last executing test programs: 16m2.808742753s ago: executing program 3 (id=1146): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000300)=@generic={0x0, r3}, 0x18) 16m2.545548748s ago: executing program 3 (id=1148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 16m1.102720296s ago: executing program 3 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x76, 0x101301) setpriority(0x0, r1, 0x3) unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000012000100000000000000000010030200fffe4e2200000000ffffffff000000000000000000000000fcffffff0000000000000000", @ANYRES16=r3, @ANYRESOCT=r3], 0x4c}, 0x1, 0x0, 0x0, 0x404c810}, 0x4010) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r6, r7}}}], 0x20, 0x40044}}], 0x1, 0x4) r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r9, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) 15m59.983177481s ago: executing program 3 (id=1161): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x7, 0x1, 0x2, 0x4, 0x2, [0xa57b, 0xff, 0x3, 0x3dfb]}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x7, 0x5f, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, 0x0) fsopen(&(0x7f0000000200)='sysv\x00', 0x1) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f80), 0x0, 0x45833af92e4b39ff, 0x0) 15m52.482842141s ago: executing program 3 (id=1180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x20040001) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:syz0'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 15m50.622868021s ago: executing program 3 (id=1186): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x88c0) accept4(r0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd7000044000000800030001000000080001000000000008003e000500000008004b0028"], 0x30}}, 0x8040) 15m35.079570528s ago: executing program 32 (id=1186): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x88c0) accept4(r0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd7000044000000800030001000000080001000000000008003e000500000008004b0028"], 0x30}}, 0x8040) 8m57.297113829s ago: executing program 4 (id=2262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=@fuse={0xc, 0x81, {0xfffffffe, 0xffffff01, 0x664}}, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 8m56.158520328s ago: executing program 4 (id=2266): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m54.642574064s ago: executing program 4 (id=2271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}], 0x1, 0x2, 0x2) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x48000) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) request_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 8m52.953578512s ago: executing program 4 (id=2275): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010ac0d4b0204000000000109022400010000300009040000010300010009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)={0x0, 0xb, 0x41, {0x41, 0x7, "f9d9855d539b05fb0f4526c99263e5d04046bd6e0be4b2368edc697a47e365f91576f85e877a54394e0516a6516a69f346f27665c294e6d0be5c203fe45ffb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8m51.246624835s ago: executing program 4 (id=2281): syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xc87b, 0x400, 0x3}, 0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) 8m50.168423439s ago: executing program 4 (id=2286): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$kcm(r0, 0x0, 0x4000080) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000014) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$xdp(0x2c, 0x3, 0x0) 8m34.71344593s ago: executing program 33 (id=2286): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$kcm(r0, 0x0, 0x4000080) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000014) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$xdp(0x2c, 0x3, 0x0) 47.205367617s ago: executing program 1 (id=3629): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x42, '\x00', r0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd700000000000010000000400048008000200010000000800010000000000180008"], 0x40}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r5, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d61630005000100070000001400078008001340000000000800124009"], 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) 46.95329064s ago: executing program 1 (id=3633): socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 40.923765911s ago: executing program 1 (id=3650): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r4, 0x0, 0x4800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017cedf82cf279cf75650eb4239196ec762ffee0462ecfc54550fb8166d784541fd4b3d499f4a0bdd13f152d18d2303f242cd482244277a3b0b4d8d71bacecdc9e8e82ca5373fb8fe62feb817d863fbdfe68410c9d045816cceb5222fe45adfe3b0953235f5928ff1b74be1aa6a056f5563c232dc2ca3fa16c2531d34a35ba29fbe266852b0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='io_uring_complete\x00'}, 0x18) r8 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r9, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 37.864717147s ago: executing program 1 (id=3662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, 0x0, 0x0) 37.382740312s ago: executing program 1 (id=3665): signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="a870bf5b000000000000320000000000000000010800090002000000548599ed"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) 36.178743941s ago: executing program 1 (id=3668): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x4080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="2ff385c8e37018ac47d3820d9b16a395f1bdd6d340ccc87c8e161792f79d4309cf0c3cbd272e6891fcf6546f8054e08ae44018b2bb9172b71d7407dc22b51f5957dbe1d045032b1788e7f943fdd8c67d13d0a3b72442a90214e32a3f183d7ce52f54164903435fa7a6f4ea9931771c1455dbd0205afc02"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 34.356923321s ago: executing program 6 (id=3675): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x3, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 33.780014083s ago: executing program 0 (id=3683): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 33.615299999s ago: executing program 0 (id=3686): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4005, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 33.117332119s ago: executing program 6 (id=3687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 31.667452025s ago: executing program 0 (id=3691): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {0x0}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 29.644712288s ago: executing program 6 (id=3693): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2c, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017cedf82cf279cf75650eb4239196ec762ffee0462ecfc54550fb8166d784541fd4b3d499f4a0bdd13f152d18d2303f242cd482244277a3b0b4d8d71bacecdc9e8e82ca5373fb8fe62feb817d863fbdfe68410c9d045816cceb5222fe45adfe3b0953235f5928ff1b74be1aa6a056f5563c232dc2ca3fa16c2531d34a35ba29fbe266852b0"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='io_uring_complete\x00'}, 0x18) r7 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 29.607114361s ago: executing program 0 (id=3694): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r4, 0x0, 0x4800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017cedf82cf279cf75650eb4239196ec762ffee0462ecfc54550fb8166d784541fd4b3d499f4a0bdd13f152d18d2303f242cd482244277a3b0b4d8d71bacecdc9e8e82ca5373fb8fe62feb817d863fbdfe68410c9d045816cceb5222fe45adfe3b0953235f5928ff1b74be1aa6a056f5563c232dc2ca3fa16c2531d34a35ba29fbe266852b0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='io_uring_complete\x00'}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r9, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 24.881049824s ago: executing program 0 (id=3704): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',msize=0x000000000000100']) 24.838935466s ago: executing program 6 (id=3705): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {0x0}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1", 0xb3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/86, 0x56}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d", 0xd3}, {&(0x7f0000000e80)="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", 0x1c2}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 23.840071462s ago: executing program 0 (id=3707): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000200)=0x8002, 0x4) sendto$inet(r2, &(0x7f00000000c0)="f46183000000", 0x6, 0x4084, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5202) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x1, 0x1, 0x5, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 23.839537795s ago: executing program 6 (id=3708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 23.732396129s ago: executing program 2 (id=3709): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_setup(0x3ff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000098d000/0x2000)=nil, 0x2000}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0], 0x44}}, 0x80) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}]}, 0x28}}, 0x4000) 23.397353301s ago: executing program 6 (id=3710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 22.56371654s ago: executing program 2 (id=3711): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x3, 0x40000121, 0x0) 21.581483188s ago: executing program 2 (id=3714): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x42, '\x00', r0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd700000000000010000000400048008000200010000000800010000000000180008"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r6, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup(r10) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d61630005000100070000001400078008001340000000000800124009"], 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) 21.353750636s ago: executing program 2 (id=3716): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) 21.094586522s ago: executing program 34 (id=3668): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x4080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="2ff385c8e37018ac47d3820d9b16a395f1bdd6d340ccc87c8e161792f79d4309cf0c3cbd272e6891fcf6546f8054e08ae44018b2bb9172b71d7407dc22b51f5957dbe1d045032b1788e7f943fdd8c67d13d0a3b72442a90214e32a3f183d7ce52f54164903435fa7a6f4ea9931771c1455dbd0205afc02"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 21.085435057s ago: executing program 2 (id=3718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6fea}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000800)={&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000640)="89fcbe471db9beb367fb079cb96302985b94a72f6b2fc57ddff7eb0761656246438ef1c5e8bbcc3b938eb01f2fa8cd7626fdecf7d104809b4073993961f4ecda349c3edf9271a87c67ee5e56941b4b3c34c2115411f6f19d97", 0x59}, {&(0x7f00000006c0)="e5674b9bfe5928aa7603f04e06a304d22c7b1f981976c0a46b07ae12f11c27f07603c277ebafe419c5ba54e890bdfaa927760c1a69b809cb47e59491e0d2de572171cef966bac1ee62a315436b3e912de9dad7c8265dbb26fb6377680cddbdd15cdd01eee78fc52123c4e29f47cb3f766e650e2044c66b73ec6e84aa9c60025ccf190c0d6b8a0665fa4e50eed6a57a66911656609434648d19f46cc6cc67e8ba1989519b94fe688cdacdd0051979e46cd85e49c47d931bb45b28b2b2675970852ec8f935c7e841742250c3ef39dc3d", 0xcf}], 0x2, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}], 0x30}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000080000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000054}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 20.852070438s ago: executing program 2 (id=3719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18.498515571s ago: executing program 5 (id=3722): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}]}, {0x0, [0x61]}}, 0x0, 0x2f, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) 18.462301076s ago: executing program 5 (id=3723): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{0x0}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 17.593606326s ago: executing program 5 (id=3724): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d", 0x13) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = io_uring_setup(0x3e45, &(0x7f0000000280)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 16.725120874s ago: executing program 5 (id=3725): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r4, 0x0, 0x4800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017cedf82cf279cf75650eb4239196ec762ffee0462ecfc54550fb8166d784541fd4b3d499f4a0bdd13f152d18d2303f242cd482244277a3b0b4d8d71bacecdc9e8e82ca5373fb8fe62feb817d863fbdfe68410c9d045816cceb5222fe45adfe3b0953235f5928ff1b74be1aa6a056f5563c232dc2ca3fa16c2531d34a35ba29fbe266852b0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r9, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 16.385222988s ago: executing program 5 (id=3726): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000480)="99538e1b44f5f8acf8519857905277a02071c40cfd1b81c594952d2dce91656dba5dbbf5efaa07fd39c91d7441a93f3e6c5c34f128b1d0cf7d9a06e93e36f116297c8e424352ae6816b1ebbe4ca2511c77f2a3020598f322f88ad1eca41d59cb8434a55a7fcb0b2ea841d0d0c82bce8220f1252964efdde2d754fa7cd3373d775df7aee823d0feb85b0ce22f40d265", &(0x7f0000000540)=""/160}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x12060) 15.500785706s ago: executing program 5 (id=3727): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0xd, 0x4, "97dc264d"}, 0x0, 0x0, 0x0, 0x0}) 8.512127054s ago: executing program 35 (id=3707): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000200)=0x8002, 0x4) sendto$inet(r2, &(0x7f00000000c0)="f46183000000", 0x6, 0x4084, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5202) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x1, 0x1, 0x5, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.012442161s ago: executing program 36 (id=3710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 5.506404326s ago: executing program 37 (id=3719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 0s ago: executing program 38 (id=3727): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0xd, 0x4, "97dc264d"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): dv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.211847][T14114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.270907][ T51] Bluetooth: hci2: command tx timeout [ 846.374675][T14169] bridge6: entered allmulticast mode [ 846.392214][T14114] hsr_slave_0: entered promiscuous mode [ 846.408729][T14114] hsr_slave_1: entered promiscuous mode [ 846.439903][T14114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.462024][T14171] netlink: 'syz.2.2350': attribute type 21 has an invalid length. [ 846.469869][T14171] IPv6: NLM_F_CREATE should be specified when creating new route [ 847.322952][T14114] Cannot create hsr debugfs directory [ 847.960639][T14117] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 848.340664][ T51] Bluetooth: hci2: command tx timeout [ 848.616182][T14114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 848.725341][T14117] usb 6-1: device descriptor read/64, error -71 [ 848.758413][T14114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 848.772800][T14114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 848.783104][T14114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 849.651860][T14117] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 849.709180][T14114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.739718][T14114] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.762915][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.770197][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.794018][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.801305][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.808983][T14117] usb 6-1: device descriptor read/64, error -71 [ 850.262841][T14117] usb usb6-port1: attempt power cycle [ 850.431100][T12518] Bluetooth: hci2: command tx timeout [ 852.491639][T14224] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 852.971223][T14229] netlink: 'syz.5.2362': attribute type 4 has an invalid length. [ 852.979032][T14229] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2362'. [ 853.972458][T14238] netlink: 'syz.1.2364': attribute type 21 has an invalid length. [ 854.028714][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.414841][T14252] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2367'. [ 856.349289][T14114] veth0_vlan: entered promiscuous mode [ 856.364976][T14114] veth1_vlan: entered promiscuous mode [ 857.843468][T14114] veth0_macvtap: entered promiscuous mode [ 857.855691][T14114] veth1_macvtap: entered promiscuous