink_parms(): no params data found [ 1189.753566][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 1189.753585][ T38] audit: type=1326 audit(1760206550.324:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.755217][ T38] audit: type=1326 audit(1760206550.324:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.757089][ T38] audit: type=1326 audit(1760206550.324:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.757731][ T38] audit: type=1326 audit(1760206550.324:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.779697][ T38] audit: type=1326 audit(1760206550.334:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.779748][ T38] audit: type=1326 audit(1760206550.334:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.779891][ T38] audit: type=1326 audit(1760206550.334:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.780013][ T38] audit: type=1326 audit(1760206550.334:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.780057][ T38] audit: type=1326 audit(1760206550.334:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1189.780105][ T38] audit: type=1326 audit(1760206550.334:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5dceec9 code=0x7ffc0000 [ 1190.459941][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.460073][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.460416][T11690] bridge_slave_0: entered allmulticast mode [ 1190.465196][T11690] bridge_slave_0: entered promiscuous mode [ 1190.820159][T11690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.820337][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.820568][T11690] bridge_slave_1: entered allmulticast mode [ 1190.823147][T11690] bridge_slave_1: entered promiscuous mode [ 1193.741669][T11690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.773473][T11690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.136483][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'. [ 1194.137087][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'. [ 1194.427891][T11690] team0: Port device team_slave_0 added [ 1194.477656][T11690] team0: Port device team_slave_1 added [ 1196.657777][T11690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.657797][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.657828][T11690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.616630][T11690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.616646][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.616680][T11690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.656156][ T7591] bridge_slave_1: left allmulticast mode [ 1198.656183][ T7591] bridge_slave_1: left promiscuous mode [ 1198.656413][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.149920][ T7591] bridge_slave_0: left allmulticast mode [ 1199.149940][ T7591] bridge_slave_0: left promiscuous mode [ 1199.150132][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.485740][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1255'. [ 1199.486265][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1255'. [ 1200.819396][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.859356][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.882650][ T7591] bond0 (unregistering): Released all slaves [ 1201.541069][T11690] hsr_slave_0: entered promiscuous mode [ 1201.542605][T11690] hsr_slave_1: entered promiscuous mode [ 1201.543673][T11690] debugfs: 'hsr0' already exists in 'hsr' [ 1201.543699][T11690] Cannot create hsr debugfs directory [ 1201.968722][ T7591] hsr_slave_0: left promiscuous mode [ 1202.860627][ T7591] hsr_slave_1: left promiscuous mode [ 1202.861525][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.899339][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.779203][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 1203.979877][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 1204.869222][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 1204.869896][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 1204.923728][T11583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1204.938450][T11583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1204.941152][T11583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1204.947447][T11583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1204.948331][T11583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1205.353547][T11930] FAT-fs (loop17): unable to read boot sector [ 1207.896672][T11583] Bluetooth: hci5: command tx timeout [ 1210.446851][T11583] Bluetooth: hci5: command tx timeout [ 1212.489011][T11583] Bluetooth: hci5: command tx timeout [ 1212.698601][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1276'. [ 1212.894929][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 1212.895616][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 1216.681966][T11583] Bluetooth: hci5: command tx timeout [ 1217.333650][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.538750][T11581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1217.713597][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1284'. [ 1217.811502][T11581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1217.921506][T11581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1219.526340][T11581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1219.987008][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1287'. [ 