mode [ 857.880871][T14114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.908285][T14114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.944050][T14114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.992183][T14114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.019744][T14114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.147181][T14114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.162437][T14270] tipc: Enabling of bearer rejected, already enabled [ 858.194579][T14285] tipc: Enabling of bearer rejected, failed to enable media [ 858.559974][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.659494][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.806932][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.836658][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.054014][T14309] tipc: Started in network mode [ 860.059041][T14309] tipc: Node identity 8a1c420053bf, cluster identity 4711 [ 860.208559][T14309] tipc: Enabled bearer , priority 10 [ 860.307802][T14314] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2382'. [ 860.991811][T14313] tipc: Resetting bearer [ 861.287467][T14306] tipc: Resetting bearer [ 861.300583][ T9270] tipc: Node number set to 3651355136 [ 861.324101][T14320] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2384'. [ 862.770600][ T9267] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 862.951443][ T9267] usb 6-1: Using ep0 maxpacket: 16 [ 863.020274][ T9267] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 863.043936][ T9267] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.084139][ T9267] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.129969][ T9267] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.150543][ T9267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.167976][ T9267] usb 6-1: Product: syz [ 863.176106][ T9267] usb 6-1: Manufacturer: syz [ 863.181023][ T9267] usb 6-1: SerialNumber: syz [ 863.985387][ T9267] usb 6-1: 0:2 : does not exist [ 864.023657][ T9267] usb 6-1: USB disconnect, device number 18 [ 864.552281][T14352] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2395'. [ 865.072702][T14306] tipc: Disabling bearer [ 865.083947][T14328] tipc: Enabling of bearer rejected, already enabled [ 865.491190][T14364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2397'. [ 866.652738][T14378] netlink: 'syz.2.2403': attribute type 21 has an invalid length. [ 868.722333][T14394] tipc: Enabling of bearer rejected, already enabled [ 870.096655][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.103035][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.594216][T14423] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2416'. [ 877.014286][T14475] netlink: 'syz.6.2432': attribute type 4 has an invalid length. [ 877.022240][T14475] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2432'. [ 877.680499][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 878.607218][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 878.645796][ T5895] usb 6-1: config 89 has an invalid interface number: 1 but max is 0 [ 878.673589][ T5895] usb 6-1: config 89 has no interface number 0 [ 878.707442][ T5895] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 878.731250][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.750523][ T5895] usb 6-1: Product: syz [ 878.754755][ T5895] usb 6-1: Manufacturer: syz [ 878.759386][ T5895] usb 6-1: SerialNumber: syz [ 879.877953][T14495] netlink: 'syz.5.2433': attribute type 21 has an invalid length. [ 879.886320][T14495] IPv6: NLM_F_CREATE should be specified when creating new route [ 880.469993][ T5895] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 880.487662][ T5895] usb 6-1: selecting invalid altsetting 1 [ 880.494819][ T5895] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 880.530971][ T5895] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 880.551776][ T5895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 880.560737][ T5895] usb 6-1: media controller created [ 880.602892][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.772280][ T5895] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 880.779833][ T5895] zl10353_read_register: readreg error (reg=127, ret==-71) [ 880.789274][ T5895] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 881.492422][ T5895] usb 6-1: USB disconnect, device number 19 [ 881.933031][T14513] siw: device registration error -23 [ 886.416558][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2459'. [ 887.662153][ T9267] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 887.820193][T14592] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 887.843488][ T9267] usb 7-1: Using ep0 maxpacket: 16 [ 887.861016][ T9267] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 887.896282][ T9267] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.955307][ T9267] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.015280][ T9267] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 888.036867][ T9267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.066105][ T9267] usb 7-1: Product: syz [ 888.075624][ T9267] usb 7-1: Manufacturer: syz [ 888.080271][ T9267] usb 7-1: SerialNumber: syz [ 888.563606][ T9267] usb 7-1: 0:2 : does not exist [ 889.328490][ T9267] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 889.371726][ T9267] usb 7-1: USB disconnect, device number 2 [ 889.417409][T14480] udevd[14480]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.445831][T14665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.461326][T14665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.500969][T14665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.508704][T14665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.078873][T14688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 895.574930][T14693] netlink: 5188 bytes leftover after parsing attributes in process `syz.5.2499'. [ 896.992818][T14710] netlink: 'syz.5.2502': attribute type 4 has an invalid length. [ 897.000845][T14710] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2502'. [ 898.702353][ T9267] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 899.001771][ T9267] usb 6-1: Using ep0 maxpacket: 16 [ 899.028850][ T9267] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 899.726978][ T9267] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.897904][ T9267] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.954053][ T9267] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 899.971574][ T9267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.979625][ T9267] usb 6-1: Product: syz [ 900.018018][ T9267] usb 6-1: Manufacturer: syz [ 900.030489][ T9267] usb 6-1: SerialNumber: syz [ 900.521251][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2512'. [ 900.646671][ T9267] usb 6-1: 0:2 : does not exist [ 901.321985][ T9267] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 901.404773][ T9267] usb 6-1: USB disconnect, device number 20 [ 901.675730][T14758] tipc: Enabling of bearer rejected, already enabled [ 906.280615][T14795] syz!: rxe_newlink: already configured on team_slave_0 [ 906.807631][T14800] netlink: 'syz.5.2531': attribute type 1 has an invalid length. [ 907.102492][T14800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 907.126390][T14803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 907.149255][T14803] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 907.321222][T14803] bond3: (slave vti0): Error -95 calling set_mac_address [ 907.433736][T14812] trusted_key: encrypted_key: insufficient parameters specified [ 907.449524][T14812] trusted_key: encrypted_key: keylen parameter is missing [ 909.233277][ T9270] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 909.510590][ T9270] usb 7-1: Using ep0 maxpacket: 32 [ 910.042257][ T9270] usb 7-1: config 89 has an invalid interface number: 1 but max is 0 [ 910.053677][ T9270] usb 7-1: config 89 has no interface number 0 [ 910.074517][ T9270] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 910.091816][ T9270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.110596][ T9270] usb 7-1: Product: syz [ 910.123668][ T9270] usb 7-1: Manufacturer: syz [ 910.132790][T14848] bond4: entered allmulticast mode [ 910.138059][T14848] gretap2: entered allmulticast mode [ 910.180520][ T9270] usb 7-1: SerialNumber: syz [ 910.208878][T14848] bond5: entered allmulticast mode [ 910.240033][T14848] gretap3: entered allmulticast mode [ 910.434750][T14848] erspan0.1: entered allmulticast mode [ 910.503499][T14853] netlink: 'syz.6.2540': attribute type 21 has an invalid length. [ 910.511817][T14853] IPv6: NLM_F_CREATE should be specified when creating new route [ 911.497364][ T9270] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 911.546380][ T9270] usb 7-1: selecting invalid altsetting 1 [ 911.573269][ T9270] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 911.597294][T14863] netlink: 'syz.5.2549': attribute type 1 has an invalid length. [ 911.612215][ T9270] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 911.660572][ T9270] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 911.680933][ T9270] usb 7-1: media controller created [ 911.700086][T14867] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 911.724112][T14863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 911.780053][ T9270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.802449][T14866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 911.823360][T14866] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 911.841793][T14866] bond4: (slave vti0): Error -95 calling set_mac_address [ 911.881715][ T9270] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 911.910128][ T9270] zl10353_read_register: readreg error (reg=127, ret==-71) [ 911.910211][T14867] 8021q: adding VLAN 0 to HW filter on device bond7 [ 911.918387][ T9270] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 912.023100][ T9270] usb 7-1: USB disconnect, device number 3 [ 917.034567][T14925] netlink: 'syz.5.2563': attribute type 1 has an invalid length. [ 917.330391][T14925] 8021q: adding VLAN 0 to HW filter on device bond5 [ 917.689602][T14929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 917.697185][T14929] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 917.717590][T14929] bond5: (slave vti0): Error -95 calling set_mac_address [ 918.073219][ T30] audit: type=1326 audit(1750372369.424:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.100481][ T30] audit: type=1326 audit(1750372369.424:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.130547][ T30] audit: type=1326 audit(1750372369.424:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97ecb8d290 code=0x7ffc0000 [ 918.152533][ T30] audit: type=1326 audit(1750372369.424:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.178972][ T9261] IPVS: starting estimator thread 0... [ 918.184934][ T30] audit: type=1326 audit(1750372369.424:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.207152][ T30] audit: type=1326 audit(1750372369.424:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.207970][T14941] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 918.235274][ T30] audit: type=1326 audit(1750372369.424:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.345881][T14946] IPVS: using max 27 ests per chain, 64800 per kthread [ 918.457401][ T30] audit: type=1326 audit(1750372369.424:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.480095][ T30] audit: type=1326 audit(1750372369.424:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 918.520766][ T30] audit: type=1326 audit(1750372369.424:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14943 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f97ecb8e929 code=0x7ffc0000 [ 919.404255][T14965] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 919.438533][T14965] 8021q: adding VLAN 0 to HW filter on device bond5 [ 919.533748][T14965] 8021q: adding VLAN 0 to HW filter on device bond5 [ 919.560659][T14965] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 919.573964][T14965] bond5: (slave vti0): Error -95 calling set_mac_address [ 924.217364][T15000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2586'. [ 927.462087][T15032] netlink: 'syz.5.2595': attribute type 1 has an invalid length. [ 927.755091][T15039] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2595'. [ 927.783265][T15032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 928.844994][T15036] 8021q: adding VLAN 0 to HW filter on device bond6 [ 928.858027][T15036] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 929.940829][T15036] bond6: (slave vti0): Error -95 calling set_mac_address [ 930.043658][T15059] tipc: New replicast peer: 255.255.255.255 [ 930.085431][T15059] tipc: Enabled bearer , priority 10 [ 931.536038][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.546242][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.268890][T15077] syz!: rxe_newlink: already configured on team_slave_0 [ 937.799999][T15099] syz.5.2613 (15099): drop_caches: 2 [ 938.185720][ T9270] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 939.191343][ T9270] usb 7-1: Using ep0 maxpacket: 16 [ 939.839784][ T9270] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 939.867241][ T9270] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.885715][ T9270] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.920084][ T9270] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 940.175241][ T9270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.197594][ T9270] usb 7-1: Product: syz [ 940.209902][ T9270] usb 7-1: Manufacturer: syz [ 941.158899][ T9270] usb 7-1: SerialNumber: syz [ 941.411730][ T9270] usb 7-1: can't set config #1, error -71 [ 941.463164][ T9270] usb 7-1: USB disconnect, device number 4 [ 942.724676][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 942.724704][ T30] audit: type=1326 audit(1750372394.074:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 943.437611][T15181] netlink: 'syz.1.2638': attribute type 4 has an invalid length. [ 943.445419][T15181] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2638'. [ 943.576575][ T30] audit: type=1326 audit(1750372394.074:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 943.620591][ T30] audit: type=1326 audit(1750372394.204:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 943.687164][ T30] audit: type=1326 audit(1750372394.234:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 943.725895][T15189] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 943.732654][T15189] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 943.740059][T15192] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 943.746599][T15192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 943.757760][T15189] vhci_hcd vhci_hcd.0: Device attached [ 943.778552][T15192] vhci_hcd vhci_hcd.0: Device attached [ 943.800626][ T30] audit: type=1326 audit(1750372394.304:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15180 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b273c11e5 code=0x7ffc0000 [ 943.807775][T15189] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 943.899244][ T30] audit: type=1326 audit(1750372394.624:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15180 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 943.928957][T15189] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(12) [ 943.935635][T15189] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 943.943529][ T5943] vhci_hcd: vhci_device speed not set [ 943.986545][T15189] vhci_hcd vhci_hcd.0: Device attached [ 944.001748][T15192] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 944.008390][T15192] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 944.016235][ T5943] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 944.025431][T15201] netlink: 'syz.2.2644': attribute type 21 has an invalid length. [ 944.034561][ T30] audit: type=1326 audit(1750372395.004:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b2732ab19 code=0x7ffc0000 [ 944.104970][T15192] vhci_hcd vhci_hcd.0: Device attached [ 944.131501][ T30] audit: type=1326 audit(1750372395.004:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 944.161207][T15192] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 944.275675][ T30] audit: type=1326 audit(1750372395.014:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 944.297763][ T30] audit: type=1326 audit(1750372395.014:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15177 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 944.319743][T15189] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 944.326384][T15189] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 944.386230][T15211] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 944.406507][T15189] vhci_hcd vhci_hcd.0: Device attached [ 944.511722][T15189] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 944.549594][T15189] vhci_hcd vhci_hcd.0: port 0 already used [ 944.617566][T15197] vhci_hcd: connection closed [ 944.617570][T15202] vhci_hcd: connection closed [ 944.622891][T15191] vhci_hcd: connection reset by peer [ 944.636300][T15194] vhci_hcd: connection closed [ 944.637230][T15206] vhci_hcd: connection closed [ 944.640985][ T6140] vhci_hcd: stop threads [ 944.653282][ T6140] vhci_hcd: release socket [ 944.658574][ T6140] vhci_hcd: disconnect device [ 944.666312][ T6140] vhci_hcd: stop threads [ 944.672708][ T6140] vhci_hcd: release socket [ 944.677470][ T6140] vhci_hcd: disconnect device [ 944.687581][ T6140] vhci_hcd: stop threads [ 944.692505][ T6140] vhci_hcd: release socket [ 944.708139][ T6140] vhci_hcd: disconnect device [ 944.729262][ T6140] vhci_hcd: stop threads [ 944.747520][ T6140] vhci_hcd: release socket [ 944.753461][ T6140] vhci_hcd: disconnect device [ 944.760122][ T6140] vhci_hcd: stop threads [ 944.765987][ T6140] vhci_hcd: release socket [ 944.772694][ T6140] vhci_hcd: disconnect device [ 944.926392][T15179] syz.6.2637 (15179): drop_caches: 2 [ 945.068019][T15220] tipc: Enabling of bearer rejected, failed to enable media [ 946.373427][T15235] lo: entered allmulticast mode [ 946.404080][T15235] tunl0: entered allmulticast mode [ 946.451905][T15235] gre0: entered allmulticast mode [ 946.501429][T15235] gretap0: entered allmulticast mode [ 946.531000][T15235] erspan0: entered allmulticast mode [ 946.740699][T15235] ip_vti0: entered allmulticast mode [ 946.774380][T15235] ip6_vti0: entered allmulticast mode [ 946.824773][T15235] sit0: entered allmulticast mode [ 946.858906][T15235] ip6tnl0: entered allmulticast mode [ 946.935668][T15235] ip6gre0: entered allmulticast mode [ 947.554207][T15235] syz_tun: entered allmulticast mode [ 947.752012][T15235] ip6gretap0: entered allmulticast mode [ 947.784106][T15235] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.791677][T15235] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.859882][T15235] bridge0: entered allmulticast mode [ 947.895816][T15235] vcan0: entered allmulticast mode [ 947.907162][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.917223][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 947.926948][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.966305][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.975416][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.989175][T15235] bond0: entered allmulticast mode [ 948.015094][T15235] bond_slave_0: entered allmulticast mode [ 948.042922][T15235] bond_slave_1: entered allmulticast mode [ 948.106481][T15235] team0: entered allmulticast mode [ 948.136719][T15235] team_slave_0: entered allmulticast mode [ 948.168534][T15235] team_slave_1: entered allmulticast mode [ 948.216910][T15235] dummy0: entered allmulticast mode [ 948.275435][T15235] nlmon0: entered allmulticast mode [ 948.294714][T15235] caif0: entered allmulticast mode [ 948.301274][T15235] vxcan0: entered allmulticast mode [ 948.309962][T15235] vxcan1: entered allmulticast mode [ 948.318457][T15235] veth0: entered allmulticast mode [ 948.342404][T15235] veth1: entered allmulticast mode [ 948.357794][T15235] wg0: entered allmulticast mode [ 948.387928][T15235] wg1: entered allmulticast mode [ 948.409457][T15235] wg2: entered allmulticast mode [ 948.445943][T15235] veth0_to_bridge: entered allmulticast mode [ 948.486089][T15235] veth1_to_bridge: entered allmulticast mode [ 948.526445][T15235] veth0_to_bond: entered allmulticast mode [ 948.541470][T15235] veth1_to_bond: entered allmulticast mode [ 948.553803][T15235] veth0_to_team: entered allmulticast mode [ 948.573153][T15235] veth1_to_team: entered allmulticast mode [ 948.590288][T15235] veth0_to_batadv: entered allmulticast mode [ 948.612370][T15235] batadv_slave_0: entered allmulticast mode [ 948.632917][T15235] veth1_to_batadv: entered allmulticast mode [ 948.654973][T15235] batadv_slave_1: entered allmulticast mode [ 948.680424][T15235] xfrm0: entered allmulticast mode [ 948.687950][T15235] veth0_to_hsr: entered allmulticast mode [ 948.696623][T15235] hsr_slave_0: entered allmulticast mode [ 948.704925][T15235] veth1_to_hsr: entered allmulticast mode [ 948.713084][T15235] hsr_slave_1: entered allmulticast mode [ 948.720891][T15235] hsr0: entered allmulticast mode [ 948.728546][T15235] veth1_virt_wifi: entered allmulticast mode [ 948.737312][T15235] veth0_virt_wifi: entered allmulticast mode [ 948.745903][T15235] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 948.754544][T15235] veth1_vlan: entered allmulticast mode [ 948.763602][T15235] veth0_vlan: entered allmulticast mode [ 948.776076][T15235] vlan0: entered allmulticast mode [ 948.781605][T15235] vlan1: entered allmulticast mode [ 948.787314][T15235] macvlan0: entered allmulticast mode [ 948.795592][T15235] macvlan1: entered allmulticast mode [ 948.803276][T15235] ipvlan0: entered allmulticast mode [ 948.808669][T15235] ipvlan1: entered allmulticast mode [ 948.816477][T15235] veth1_macvtap: entered allmulticast mode [ 948.825079][T15235] veth0_macvtap: entered allmulticast mode [ 948.833942][T15235] macvtap0: entered allmulticast mode [ 948.841847][T15235] macsec0: entered allmulticast mode [ 948.850930][T15235] geneve0: entered allmulticast mode [ 948.858647][T15235] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.868315][T15235] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.877522][T15235] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.886515][T15235] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.895917][T15235] geneve1: entered allmulticast mode [ 948.905580][T15235] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 948.915244][T15235] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 948.925039][T15235] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 948.934649][T15235] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 948.953252][T15235] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 948.967851][T15235] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 948.976970][T15242] tipc: Enabling of bearer rejected, already enabled [ 948.988027][T15255] bridge0: port 3(team0) entered blocking state [ 948.995981][T15255] bridge0: port 3(team0) entered disabled state [ 949.005040][T15255] team0: entered promiscuous mode [ 949.010090][T15255] team_slave_0: entered promiscuous mode [ 949.016057][T15255] team_slave_1: entered promiscuous mode [ 949.210594][ T5943] vhci_hcd: vhci_device speed not set [ 949.310282][T15263] tipc: Enabling of bearer rejected, failed to enable media [ 950.556738][ T51] Bluetooth: hci4: command tx timeout [ 950.994567][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2663'. [ 952.436556][ T9267] usb usb44-port1: attempt power cycle [ 952.600522][ T51] Bluetooth: hci4: command tx timeout [ 953.017516][ T9267] usb usb44-port1: unable to enumerate USB device [ 953.236618][T15253] lo speed is unknown, defaulting to 1000 [ 953.680280][T15292] syz.6.2668 (15292): drop_caches: 2 [ 954.464001][T15253] chnl_net:caif_netlink_parms(): no params data found [ 954.680554][ T51] Bluetooth: hci4: command tx timeout [ 955.673471][T15253] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.696515][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.899290][T15253] bridge_slave_0: entered allmulticast mode [ 955.908816][T15253] bridge_slave_0: entered promiscuous mode [ 955.941372][T15323] tipc: Enabling of bearer rejected, already enabled [ 955.959863][T15253] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.971734][T15253] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.991360][T15253] bridge_slave_1: entered allmulticast mode [ 955.999332][T15253] bridge_slave_1: entered promiscuous mode [ 956.546035][T15253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.512355][ T51] Bluetooth: hci4: command tx timeout [ 957.535704][T15253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.006921][T15253] team0: Port device team_slave_0 added [ 958.039508][T15253] team0: Port device team_slave_1 added [ 958.680750][T15253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.690158][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.741086][T15253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.757887][T15253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.765392][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.795634][T15253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.013907][T15253] hsr_slave_0: entered promiscuous mode [ 959.022973][T15253] hsr_slave_1: entered promiscuous mode [ 959.034817][T15253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.070269][T15253] Cannot create hsr debugfs directory [ 959.470928][ T9267] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 959.652815][ T9267] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 959.691803][ T9267] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 959.721484][ T9267] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 959.732647][ T9267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.756155][T15349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 959.767354][ T9267] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 961.551391][T15253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 961.564343][T15253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 961.581998][T15253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 961.596335][T15253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 962.819432][T15253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.292193][T15253] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.511785][T15253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 963.830679][T15253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.872003][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.879293][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.942911][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.950137][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.270990][T14477] usb 6-1: USB disconnect, device number 21 [ 964.651652][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 966.553801][T15253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.228368][T15253] veth0_vlan: entered promiscuous mode [ 967.352175][T15253] veth1_vlan: entered promiscuous mode [ 967.398806][T15253] veth0_macvtap: entered promiscuous mode [ 967.417880][T15253] veth1_macvtap: entered promiscuous mode [ 967.597263][T15253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.692564][T15253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.743307][T15253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.756061][T15253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.773190][T15253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.789872][T15253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.207490][T10424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.313441][T15430] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 968.971967][T10424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.192286][T10424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.200188][T10424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.491905][T15488] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 976.986133][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 976.986151][ T30] audit: type=1326 audit(1750372428.334:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 977.695229][ T30] audit: type=1326 audit(1750372428.334:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 977.900686][ T30] audit: type=1326 audit(1750372428.334:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 978.020806][T15513] 9pnet_fd: Insufficient options for proto=fd [ 978.431756][ T30] audit: type=1326 audit(1750372428.334:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 978.544000][ T30] audit: type=1326 audit(1750372428.334:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 978.682870][ T30] audit: type=1326 audit(1750372429.284:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 978.927245][ T30] audit: type=1326 audit(1750372429.284:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 978.980489][ T30] audit: type=1326 audit(1750372429.284:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa44b1c11e5 code=0x7ffc0000 [ 979.733375][ T30] audit: type=1326 audit(1750372429.614:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 979.852563][ T30] audit: type=1326 audit(1750372429.884:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 981.622725][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'. [ 981.666217][T15542] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2728'. [ 981.931062][T15547] netlink: 'syz.2.2730': attribute type 21 has an invalid length. [ 981.948267][T15549] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 981.954842][T15549] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 981.964926][T15549] vhci_hcd vhci_hcd.0: Device attached [ 981.981224][T15549] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 981.987801][T15549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 982.001390][T15549] vhci_hcd vhci_hcd.0: Device attached [ 982.011809][T15549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 982.075748][T15559] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 982.082425][T15559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 982.140522][ T5943] vhci_hcd: vhci_device speed not set [ 982.231411][T15549] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 982.238079][T15549] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 982.250632][T15559] vhci_hcd vhci_hcd.0: Device attached [ 982.270677][ T5943] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 983.082192][ T9267] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 983.100694][T15564] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 983.107359][T15564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 983.128580][T15549] vhci_hcd vhci_hcd.0: Device attached [ 983.143046][T15568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 983.151487][T15564] vhci_hcd vhci_hcd.0: Device attached [ 983.201096][T15549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 983.327387][T15549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 983.336598][ T9267] usb 6-1: Using ep0 maxpacket: 16 [ 983.358676][ T9267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.990453][ T9267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.001187][ T9267] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 984.015335][ T9267] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 984.024500][ T9267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.108712][ T9267] usb 6-1: config 0 descriptor?? [ 984.112562][T15549] vhci_hcd vhci_hcd.0: port 0 already used [ 984.176090][T15565] vhci_hcd: connection closed [ 984.176502][ T1168] vhci_hcd: stop threads [ 984.193151][T15558] vhci_hcd: connection closed [ 984.193368][T15560] vhci_hcd: connection closed [ 984.198967][T15553] vhci_hcd: connection closed [ 984.203734][T15550] vhci_hcd: connection reset by peer [ 984.231836][ T1168] vhci_hcd: release socket [ 984.246655][ T1168] vhci_hcd: disconnect device [ 984.272499][ T1168] vhci_hcd: stop threads [ 984.276854][ T1168] vhci_hcd: release socket [ 984.294942][ T1168] vhci_hcd: disconnect device [ 984.305104][ T1168] vhci_hcd: stop threads [ 984.309443][ T1168] vhci_hcd: release socket [ 984.319066][ T1168] vhci_hcd: disconnect device [ 984.329571][ T1168] vhci_hcd: stop threads [ 984.340901][ T1168] vhci_hcd: release socket [ 984.356378][ T1168] vhci_hcd: disconnect device [ 984.362107][ T1168] vhci_hcd: stop threads [ 984.366389][ T1168] vhci_hcd: release socket [ 984.409276][ T1168] vhci_hcd: disconnect device [ 984.668433][ T9267] usbhid 6-1:0.0: can't add hid device: -71 [ 984.681120][ T9267] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 984.701553][ T9267] usb 6-1: USB disconnect, device number 22 [ 984.884427][T15594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2741'. [ 985.619003][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 985.619021][ T30] audit: type=1326 audit(1750372436.964:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 