1219.987137][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1287'. [ 1219.987172][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1287'. [ 1220.808043][T12008] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1288'. [ 1221.556733][ T23] ================================================================== [ 1221.556750][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1221.556871][ T23] Read of size 8 at addr ffffc9000c771090 by task irq_work/0/23 [ 1221.556886][ T23] [ 1221.556906][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1221.556926][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1221.556945][ T23] Call Trace: [ 1221.556955][ T23] [ 1221.556963][ T23] dump_stack_lvl+0x189/0x250 [ 1221.557001][ T23] ? run_irq_workd+0x116/0x190 [ 1221.557084][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1221.557107][ T23] ? __pfx__printk+0x10/0x10 [ 1221.557133][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1221.557178][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1221.557202][ T23] print_report+0xca/0x240 [ 1221.557229][ T23] ? run_irq_workd+0x116/0x190 [ 1221.557251][ T23] kasan_report+0x118/0x150 [ 1221.557296][ T23] ? run_irq_workd+0x116/0x190 [ 1221.557322][ T23] run_irq_workd+0x116/0x190 [ 1221.557343][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1221.557365][ T23] ? schedule+0x91/0x360 [ 1221.557457][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1221.557492][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1221.557511][ T23] smpboot_thread_fn+0x53f/0xa60 [ 1221.557532][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1221.557556][ T23] kthread+0x711/0x8a0 [ 1221.557580][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1221.557600][ T23] ? __pfx_kthread+0x10/0x10 [ 1221.557622][ T23] ? rt_spin_unlock+0x150/0x200 [ 1221.557661][ T23] ? rt_spin_unlock+0x161/0x200 [ 1221.557677][ T23] ? __pfx_kthread+0x10/0x10 [ 1221.557706][ T23] ret_from_fork+0x4b9/0x870 [ 1221.557732][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1221.557754][ T23] ? __switch_to_asm+0x39/0x70 [ 1221.557775][ T23] ? __switch_to_asm+0x33/0x70 [ 1221.557795][ T23] ? __pfx_kthread+0x10/0x10 [ 1221.557832][ T23] ret_from_fork_asm+0x1a/0x30 [ 1221.557864][ T23] [ 1221.557871][ T23] [ 1221.557876][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1221.557901][ T23] Memory state around the buggy address: [ 1221.557910][ T23] ffffc9000c770f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1221.557920][ T23] ffffc9000c771000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1221.557933][ T23] >ffffc9000c771080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1221.557946][ T23] ^ [ 1221.557954][ T23] ffffc9000c771100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1221.557964][ T23] ffffc9000c771180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1221.557972][ T23] ================================================================== [ 1221.557991][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1221.558003][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1221.558021][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1221.558030][ T23] Call Trace: [ 1221.558036][ T23] [ 1221.558042][ T23] dump_stack_lvl+0x99/0x250 [ 1221.558061][ T23] ? __asan_memcpy+0x40/0x70 [ 1221.558078][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1221.558096][ T23] ? __pfx__printk+0x10/0x10 [ 1221.558120][ T23] vpanic+0x237/0x6d0 [ 1221.558134][ T23] ? __pfx_vpanic+0x10/0x10 [ 1221.558153][ T23] panic+0xb9/0xc0 [ 1221.558189][ T23] ? __pfx_panic+0x10/0x10 [ 1221.558203][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1221.558225][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1221.558248][ T23] ? run_irq_workd+0x116/0x190 [ 1221.558271][ T23] check_panic_on_warn+0x89/0xb0 [ 1221.558321][ T23] ? run_irq_workd+0x116/0x190 [ 1221.558349][ T23] end_report+0x78/0x160 [ 1221.558375][ T23] kasan_report+0x129/0x150 [ 1221.558405][ T23] ? run_irq_workd+0x116/0x190 [ 1221.558438][ T23] run_irq_workd+0x116/0x190 [ 1221.558470][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1221.558495][ T23] ? schedule+0x91/0x360 [ 1221.558517][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1221.558543][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1221.558568][ T23] smpboot_thread_fn+0x53f/0xa60 [ 1221.558594][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1221.558625][ T23] kthread+0x711/0x8a0 [ 1221.558656][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1221.558682][ T23] ? __pfx_kthread+0x10/0x10 [ 1221.558710][ T23] ? rt_spin_unlock+0x150/0x200 [ 1221.558731][ T23] ? rt_spin_unlock+0x161/0x200 [ 1221.558749][ T23] ? __pfx_kthread+0x10/0x10 [ 1221.558779][ T23] ret_from_fork+0x4b9/0x870 [ 1221.558805][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1221.558833][ T23] ? __switch_to_asm+0x39/0x70 [ 1221.558860][ T23] ? __switch_to_asm+0x33/0x70 [ 1221.558886][ T23] ? __pfx_kthread+0x10/0x10 [ 1221.558917][ T23] ret_from_fork_asm+0x1a/0x30 [ 1221.558954][ T23] [ 1221.559273][ T23] Kernel Offset: disabled