985.731974][T15612] syz!: rxe_newlink: already configured on team_slave_0 [ 986.289394][ T30] audit: type=1326 audit(1750372436.964:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 986.311131][ T30] audit: type=1326 audit(1750372436.964:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 986.596544][ T30] audit: type=1326 audit(1750372436.964:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 987.190831][ T30] audit: type=1326 audit(1750372438.274:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15618 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f57545c11e5 code=0x7ffc0000 [ 987.548015][ T30] audit: type=1326 audit(1750372438.274:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 987.653717][ T30] audit: type=1326 audit(1750372438.274:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 987.793560][T15624] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 987.793560][T15624] program syz.6.2749 not setting count and/or reply_len properly [ 988.755190][ T30] audit: type=1326 audit(1750372438.514:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15618 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 988.801615][ T5943] vhci_hcd: vhci_device speed not set [ 988.807469][ T30] audit: type=1326 audit(1750372438.854:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 988.832132][ T30] audit: type=1326 audit(1750372438.854:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 988.904890][T15631] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2752'. [ 989.345581][T15638] binder: BINDER_SET_CONTEXT_MGR already set [ 989.369631][T15638] binder: 15637:15638 ioctl 4018620d 200000000040 returned -16 [ 989.402839][T15638] binder: 15637:15638 ioctl c0306201 200000000700 returned -14 [ 989.512899][T15641] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 990.234641][T15280] usb usb34-port1: attempt power cycle [ 990.852658][T15664] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2760'. [ 990.982032][T15280] usb usb34-port1: unable to enumerate USB device [ 992.472147][T15680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2767'. [ 992.984333][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.993018][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.950852][T14203] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 997.420532][T14203] usb 6-1: Using ep0 maxpacket: 16 [ 997.435754][T14203] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 997.458238][T14203] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.488927][T14203] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 997.512943][T14203] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 997.526830][T14203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.545275][T14203] usb 6-1: Product: syz [ 997.586599][T15727] netlink: 'syz.1.2784': attribute type 1 has an invalid length. [ 997.594719][T14203] usb 6-1: Manufacturer: syz [ 997.599374][T14203] usb 6-1: SerialNumber: syz [ 997.639511][T15727] 8021q: adding VLAN 0 to HW filter on device bond6 [ 997.764224][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 997.791565][T15727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2784'. [ 998.211465][T14203] usb 6-1: 0:2 : does not exist [ 998.902529][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.910159][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.917802][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.925421][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.932988][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.941049][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.948581][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.956209][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.963789][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.971423][T14203] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 998.979288][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.986807][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 998.994408][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 999.002423][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 999.010304][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 999.047433][T14203] usb 6-1: USB disconnect, device number 23 [ 999.178706][T15161] udevd[15161]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.037116][T15774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1003.165189][T15782] tipc: Enabling of bearer rejected, failed to enable media [ 1004.286642][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2802'. [ 1008.054184][T15840] overlayfs: failed to resolve './file0': -2 [ 1011.994108][T15882] bridge0: port 3(team0) entered blocking state [ 1012.001268][T15882] bridge0: port 3(team0) entered disabled state [ 1012.008708][T15882] team0: entered allmulticast mode [ 1012.014153][T15882] team_slave_0: entered allmulticast mode [ 1012.019949][T15882] team_slave_1: entered allmulticast mode [ 1012.040470][T15882] team0: entered promiscuous mode [ 1012.045661][T15882] team_slave_0: entered promiscuous mode [ 1012.053041][T15882] team_slave_1: entered promiscuous mode [ 1014.908241][T15883] Bluetooth: hci4: command 0x0405 tx timeout [ 1016.658207][T15912] tipc: Enabling of bearer rejected, already enabled [ 1016.999257][T15920] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 1017.073988][T15920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1017.141039][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1017.150566][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1017.808463][T15934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1018.830694][T15940] bridge1: entered allmulticast mode [ 1020.367325][T15954] tipc: Enabling of bearer rejected, already enabled [ 1021.192663][T15956] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2847'. [ 1021.593261][T15965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1021.599811][T15965] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1021.619480][T15965] vhci_hcd vhci_hcd.0: Device attached [ 1021.633687][T15968] vhci_hcd: connection closed [ 1021.734780][ T6140] vhci_hcd: stop threads [ 1021.750379][ T6140] vhci_hcd: release socket [ 1021.754855][ T6140] vhci_hcd: disconnect device [ 1023.562613][T15985] siw: device registration error -23 [ 1025.402540][T15999] tipc: Enabling of bearer rejected, already enabled [ 1026.269801][T16005] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2859'. [ 1027.873050][T14203] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1028.074917][T14203] usb 7-1: config 1 has an invalid interface number: 5 but max is 2 [ 1028.094920][T14203] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.125977][T14203] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1028.145476][T14203] usb 7-1: config 1 has no interface number 1 [ 1028.160427][T14203] usb 7-1: config 1 interface 5 has no altsetting 0 [ 1028.176469][T14203] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1028.228115][T14203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1028.250659][T14203] usb 7-1: SerialNumber: syz [ 1028.513349][T14203] usb 7-1: 0:2 : does not exist [ 1028.585359][T14203] usb 7-1: unit 5 not found! [ 1029.435327][T14203] usb 7-1: USB disconnect, device number 5 [ 1030.134303][T16038] tipc: Enabling of bearer rejected, already enabled [ 1030.727063][T16040] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1033.104356][T16058] netlink: 'syz.6.2877': attribute type 1 has an invalid length. [ 1033.190826][T16058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1033.431260][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2877'. [ 1035.117743][ T5943] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1035.932570][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 1036.479059][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1036.490024][ T5943] usb 7-1: config 0 has no interfaces? [ 1036.503527][T16088] tipc: Enabling of bearer rejected, already enabled [ 1036.689034][ T5943] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1036.734803][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.230379][ T5943] usb 7-1: Product: syz [ 1037.239529][ T5943] usb 7-1: Manufacturer: syz [ 1037.248775][ T5943] usb 7-1: SerialNumber: syz [ 1037.284382][T16094] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1037.291724][ T5943] usb 7-1: config 0 descriptor?? [ 1037.598521][T16104] tipc: Enabled bearer , priority 10 [ 1037.622715][ T5943] usb 7-1: USB disconnect, device number 6 [ 1037.631509][T16074] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 1037.676739][T16101] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 1037.697747][T16074] I/O error, dev loop7, sector 2816 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 1037.742946][T16074] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1037.763271][T16074] buffer_io_error: 382 callbacks suppressed [ 1037.763305][T16074] Buffer I/O error on dev loop7, logical block 320, async page read [ 1037.778650][T16074] I/O error, dev loop7, sector 2568 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1037.788190][T16074] Buffer I/O error on dev loop7, logical block 321, async page read [ 1037.796505][T16074] I/O error, dev loop7, sector 2576 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1037.815021][T16074] Buffer I/O error on dev loop7, logical block 322, async page read [ 1037.838008][T16074] I/O error, dev loop7, sector 2584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.368985][T16074] Buffer I/O error on dev loop7, logical block 323, async page read [ 1038.390701][T16074] I/O error, dev loop7, sector 2592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.418885][T16074] Buffer I/O error on dev loop7, logical block 324, async page read [ 1038.516735][T16074] I/O error, dev loop7, sector 2600 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.584760][T16104] tipc: Resetting bearer [ 1038.590738][T16074] Buffer I/O error on dev loop7, logical block 325, async page read [ 1038.610705][T16074] I/O error, dev loop7, sector 2608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.633289][T16074] Buffer I/O error on dev loop7, logical block 326, async page read [ 1038.690632][T16074] I/O error, dev loop7, sector 2616 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.717270][T16074] Buffer I/O error on dev loop7, logical block 327, async page read [ 1038.775247][T16074] Buffer I/O error on dev loop7, logical block 328, async page read [ 1038.794798][T16074] Buffer I/O error on dev loop7, logical block 329, async page read [ 1038.886955][T16102] tipc: Resetting bearer [ 1041.160030][T16132] netlink: 'syz.6.2898': attribute type 4 has an invalid length. [ 1041.168314][T16132] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2898'. [ 1041.711080][T16135] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2899'. [ 1043.244914][T14117] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1043.860703][T14117] usb 1-1: Using ep0 maxpacket: 16 [ 1043.869702][T14117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.887186][T14117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.897363][T14117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1043.911938][T14117] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1043.922731][T14117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.027858][T14117] usb 1-1: config 0 descriptor?? [ 1045.032989][T14117] usbhid 1-1:0.0: can't add hid device: -71 [ 1045.039064][T14117] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1045.051022][T14117] usb 1-1: USB disconnect, device number 6 [ 1047.716265][T16102] tipc: Disabling bearer [ 1048.143564][T16184] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2911'. [ 1048.827248][T14117] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1049.695849][T14117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1049.727423][T14117] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1049.785664][T14117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1049.816668][T14117] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1049.861031][T14117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.869143][T14117] usb 6-1: Product: syz [ 1049.880447][T14117] usb 6-1: Manufacturer: syz [ 1049.885197][T14117] usb 6-1: SerialNumber: syz [ 1049.912453][T14117] usb 6-1: config 0 descriptor?? [ 1049.922390][T16188] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1049.932550][T16188] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1049.958105][T14117] usb 6-1: ucan: probing device on interface #0 [ 1050.876714][T14117] usb 6-1: ucan: device reported invalid device info [ 1050.892527][T14117] usb 6-1: ucan: probe failed; try to update the device firmware [ 1051.260477][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1053.018967][T14117] usb 6-1: USB disconnect, device number 24 [ 1053.270890][T16226] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2924'. [ 1053.609034][T16202] syz.0.2917 (16202): drop_caches: 2 [ 1054.490328][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.504238][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.671281][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1054.671301][ T30] audit: type=1326 audit(1750372506.014:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1054.909026][ T30] audit: type=1326 audit(1750372506.014:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1054.996873][ T30] audit: type=1326 audit(1750372506.014:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1055.023653][ T30] audit: type=1326 audit(1750372506.014:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1055.048398][ T30] audit: type=1326 audit(1750372506.014:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1055.072099][ T30] audit: type=1326 audit(1750372506.104:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1055.153005][ T30] audit: type=1326 audit(1750372506.104:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1055.182889][ T30] audit: type=1326 audit(1750372506.104:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef05dc11e5 code=0x7ffc0000 [ 1055.205764][ T30] audit: type=1326 audit(1750372506.254:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16247 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1055.228693][ T30] audit: type=1326 audit(1750372506.294:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fef05d8e929 code=0x7ffc0000 [ 1055.279876][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2932'. [ 1055.530807][T16260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2934'. [ 1056.134713][T16267] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2936'. [ 1056.144806][T16266] bond6: entered allmulticast mode [ 1056.167895][T16266] macvtap1: entered allmulticast mode [ 1056.221071][T16266] gretap4: entered allmulticast mode [ 1057.521625][T16290] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2948'. [ 1058.660385][T15883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1058.805504][T15883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1058.827479][T15883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1058.842580][T15883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.026508][T15883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1061.415081][T15883] Bluetooth: hci0: command tx timeout [ 1062.267339][T16332] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2960'. [ 1062.441737][T16301] lo speed is unknown, defaulting to 1000 [ 1063.919756][T15883] Bluetooth: hci0: command tx timeout [ 1064.390162][T16301] chnl_net:caif_netlink_parms(): no params data found [ 1064.721433][T16359] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2963'. [ 1065.105770][T16363] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2966'. [ 1065.755586][T16301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.765867][T16374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2970'. [ 1065.969888][T15883] Bluetooth: hci0: command tx timeout [ 1065.977744][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.985143][T16301] bridge_slave_0: entered allmulticast mode [ 1065.993224][T16301] bridge_slave_0: entered promiscuous mode [ 1066.002135][T16301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.009307][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.017564][T16301] bridge_slave_1: entered allmulticast mode [ 1066.701645][T16301] bridge_slave_1: entered promiscuous mode [ 1067.437150][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.500003][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.537525][T16390] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1068.010825][T15883] Bluetooth: hci0: command tx timeout [ 1069.000060][T16301] team0: Port device team_slave_0 added [ 1069.049510][T16301] team0: Port device team_slave_1 added [ 1069.300110][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.328124][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.408304][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.432084][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.439143][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.467019][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.816068][T16301] hsr_slave_0: entered promiscuous mode [ 1069.826966][T16301] hsr_slave_1: entered promiscuous mode [ 1069.838854][T16301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1069.856500][T16301] Cannot create hsr debugfs directory [ 1071.815717][T16431] syz!: rxe_newlink: already configured on team_slave_0 [ 1071.852514][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1072.593608][T16430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2985'. [ 1075.401062][T16439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2987'. [ 1076.287510][T16449] tipc: Started in network mode [ 1076.292523][T16449] tipc: Node identity 8e9111ea47fa, cluster identity 4711 [ 1076.299822][T16449] tipc: Enabled bearer , priority 10 [ 1076.345546][T16449] tipc: Resetting bearer [ 1076.427188][T16448] tipc: Resetting bearer [ 1076.500556][ T5895] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1076.694238][ T5895] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1076.709734][ T5895] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1076.730041][ T5895] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1076.887152][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.920911][T16445] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1077.592871][ T5943] tipc: Node number set to 3379237354 [ 1077.693719][ T5895] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1080.791718][ T5943] usb 6-1: USB disconnect, device number 25 [ 1080.899442][T16478] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1081.575796][T16480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2998'. [ 1081.991210][T16488] netlink: 'syz.2.3000': attribute type 4 has an invalid length. [ 1081.999065][T16488] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3000'. [ 1082.964646][T16448] tipc: Disabling bearer [ 1083.099843][T16492] lo: entered allmulticast mode [ 1083.110695][T16492] tunl0: entered allmulticast mode [ 1083.127238][T16492] gre0: entered allmulticast mode [ 1083.134206][T16492] gretap0: entered allmulticast mode [ 1083.139848][T16492] erspan0: entered allmulticast mode [ 1083.152115][T16492] ip_vti0: entered allmulticast mode [ 1083.157632][T16492] ip6_vti0: entered allmulticast mode [ 1083.202303][T16492] sit0: entered allmulticast mode [ 1083.207798][T16492] ip6tnl0: entered allmulticast mode [ 1083.234659][T16492] ip6gre0: entered allmulticast mode [ 1083.240181][T16492] syz_tun: entered allmulticast mode [ 1083.254365][T16492] ip6gretap0: entered allmulticast mode [ 1083.260233][T16492] bridge0: entered allmulticast mode [ 1083.265801][T16492] vcan0: entered allmulticast mode [ 1083.274003][T16492] bond0: entered allmulticast mode [ 1083.279228][T16492] bond_slave_0: entered allmulticast mode [ 1083.285805][T16492] bond_slave_1: entered allmulticast mode [ 1083.293625][T16492] dummy0: entered allmulticast mode [ 1083.299295][T16492] nlmon0: entered allmulticast mode [ 1083.360665][T16492] caif0: entered allmulticast mode [ 1083.388293][T16492] vxcan0: entered allmulticast mode [ 1083.436125][T16492] vxcan1: entered allmulticast mode [ 1083.443880][T16492] veth0: entered allmulticast mode [ 1083.453417][T16492] veth1: entered allmulticast mode [ 1083.459359][T16492] wg0: entered allmulticast mode [ 1083.464737][T16492] wg1: entered allmulticast mode [ 1083.470088][T16492] wg2: entered allmulticast mode [ 1083.485816][T16492] veth0_to_bridge: entered allmulticast mode [ 1083.500164][T16492] veth1_to_bridge: entered allmulticast mode [ 1083.517728][T16492] veth0_to_bond: entered allmulticast mode [ 1083.613070][T16492] veth1_to_bond: entered allmulticast mode [ 1083.627430][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1083.627473][ T30] audit: type=1326 audit(1750372534.944:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16500 comm="syz.2.3005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b2738e929 code=0x0 [ 1083.730887][T16492] veth0_to_team: entered allmulticast mode [ 1083.826527][T16492] veth1_to_team: entered allmulticast mode [ 1083.921477][T16492] veth0_to_batadv: entered allmulticast mode [ 1083.991909][T16492] batadv_slave_0: entered allmulticast mode [ 1084.072533][T16492] veth1_to_batadv: entered allmulticast mode [ 1084.078751][T16492] batadv_slave_1: entered allmulticast mode [ 1084.211755][T16492] xfrm0: entered allmulticast mode [ 1084.228876][T16492] veth0_to_hsr: entered allmulticast mode [ 1084.237328][T16492] hsr_slave_0: entered allmulticast mode [ 1084.246581][T16492] veth1_to_hsr: entered allmulticast mode [ 1084.252768][T16492] hsr_slave_1: entered allmulticast mode [ 1084.258613][T16492] hsr0: entered allmulticast mode [ 1084.264082][T16492] veth1_virt_wifi: entered allmulticast mode [ 1084.270256][T16492] veth0_virt_wifi: entered allmulticast mode [ 1084.290637][T16492] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1084.309286][T16492] veth1_vlan: entered allmulticast mode [ 1084.315301][T16492] veth0_vlan: entered allmulticast mode [ 1084.334623][T16492] vlan0: entered allmulticast mode [ 1084.343763][T16492] vlan1: entered allmulticast mode [ 1084.362121][T16492] macvlan0: entered allmulticast mode [ 1084.367678][T16492] macvlan1: entered allmulticast mode [ 1084.383680][T16492] ipvlan0: entered allmulticast mode [ 1084.403987][T16492] ipvlan1: entered allmulticast mode [ 1084.409528][T16492] veth1_macvtap: entered allmulticast mode [ 1084.447717][T16492] veth0_macvtap: entered allmulticast mode [ 1084.500707][T16492] macvtap0: entered allmulticast mode [ 1084.506482][T16492] macsec0: entered allmulticast mode [ 1084.536937][T16492] geneve0: entered allmulticast mode [ 1084.544440][T16492] geneve1: entered allmulticast mode [ 1084.569747][T16492] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1085.240527][T16511] netlink: 'syz.6.3006': attribute type 4 has an invalid length. [ 1085.248331][T16511] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3006'. [ 1085.457251][T16492] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1085.470554][T16492] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 1085.499892][T16492] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 1085.716050][T16492] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 1085.724369][T16492] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 1085.733397][T16492] bridge1: entered allmulticast mode [ 1085.739562][T16492] bond1: entered allmulticast mode [ 1085.746573][T16492] gretap1: entered allmulticast mode [ 1085.881483][T16492] erspan0.1: entered allmulticast mode [ 1085.897504][T16492] bridge2: entered allmulticast mode [ 1085.908154][T16492] bond2: entered allmulticast mode [ 1085.950041][T16492] gretap2: entered allmulticast mode [ 1085.974996][T16492] bridge3: entered allmulticast mode [ 1085.987780][T16492] bridge4: entered allmulticast mode [ 1086.004671][T16492] bond3: entered allmulticast mode [ 1086.014565][T16492] bond4: entered allmulticast mode [ 1086.020272][T16492] bond5: entered allmulticast mode [ 1086.038058][T16492] bond6: entered allmulticast mode [ 1086.044648][T16492] bridge5: entered allmulticast mode [ 1086.165958][T16516] lo: entered allmulticast mode [ 1086.184883][T16516] tunl0: entered allmulticast mode [ 1086.243004][T16516] gre0: entered allmulticast mode [ 1086.276179][T16516] gretap0: entered allmulticast mode [ 1086.305242][T16520] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3009'. [ 1086.316839][T16516] erspan0: entered allmulticast mode [ 1086.392523][T16516] ip_vti0: entered allmulticast mode [ 1086.432588][T16516] ip6_vti0: entered allmulticast mode [ 1086.471974][T16516] sit0: entered allmulticast mode [ 1086.510744][T16516] ip6tnl0: entered allmulticast mode [ 1086.586665][T16516] ip6gre0: entered allmulticast mode [ 1086.679854][T16528] syz!: rxe_newlink: already configured on team_slave_0 [ 1086.772696][T16516] syz_tun: entered allmulticast mode [ 1087.259926][T16516] ip6gretap0: entered allmulticast mode [ 1087.353323][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.361169][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.388482][T16516] bridge0: entered allmulticast mode [ 1087.437844][T16516] vcan0: entered allmulticast mode [ 1087.470554][T16516] bond0: entered allmulticast mode [ 1087.475811][T16516] bond_slave_0: entered allmulticast mode [ 1087.482641][T16516] bond_slave_1: entered allmulticast mode [ 1087.495975][T16516] team0: entered allmulticast mode [ 1087.501197][T16516] team_slave_0: entered allmulticast mode [ 1087.506952][T16516] team_slave_1: entered allmulticast mode [ 1087.516114][T16516] dummy0: entered allmulticast mode [ 1087.524667][T16516] nlmon0: entered allmulticast mode [ 1087.543287][T16516] caif0: entered allmulticast mode [ 1087.552709][T16516] batadv0: entered allmulticast mode [ 1087.775400][T16516] vxcan0: entered allmulticast mode [ 1087.913115][T16516] vxcan1: entered allmulticast mode [ 1088.026045][T16516] veth0: entered allmulticast mode [ 1088.143812][T16516] veth1: entered allmulticast mode [ 1088.158980][T16516] wg0: entered allmulticast mode [ 1088.167330][T16516] wg1: entered allmulticast mode [ 1088.174719][T16516] wg2: entered allmulticast mode [ 1088.182184][T16516] veth0_to_bridge: entered allmulticast mode [ 1088.202924][T16516] veth1_to_bridge: entered allmulticast mode [ 1088.234696][T16516] veth0_to_bond: entered allmulticast mode [ 1088.283762][T16516] veth1_to_bond: entered allmulticast mode [ 1088.305501][T16516] veth0_to_team: entered allmulticast mode [ 1088.327073][T16516] veth1_to_team: entered allmulticast mode [ 1088.358612][T16516] veth0_to_batadv: entered allmulticast mode [ 1088.384919][T16516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.424505][T16516] batadv_slave_0: entered allmulticast mode [ 1088.446684][T16516] veth1_to_batadv: entered allmulticast mode [ 1088.476562][T16516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.521640][T16516] batadv_slave_1: entered allmulticast mode [ 1088.554166][T16516] xfrm0: entered allmulticast mode [ 1088.642142][T16516] veth0_to_hsr: entered allmulticast mode [ 1088.680074][T16516] hsr_slave_0: entered allmulticast mode [ 1088.703851][T16516] veth1_to_hsr: entered allmulticast mode [ 1088.726717][T16516] hsr_slave_1: entered allmulticast mode [ 1088.739211][T16516] hsr0: entered allmulticast mode [ 1088.765564][T16539] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1088.788953][T16516] veth1_virt_wifi: entered allmulticast mode [ 1088.804595][T16516] veth0_virt_wifi: entered allmulticast mode [ 1088.818981][T16516] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1088.867206][T16516] veth1_vlan: entered allmulticast mode [ 1088.884974][T16516] veth0_vlan: entered allmulticast mode [ 1088.944601][T16516] vlan0: entered allmulticast mode [ 1089.104961][T16516] vlan1: entered allmulticast mode [ 1089.118850][T16516] macvlan0: entered allmulticast mode [ 1089.129426][T16516] macvlan1: entered allmulticast mode [ 1089.142252][T16516] ipvlan0: entered allmulticast mode [ 1089.147890][T16516] ipvlan1: entered allmulticast mode [ 1089.157213][T16516] veth1_macvtap: entered allmulticast mode [ 1089.173603][T16516] veth0_macvtap: entered allmulticast mode [ 1089.194795][T16516] macvtap0: entered allmulticast mode [ 1089.213999][T16516] macsec0: entered allmulticast mode [ 1089.267501][T16516] geneve0: entered allmulticast mode [ 1089.287459][T16516] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.309764][T16516] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.327592][T16516] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.354203][T16516] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.376962][T16516] geneve1: entered allmulticast mode [ 1089.404726][T16516] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1089.434111][T16516] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1089.457764][T16516] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1089.487976][T16516] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1089.535926][T16516] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 1089.562100][T16516] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 1089.635711][T16538] tipc: Enabling of bearer rejected, already enabled [ 1089.938129][T16301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1090.120689][T16301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1090.155136][T16301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1090.228576][T16550] siw: device registration error -23 [ 1090.946869][T16301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1092.270226][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.378812][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.473339][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.480548][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.616239][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.623510][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.835850][T16301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.324043][T16585] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3021'. [ 1093.413771][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.416074][T16301] veth0_vlan: entered promiscuous mode [ 1094.629573][T16301] veth1_vlan: entered promiscuous mode [ 1096.305123][T16301] veth0_macvtap: entered promiscuous mode [ 1096.316570][T16301] veth1_macvtap: entered promiscuous mode [ 1096.339619][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.351869][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.402233][T16301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.438099][T16301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.551907][T16301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.644586][T16609] netlink: 'syz.5.3032': attribute type 4 has an invalid length. [ 1096.652674][T16609] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3032'. [ 1097.232064][T16301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.290988][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 1097.779504][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.847341][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.099731][T16529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.128129][T16529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.317129][T16642] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 1099.608853][T16633] syz.0.3041 (16633): drop_caches: 2 [ 1103.107690][T16672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3050'. [ 1105.162763][T16693] serio: Serial port ptm0 [ 1105.318035][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3059'. [ 1105.411043][T16697] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1108.616396][T16721] bridge0: port 3(team0) entered blocking state [ 1108.624252][T16721] bridge0: port 3(team0) entered disabled state [ 1108.647879][T16721] team0: entered promiscuous mode [ 1108.653168][T16721] team_slave_0: entered promiscuous mode [ 1108.660394][T16721] team_slave_1: entered promiscuous mode [ 1112.272079][T14117] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1113.061755][T14117] usb 2-1: Using ep0 maxpacket: 32 [ 1113.188698][ T30] audit: type=1326 audit(1750372564.534:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1113.262707][T14117] usb 2-1: config 89 has an invalid interface number: 1 but max is 0 [ 1113.280780][ T30] audit: type=1326 audit(1750372564.534:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1113.292134][T14117] usb 2-1: config 89 has no interface number 0 [ 1113.363884][T14117] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 1113.381323][T14117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.429854][T14117] usb 2-1: Product: syz [ 1113.444880][T14117] usb 2-1: Manufacturer: syz [ 1113.466875][T14117] usb 2-1: SerialNumber: syz [ 1113.466918][ T30] audit: type=1326 audit(1750372564.564:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1113.573858][ T30] audit: type=1326 audit(1750372564.564:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1113.638910][ T30] audit: type=1326 audit(1750372564.564:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1113.689772][ T30] audit: type=1326 audit(1750372564.574:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1113.737130][T16745] netlink: 'syz.1.3071': attribute type 21 has an invalid length. [ 1113.745215][T16745] IPv6: NLM_F_CREATE should be specified when creating new route [ 1113.764708][ T30] audit: type=1326 audit(1750372564.584:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16766 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b273c11e5 code=0x7ffc0000 [ 1113.816402][T14117] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1113.840195][T14117] usb 2-1: selecting invalid altsetting 1 [ 1113.846831][T14117] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1113.881047][T14117] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1113.896304][T14117] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1113.959744][T14117] usb 2-1: media controller created [ 1113.966957][ T30] audit: type=1326 audit(1750372564.584:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1114.001720][ T30] audit: type=1326 audit(1750372564.584:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1114.226538][ T30] audit: type=1326 audit(1750372564.734:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16764 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f6b2738e929 code=0x7ffc0000 [ 1114.287389][T16773] netlink: 'syz.2.3080': attribute type 4 has an invalid length. [ 1114.295346][T16773] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1114.652799][T14117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1114.760862][T14117] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1114.782680][T14117] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1114.957298][T14117] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1115.856481][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.862850][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.142219][T14117] usb 2-1: USB disconnect, device number 14 [ 1118.903457][T16804] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1123.133144][T16843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3101'. [ 1123.214034][T16840] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1123.638073][T16849] serio: Serial port ptm0 [ 1124.051151][T16856] netlink: 'syz.2.3104': attribute type 4 has an invalid length. [ 1124.059009][T16856] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3104'. [ 1125.112619][T16864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3105'. [ 1126.806914][T16872] fuse: Invalid rootmode [ 1128.625688][T16882] netlink: 'syz.5.3110': attribute type 1 has an invalid length. [ 1128.704336][T16880] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3110'. [ 1128.935002][T16894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3112'. [ 1129.185785][T16899] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1129.645750][T16899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.849323][T16899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.019324][T16899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.147226][T16899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.330096][T16899] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.431639][T16899] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.509150][T16899] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.582813][T16899] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.308024][T16933] bridge0: port 3(team0) entered blocking state [ 1134.316693][T16933] bridge0: port 3(team0) entered disabled state [ 1134.371397][T16933] team0: entered promiscuous mode [ 1134.376605][T16933] team_slave_0: entered promiscuous mode [ 1134.387621][T16933] team_slave_1: entered promiscuous mode [ 1135.873787][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1135.882770][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1135.909739][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1135.952202][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1135.979518][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1136.284069][T16941] syz.6.3130 (16941): drop_caches: 2 [ 1136.416261][T16950] atomic_op ffff88807b5b8998 conn xmit_atomic 0000000000000000 [ 1136.812640][T16941] syz.6.3130 (16941): drop_caches: 2 [ 1137.097734][T16955] tipc: Enabling of bearer rejected, failed to enable media [ 1137.496226][T16963] netlink: 47 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1137.505420][T16963] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1138.046670][T16942] lo speed is unknown, defaulting to 1000 [ 1138.071782][T16967] loop7: detected capacity change from 0 to 16384 [ 1138.127650][ T51] Bluetooth: hci3: command tx timeout [ 1138.340653][ T5895] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1138.520339][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 1138.533377][ T5895] usb 2-1: config 0 has no interfaces? [ 1138.548501][ T5895] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1138.562658][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.582546][ T5895] usb 2-1: Product: syz [ 1138.586777][ T5895] usb 2-1: Manufacturer: syz [ 1138.591530][ T5895] usb 2-1: SerialNumber: syz [ 1138.601519][ T5895] usb 2-1: config 0 descriptor?? [ 1138.664794][T16942] chnl_net:caif_netlink_parms(): no params data found [ 1138.854248][T16942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.861882][T16942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.869438][T16942] bridge_slave_0: entered allmulticast mode [ 1138.889123][T15280] usb 2-1: USB disconnect, device number 15 [ 1138.902542][T16942] bridge_slave_0: entered promiscuous mode [ 1138.911738][T16983] tipc: New replicast peer: 255.255.255.255 [ 1138.923776][T16983] tipc: Enabled bearer , priority 10 [ 1138.930213][T16942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.937636][T16967] blk_print_req_error: 27 callbacks suppressed [ 1138.937653][T16967] I/O error, dev loop7, sector 2088 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 1138.966074][T16942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.980208][T16967] I/O error, dev loop7, sector 2344 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 1138.990880][T16942] bridge_slave_1: entered allmulticast mode [ 1138.998925][T16942] bridge_slave_1: entered promiscuous mode [ 1139.007639][T16967] I/O error, dev loop7, sector 2088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.036586][T16967] buffer_io_error: 342 callbacks suppressed [ 1139.036605][T16967] Buffer I/O error on dev loop7, logical block 261, async page read [ 1139.080623][T16967] I/O error, dev loop7, sector 2088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.090099][T16967] Buffer I/O error on dev loop7, logical block 261, async page read [ 1139.109496][T16967] I/O error, dev loop7, sector 2088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.119969][T16967] Buffer I/O error on dev loop7, logical block 261, async page read [ 1139.142511][T16967] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1139.159888][T16967] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1139.197933][T16967] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 1139.206501][T16967] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 1139.240030][T16967] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 1139.272886][T16967] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 1139.298889][T16967] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 1139.307732][T16967] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 1139.342348][T16967] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1139.367414][T16967] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 1139.579040][T16942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.606285][T16942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.705398][T16995] atomic_op ffff88807f212198 conn xmit_atomic 0000000000000000 [ 1140.180594][ T51] Bluetooth: hci3: command tx timeout [ 1141.601586][T16942] team0: Port device team_slave_0 added [ 1142.565023][T15883] Bluetooth: hci3: command tx timeout [ 1142.732011][T17006] bridge0: port 3(team0) entered blocking state [ 1142.738376][T17006] bridge0: port 3(team0) entered disabled state [ 1142.744888][T17006] team0: entered allmulticast mode [ 1142.750008][T17006] team_slave_0: entered allmulticast mode [ 1142.755777][T17006] team_slave_1: entered allmulticast mode [ 1142.763162][T17006] team0: entered promiscuous mode [ 1142.768214][T17006] team_slave_0: entered promiscuous mode [ 1142.774059][T17006] team_slave_1: entered promiscuous mode [ 1142.780337][T17006] bridge0: port 3(team0) entered blocking state [ 1142.786659][T17006] bridge0: port 3(team0) entered forwarding state [ 1142.909567][T16942] team0: Port device team_slave_1 added [ 1143.038319][T16942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.062106][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.132137][T16942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.191451][T16942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.223632][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.411331][T16942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.448602][T16942] hsr_slave_0: entered promiscuous mode [ 1144.476850][T16942] hsr_slave_1: entered promiscuous mode [ 1144.506650][T16942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1144.517033][T16942] Cannot create hsr debugfs directory [ 1144.652021][T15883] Bluetooth: hci3: command 0x0419 tx timeout [ 1144.795146][T17027] serio: Serial port ptm0 [ 1145.342834][T17035] serio: Serial port ptm0 [ 1146.230954][T16942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1146.310401][T16942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1146.321411][T17040] serio: Serial port ptm0 [ 1146.373989][T16942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1146.488850][T16942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1146.923149][T15883] Bluetooth: hci3: command 0x0419 tx timeout [ 1147.726496][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.773423][T16942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.792799][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.799990][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.009200][T16529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.016468][T16529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.548250][T16942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1148.575468][T17085] netlink: 548 bytes leftover after parsing attributes in process `syz.6.3166'. [ 1148.778161][T17087] tipc: Enabling of bearer rejected, already enabled [ 1149.085381][T16942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.888550][T16942] veth0_vlan: entered promiscuous mode [ 1149.904400][T16942] veth1_vlan: entered promiscuous mode [ 1149.991948][T16942] veth0_macvtap: entered promiscuous mode [ 1150.013352][T16942] veth1_macvtap: entered promiscuous mode [ 1150.073177][T16942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.114471][T16942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.152225][T16942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.172340][T16942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.190996][T16942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.205079][T16942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.436643][T16529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.464946][T16529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.254749][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.294472][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.300373][T17123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1152.320541][T14117] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1152.930783][T14117] usb 7-1: Using ep0 maxpacket: 32 [ 1153.011440][T14117] usb 7-1: config 89 has an invalid interface number: 1 but max is 0 [ 1153.167383][T14117] usb 7-1: config 89 has no interface number 0 [ 1153.192394][T14117] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 1153.202774][T14117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.212314][T14117] usb 7-1: Product: syz [ 1153.220760][T14117] usb 7-1: Manufacturer: syz [ 1153.231187][T14117] usb 7-1: SerialNumber: syz [ 1154.085422][T17129] netlink: 'syz.6.3175': attribute type 21 has an invalid length. [ 1154.440464][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1154.440480][ T30] audit: type=1326 audit(1750372605.764:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1154.600050][ T30] audit: type=1326 audit(1750372605.764:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1154.670840][ T30] audit: type=1326 audit(1750372605.764:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1154.777423][ T30] audit: type=1326 audit(1750372605.764:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1154.828758][ T30] audit: type=1326 audit(1750372605.764:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1154.861756][ T30] audit: type=1326 audit(1750372605.834:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17135 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f57545c11e5 code=0x7ffc0000 [ 1154.962511][ T30] audit: type=1326 audit(1750372605.834:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1155.241759][ T30] audit: type=1326 audit(1750372605.844:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1155.295525][ T30] audit: type=1326 audit(1750372605.904:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1155.731200][ T30] audit: type=1326 audit(1750372605.904:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17133 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575458e929 code=0x7ffc0000 [ 1157.464303][T14117] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1157.491366][T14117] usb 7-1: selecting invalid altsetting 1 [ 1157.560901][T17164] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3187'. [ 1158.251404][T14117] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1158.302168][T14117] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1158.558670][T14117] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1158.571300][T14117] usb 7-1: media controller created [ 1159.756071][T14117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.923304][T14117] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1160.055077][T14117] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1160.117557][T14117] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1161.168688][T17179] netlink: 'syz.6.3191': attribute type 3 has an invalid length. [ 1161.242208][T14117] usb 7-1: USB disconnect, device number 7 [ 1161.295559][T17181] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1163.709091][T17203] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1163.736569][T17200] serio: Serial port ptm0 [ 1164.411690][T17209] atomic_op ffff888028cbd198 conn xmit_atomic 0000000000000000 [ 1166.316031][ T9267] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1166.480068][ T9267] usb 3-1: Using ep0 maxpacket: 32 [ 1166.492652][ T9267] usb 3-1: config 89 has an invalid interface number: 1 but max is 0 [ 1166.564012][ T9267] usb 3-1: config 89 has no interface number 0 [ 1166.595175][ T9267] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 1166.613587][ T9267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.635194][ T9267] usb 3-1: Product: syz [ 1166.641182][ T9267] usb 3-1: Manufacturer: syz [ 1166.667281][ T9267] usb 3-1: SerialNumber: syz [ 1167.730557][T17247] netlink: 'syz.2.3206': attribute type 21 has an invalid length. [ 1167.738771][T17247] IPv6: NLM_F_CREATE should be specified when creating new route [ 1168.608816][ T9267] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1168.828778][ T9267] usb 3-1: selecting invalid altsetting 1 [ 1168.835099][ T9267] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1169.028518][ T9267] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1169.271800][ T9267] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1169.291832][ T9267] usb 3-1: media controller created [ 1169.407594][ T9267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.498784][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 1169.510923][ T9267] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1169.522881][ T9267] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1169.558315][T17261] IPVS: Error joining to the multicast group [ 1169.711123][ T9267] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1169.859251][ T9267] usb 3-1: USB disconnect, device number 11 [ 1170.765096][T17273] netlink: 'syz.6.3217': attribute type 4 has an invalid length. [ 1170.773491][T17273] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3217'. [ 1174.538680][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'. [ 1174.560819][T17312] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1175.760519][T15280] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1175.962758][T15280] usb 6-1: Using ep0 maxpacket: 32 [ 1175.975609][T15280] usb 6-1: config 89 has an invalid interface number: 1 but max is 0 [ 1176.619303][T15280] usb 6-1: config 89 has no interface number 0 [ 1176.634137][T15280] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 1176.780814][T15280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.788880][T15280] usb 6-1: Product: syz [ 1176.793663][T15280] usb 6-1: Manufacturer: syz [ 1176.798323][T15280] usb 6-1: SerialNumber: syz [ 1178.029195][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.050423][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.090729][T17344] netlink: 'syz.5.3231': attribute type 21 has an invalid length. [ 1180.378772][T15280] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1180.430025][T15280] usb 6-1: selecting invalid altsetting 1 [ 1180.481146][T15280] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1181.371141][T15280] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1181.470798][T15280] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1181.479148][T15280] usb 6-1: media controller created [ 1181.523554][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3245'. [ 1181.651397][T15280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1181.914621][T17381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1182.820925][T15280] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1182.835408][T15280] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1182.898385][T15280] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1183.710828][ T5943] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1183.910806][T15280] usb 6-1: USB disconnect, device number 26 [ 1184.506220][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 1186.665371][T17408] serio: Serial port ptm0 [ 1186.740477][ T9267] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1187.883190][ T9267] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.967372][ T9267] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1188.026471][ T9267] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1188.136282][ T9267] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1188.260484][ T5943] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1188.272728][ T9267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.355138][ T5943] usb 1-1: can't read configurations, error -71 [ 1188.375790][ T9267] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1188.680608][ T9267] usb 6-1: invalid MIDI out EP 0 [ 1188.943152][ T9267] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1188.977328][T16968] udevd[16968]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1191.208169][ T5943] usb 6-1: USB disconnect, device number 27 [ 1193.781941][T17468] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3275'. [ 1194.740439][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'. [ 1196.070927][T17488] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1196.078924][T15280] IPVS: starting estimator thread 0... [ 1196.279392][T17493] IPVS: using max 23 ests per chain, 55200 per kthread [ 1198.453070][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1199.281837][T14117] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1200.457066][T14117] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1200.518619][T14117] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1200.562312][T14117] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1200.599708][T14117] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1200.637377][T14117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.726542][T14117] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1202.109257][T14117] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1202.416188][ T51] Bluetooth: hci3: command 0x0419 tx timeout [ 1205.106280][T14117] usb 1-1: USB disconnect, device number 9 [ 1207.380452][T14203] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1207.647940][T14203] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1207.669474][T14203] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1207.710281][T14203] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1207.729503][T14203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.023829][T17615] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1208.056736][T14203] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1209.418283][T17593] bridge0: port 3(team0) entered blocking state [ 1209.424771][T17593] bridge0: port 3(team0) entered disabled state [ 1209.431256][T17593] team0: entered allmulticast mode [ 1209.436380][T17593] team_slave_0: entered allmulticast mode [ 1209.442129][T17593] team_slave_1: entered allmulticast mode [ 1209.449851][T17593] team0: entered promiscuous mode [ 1209.454975][T17593] team_slave_0: entered promiscuous mode [ 1209.460870][T17593] team_slave_1: entered promiscuous mode [ 1209.467001][T17593] bridge0: port 3(team0) entered blocking state [ 1209.473371][T17593] bridge0: port 3(team0) entered forwarding state [ 1210.809819][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3321'. [ 1211.484290][ T9270] usb 1-1: USB disconnect, device number 10 [ 1212.954541][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3330'. [ 1214.445791][T17669] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3334'. [ 1214.510955][ T5943] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1214.673737][T17671] siw: device registration error -23 [ 1214.798000][ T5943] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1214.810645][ T5943] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1214.821671][ T5943] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1214.896870][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.048215][T17659] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1215.109529][ T5943] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1216.261854][T17681] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3336'. [ 1217.173851][ T5943] usb 7-1: USB disconnect, device number 8 [ 1217.843352][T17697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1218.783611][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3342'. [ 1224.512460][T17741] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1225.491695][T17759] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1226.304867][T17773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1226.981340][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1228.164949][T17799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1228.742243][T17801] netlink: 'syz.1.3370': attribute type 29 has an invalid length. [ 1228.792023][T17803] netlink: 'syz.1.3370': attribute type 29 has an invalid length. [ 1228.814050][T17801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1231.143981][T17822] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1232.895335][T17850] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3383'. [ 1234.565239][T17857] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3387'. [ 1235.712987][T17869] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1238.754472][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.762764][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.867367][T17915] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1240.670679][T17917] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1243.519359][T17946] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1245.295952][T17958] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1246.833810][T17982] netlink: 47 bytes leftover after parsing attributes in process `syz.5.3422'. [ 1248.814486][T18000] syzkaller1: entered promiscuous mode [ 1248.842096][T18000] syzkaller1: entered allmulticast mode [ 1248.918726][T18004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.033026][T18004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.452833][T18004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.306279][T18004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.345966][T18017] tipc: Enabling of bearer rejected, failed to enable media [ 1252.157432][T18034] siw: device registration error -23 [ 1254.668240][T18032] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3440'. [ 1256.485528][T18064] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1256.504359][T18064] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1256.529425][T18004] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.537884][T18064] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1256.593716][T18004] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.668231][T18004] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.739988][T18004] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.290913][T15883] Bluetooth: hci3: command 0x0419 tx timeout [ 1264.164766][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1264.164786][ T30] audit: type=1326 audit(1750372715.504:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.224091][ T30] audit: type=1326 audit(1750372715.504:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.263657][ T30] audit: type=1326 audit(1750372715.504:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.287365][ T30] audit: type=1326 audit(1750372715.504:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.312888][ T30] audit: type=1326 audit(1750372715.504:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.348223][ T30] audit: type=1326 audit(1750372715.504:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.382758][ T30] audit: type=1326 audit(1750372715.514:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.405137][ T30] audit: type=1326 audit(1750372715.514:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.427418][ T30] audit: type=1326 audit(1750372715.514:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18152 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4111d8e929 code=0x7ffc0000 [ 1264.793171][T18126] netlink: 'syz.5.3463': attribute type 12 has an invalid length. [ 1264.802211][T18129] smc: net device bond0 applied user defined pnetid SYZ2 [ 1264.874534][T18154] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1266.069839][T18174] siw: device registration error -23 [ 1266.640791][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3478'. [ 1266.756489][T18165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.958327][T18225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1272.031646][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1272.071624][T18216] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1272.128162][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3493'. [ 1274.102027][T18215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.110712][T18215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.130650][T18215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.138073][T18215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.227809][T18235] syz!: rxe_newlink: already configured on team_slave_0 [ 1274.960759][T18225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.019212][T18231] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1275.759842][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1275.916872][T18259] netlink: 'syz.2.3503': attribute type 21 has an invalid length. [ 1276.190265][T18264] netlink: 'syz.0.3505': attribute type 21 has an invalid length. [ 1276.198200][T18264] IPv6: NLM_F_CREATE should be specified when creating new route [ 1277.148621][T18272] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1278.237144][T18278] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1281.404183][T18309] trusted_key: encrypted_key: insufficient parameters specified [ 1286.054014][T18345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1287.946866][T18391] siw: device registration error -23 [ 1291.366524][T18422] ======================================================= [ 1291.366524][T18422] WARNING: The mand mount option has been deprecated and [ 1291.366524][T18422] and is ignored by this kernel. Remove the mand [ 1291.366524][T18422] option from the mount to silence this warning. [ 1291.366524][T18422] ======================================================= [ 1292.966683][T18454] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1294.088784][T18465] dvmrp1: entered allmulticast mode [ 1294.095879][T18467] dvmrp1: left allmulticast mode [ 1294.366420][T18473] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3574'. [ 1295.306874][T18485] program syz.2.3579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1297.119352][T18505] xt_CT: No such helper "pptp" [ 1297.248566][ T30] audit: type=1326 audit(1750372748.594:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.330672][ T30] audit: type=1326 audit(1750372748.594:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.375366][ T30] audit: type=1326 audit(1750372748.594:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.420665][T18518] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1297.450764][ T30] audit: type=1326 audit(1750372748.594:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.490714][ T30] audit: type=1326 audit(1750372748.594:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.558104][ T30] audit: type=1326 audit(1750372748.594:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.611978][ T30] audit: type=1326 audit(1750372748.594:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.706202][ T30] audit: type=1326 audit(1750372748.594:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.728588][ T30] audit: type=1326 audit(1750372748.594:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1297.751443][ T30] audit: type=1326 audit(1750372748.594:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.6.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e929 code=0x7ffc0000 [ 1298.800532][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3597'. [ 1300.194112][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.202871][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.374815][T18561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3605'. [ 1300.389629][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3600'. [ 1303.388634][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 1304.512646][T18610] IPVS: Error connecting to the multicast addr [ 1305.866511][T18610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1305.908463][T18624] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1306.556109][T18610] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1306.663503][T18610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1306.680644][T18610] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1306.722267][T18610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1306.728231][T18610] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1306.863249][T18610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1306.880641][T18610] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1307.038268][T18638] IPVS: stopping master sync thread 18639 ... [ 1307.044878][T18639] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1308.070850][T18654] trusted_key: encrypted_key: insufficient parameters specified [ 1308.470889][T18668] dvmrp1: entered allmulticast mode [ 1308.502219][T18668] dvmrp1: left allmulticast mode [ 1308.677053][T18675] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1308.807092][T18682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.815064][T18682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.850092][T18682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.113240][T18682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.171997][T18714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3642'. [ 1314.519486][T18750] syz.6.3648 uses obsolete (PF_INET,SOCK_PACKET) [ 1314.652388][T18755] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1315.498491][T18755] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.759399][T18755] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.926879][T18755] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.260872][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 1316.310189][T18755] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.594400][T18755] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.253703][T18755] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.327466][T18755] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.369868][T18755] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.423397][T18803] netlink: 'syz.6.3659': attribute type 32 has an invalid length. [ 1317.470556][T18803] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3659'. [ 1317.888947][T18822] random: crng reseeded on system resumption [ 1318.299059][T18829] Restarting kernel threads ... [ 1318.305441][T18829] Done restarting kernel threads. [ 1318.678947][T18837] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1319.592542][T18856] random: crng reseeded on system resumption [ 1319.987466][T18863] Restarting kernel threads ... [ 1319.993161][T18863] Done restarting kernel threads. [ 1321.071426][T18871] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1321.228891][T18873] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3674'. [ 1321.277799][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1321.417064][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1321.454674][T18888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1321.507861][T18888] vlan2: entered allmulticast mode [ 1321.521626][T18888] bond1: entered allmulticast mode [ 1321.536683][T18893] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1322.588664][T18915] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3685'. [ 1324.397545][T18928] random: crng reseeded on system resumption [ 1324.746387][T18940] Restarting kernel threads ... [ 1324.752006][T18940] Done restarting kernel threads. [ 1325.797179][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3692'. [ 1325.869562][T18943] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1325.918923][T18946] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1325.973558][T18947] vlan2: entered allmulticast mode [ 1325.985810][T18947] bond7: entered allmulticast mode [ 1326.002184][T18949] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1326.087665][T18953] tipc: Enabling of bearer rejected, failed to enable media [ 1326.673233][T18967] netlink: 83 bytes leftover after parsing attributes in process `syz.5.3698'. [ 1330.808234][T19003] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1331.526186][T19002] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1332.274617][T19025] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3709'. [ 1332.920133][T19033] tipc: Enabling of bearer rejected, failed to enable media [ 1334.218647][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 1335.407040][T19095] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1336.340387][T19117] netlink: 83 bytes leftover after parsing attributes in process `syz.5.3721'. [ 1338.778605][T19130] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1361.615185][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.621754][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.054244][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.061183][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.730573][ T31] INFO: task kworker/0:6:5943 blocked for more than 143 seconds. [ 1478.738378][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1478.746388][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1478.755217][ T31] task:kworker/0:6 state:D stack:21912 pid:5943 tgid:5943 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1478.767356][ T31] Workqueue: events rfkill_sync_work [ 1478.772822][ T31] Call Trace: [ 1478.776172][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1478.779131][ T31] __schedule+0x16a2/0x4cb0 [ 1478.784144][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1478.789578][ T31] ? schedule+0x165/0x360 [ 1478.794152][ T31] ? __pfx___schedule+0x10/0x10 [ 1478.799094][ T31] ? schedule+0x91/0x360 [ 1478.803457][ T31] schedule+0x165/0x360 [ 1478.807665][ T31] schedule_preempt_disabled+0x13/0x30 [ 1478.850553][ T31] __mutex_lock+0x724/0xe80 [ 1478.855180][ T31] ? __lock_acquire+0xab9/0xd20 [ 1478.860078][ T31] ? __mutex_lock+0x51b/0xe80 [ 1478.885507][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1478.893512][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1478.898612][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1478.904049][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1478.909995][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1478.916491][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1478.922342][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1478.927486][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1478.933406][ T31] rfkill_set_block+0x1d2/0x440 [ 1478.938311][ T31] rfkill_sync_work+0x114/0x200 [ 1478.943377][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1478.949141][ T31] process_scheduled_works+0xade/0x17b0 [ 1478.954825][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1478.960898][ T31] worker_thread+0x8a0/0xda0 [ 1478.965533][ T31] kthread+0x70e/0x8a0 [ 1478.969631][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1478.974888][ T31] ? __pfx_kthread+0x10/0x10 [ 1478.979511][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1478.984903][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1478.990284][ T31] ? __pfx_kthread+0x10/0x10 [ 1478.994927][ T31] ret_from_fork+0x3f9/0x770 [ 1478.999549][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.004923][ T31] ? __switch_to_asm+0x39/0x70 [ 1479.009746][ T31] ? __switch_to_asm+0x33/0x70 [ 1479.014599][ T31] ? __pfx_kthread+0x10/0x10 [ 1479.019240][ T31] ret_from_fork_asm+0x1a/0x30 [ 1479.024214][ T31] [ 1479.027330][ T31] INFO: task kworker/0:2:17394 blocked for more than 143 seconds. [ 1479.035303][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1479.043023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.051786][ T31] task:kworker/0:2 state:D stack:25352 pid:17394 tgid:17394 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1479.063913][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1479.070705][ T31] Call Trace: [ 1479.074012][ T31] [ 1479.076955][ T31] __schedule+0x16a2/0x4cb0 [ 1479.081670][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1479.087100][ T31] ? schedule+0x165/0x360 [ 1479.091550][ T31] ? __pfx___schedule+0x10/0x10 [ 1479.096486][ T31] ? schedule+0x91/0x360 [ 1479.100829][ T31] schedule+0x165/0x360 [ 1479.105033][ T31] schedule_preempt_disabled+0x13/0x30 [ 1479.110578][ T31] __mutex_lock+0x724/0xe80 [ 1479.115143][ T31] ? look_up_lock_class+0x74/0x170 [ 1479.120352][ T31] ? __mutex_lock+0x51b/0xe80 [ 1479.125074][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1479.131861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1479.136943][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1479.142953][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1479.148708][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1479.154857][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1479.160694][ T31] process_scheduled_works+0xade/0x17b0 [ 1479.166298][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1479.172367][ T31] worker_thread+0x8a0/0xda0 [ 1479.176988][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1479.183406][ T31] ? __kthread_parkme+0x7b/0x200 [ 1479.188387][ T31] kthread+0x70e/0x8a0 [ 1479.192518][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1479.197657][ T31] ? __pfx_kthread+0x10/0x10 [ 1479.202310][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1479.207549][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1479.212855][ T31] ? __pfx_kthread+0x10/0x10 [ 1479.217464][ T31] ret_from_fork+0x3f9/0x770 [ 1479.222129][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.227284][ T31] ? __switch_to_asm+0x39/0x70 [ 1479.232116][ T31] ? __switch_to_asm+0x33/0x70 [ 1479.236912][ T31] ? __pfx_kthread+0x10/0x10 [ 1479.241583][ T31] ret_from_fork_asm+0x1a/0x30 [ 1479.246389][ T31] [ 1479.249436][ T31] INFO: task syz.1.3668:18843 blocked for more than 143 seconds. [ 1479.259529][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1479.267252][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.275977][ T31] task:syz.1.3668 state:D stack:25128 pid:18843 tgid:18843 ppid:16301 task_flags:0x400040 flags:0x00004004 [ 1479.287954][ T31] Call Trace: [ 1479.291467][ T31] [ 1479.294424][ T31] __schedule+0x16a2/0x4cb0 [ 1479.298955][ T31] ? schedule+0x165/0x360 [ 1479.303346][ T31] ? __lock_acquire+0xab9/0xd20 [ 1479.308241][ T31] ? __pfx___schedule+0x10/0x10 [ 1479.313221][ T31] ? schedule+0x91/0x360 [ 1479.317505][ T31] schedule+0x165/0x360 [ 1479.321742][ T31] schedule_timeout+0x9a/0x270 [ 1479.326562][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1479.332019][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1479.337269][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1479.342525][ T31] ? wait_for_completion+0x267/0x5d0 [ 1479.347856][ T31] wait_for_completion+0x2bf/0x5d0 [ 1479.353097][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1479.358779][ T31] ? __flush_work+0xd2/0xbc0 [ 1479.363479][ T31] ? __flush_work+0xd2/0xbc0 [ 1479.368200][ T31] __flush_work+0x9b9/0xbc0 [ 1479.372797][ T31] ? __flush_work+0xd2/0xbc0 [ 1479.377432][ T31] ? __pfx___flush_work+0x10/0x10 [ 1479.382538][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1479.387884][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1479.393059][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1479.398720][ T31] __cancel_work_sync+0xbe/0x110 [ 1479.403767][ T31] rfkill_unregister+0x92/0x220 [ 1479.408664][ T31] nfc_unregister_device+0x96/0x2a0 [ 1479.413936][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1479.419687][ T31] virtual_ncidev_close+0x56/0x90 [ 1479.424759][ T31] __fput+0x44c/0xa70 [ 1479.428803][ T31] task_work_run+0x1d1/0x260 [ 1479.433445][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1479.438587][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1479.444150][ T31] exit_to_user_mode_loop+0xec/0x110 [ 1479.449471][ T31] do_syscall_64+0x2bd/0x3b0 [ 1479.458060][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1479.463367][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.469463][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1479.474217][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.480171][ T31] RIP: 0033:0x7f4111d8e929 [ 1479.484632][ T31] RSP: 002b:00007ffc4102d708 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1479.493198][ T31] RAX: 0000000000000000 RBX: 00000000001421cc RCX: 00007f4111d8e929 [ 1479.501246][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1479.509247][ T31] RBP: 00007f4111fb7ba0 R08: 0000000000000001 R09: 000000094102d9ff [ 1479.517284][ T31] R10: 00007f4111c00000 R11: 0000000000000246 R12: 00007f4111fb5fac [ 1479.525335][ T31] R13: 00007f4111fb5fa0 R14: ffffffffffffffff R15: 00007ffc4102d820 [ 1479.533685][ T31] [ 1479.536765][ T31] INFO: task syz.0.3707:19014 blocked for more than 144 seconds. [ 1479.545018][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1479.553055][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.561870][ T31] task:syz.0.3707 state:D stack:27752 pid:19014 tgid:19012 ppid:15253 task_flags:0x400140 flags:0x00004004 [ 1479.573959][ T31] Call Trace: [ 1479.577252][ T31] [ 1479.580334][ T31] __schedule+0x16a2/0x4cb0 [ 1479.584896][ T31] ? schedule+0x165/0x360 [ 1479.589242][ T31] ? __pfx___schedule+0x10/0x10 [ 1479.594474][ T31] ? schedule+0x91/0x360 [ 1479.598793][ T31] schedule+0x165/0x360 [ 1479.603074][ T31] schedule_preempt_disabled+0x13/0x30 [ 1479.608567][ T31] __mutex_lock+0x724/0xe80 [ 1479.613243][ T31] ? __mutex_lock+0x51b/0xe80 [ 1479.617984][ T31] ? rfkill_fop_open+0x12d/0x820 [ 1479.623333][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1479.628419][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1479.633917][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1479.639335][ T31] rfkill_fop_open+0x12d/0x820 [ 1479.644253][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1479.649581][ T31] misc_open+0x2bc/0x330 [ 1479.654020][ T31] chrdev_open+0x4c9/0x5e0 [ 1479.658502][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1479.663745][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1479.668732][ T31] do_dentry_open+0xdf0/0x1970 [ 1479.673650][ T31] vfs_open+0x3b/0x340 [ 1479.677765][ T31] ? path_openat+0x2ecd/0x3830 [ 1479.682670][ T31] path_openat+0x2ee5/0x3830 [ 1479.687287][ T31] ? arch_stack_walk+0xfc/0x150 [ 1479.692403][ T31] ? __pfx_path_openat+0x10/0x10 [ 1479.697367][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.703679][ T31] do_filp_open+0x1fa/0x410 [ 1479.708219][ T31] ? __lock_acquire+0xab9/0xd20 [ 1479.713200][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1479.718275][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1479.723244][ T31] ? alloc_fd+0x64c/0x6c0 [ 1479.727618][ T31] do_sys_openat2+0x121/0x1c0 [ 1479.732664][ T31] ? __se_sys_futex+0x36f/0x400 [ 1479.737536][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1479.742900][ T31] ? rcu_is_watching+0x15/0xb0 [ 1479.747720][ T31] __x64_sys_openat+0x138/0x170 [ 1479.752726][ T31] do_syscall_64+0xfa/0x3b0 [ 1479.757276][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1479.762635][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.768729][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1479.773497][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.779418][ T31] RIP: 0033:0x7f575458e929 [ 1479.783947][ T31] RSP: 002b:00007f5755329038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1479.792574][ T31] RAX: ffffffffffffffda RBX: 00007f57547b5fa0 RCX: 00007f575458e929 [ 1479.800675][ T31] RDX: 0000000000040002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1479.808677][ T31] RBP: 00007f5754610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1479.816747][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1479.824820][ T31] R13: 0000000000000000 R14: 00007f57547b5fa0 R15: 00007fff2f4dbc38 [ 1479.833026][ T31] [ 1479.836083][ T31] INFO: task syz.6.3710:19028 blocked for more than 144 seconds. [ 1479.844121][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1479.852099][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.860922][ T31] task:syz.6.3710 state:D stack:27240 pid:19028 tgid:19027 ppid:14114 task_flags:0x400040 flags:0x00004004 [ 1479.873070][ T31] Call Trace: [ 1479.876393][ T31] [ 1479.879383][ T31] __schedule+0x16a2/0x4cb0 [ 1479.884073][ T31] ? __kasan_slab_free+0x62/0x70 [ 1479.889063][ T31] ? security_file_open+0xb1/0x270 [ 1479.894655][ T31] ? __lock_acquire+0xa80/0xd20 [ 1479.899560][ T31] ? schedule+0x165/0x360 [ 1479.903966][ T31] ? __pfx___schedule+0x10/0x10 [ 1479.908862][ T31] ? schedule+0x91/0x360 [ 1479.913301][ T31] schedule+0x165/0x360 [ 1479.917504][ T31] schedule_preempt_disabled+0x13/0x30 [ 1479.923200][ T31] __mutex_lock+0x724/0xe80 [ 1479.927752][ T31] ? __mutex_lock+0x51b/0xe80 [ 1479.932919][ T31] ? misc_open+0x51/0x330 [ 1479.937292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1479.942423][ T31] misc_open+0x51/0x330 [ 1479.946619][ T31] chrdev_open+0x4c9/0x5e0 [ 1479.951167][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1479.956149][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1479.961175][ T31] do_dentry_open+0xdf0/0x1970 [ 1479.965994][ T31] vfs_open+0x3b/0x340 [ 1479.970076][ T31] ? path_openat+0x2ecd/0x3830 [ 1479.974924][ T31] path_openat+0x2ee5/0x3830 [ 1479.979537][ T31] ? arch_stack_walk+0xfc/0x150 [ 1479.984509][ T31] ? __pfx_path_openat+0x10/0x10 [ 1479.989477][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.995669][ T31] do_filp_open+0x1fa/0x410 [ 1480.000238][ T31] ? __lock_acquire+0xab9/0xd20 [ 1480.005131][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1480.010972][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1480.016252][ T31] ? alloc_fd+0x64c/0x6c0 [ 1480.020740][ T31] do_sys_openat2+0x121/0x1c0 [ 1480.025462][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1480.030808][ T31] ? exc_page_fault+0x76/0xf0 [ 1480.035538][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1480.040919][ T31] __x64_sys_openat+0x138/0x170 [ 1480.045820][ T31] do_syscall_64+0xfa/0x3b0 [ 1480.050395][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1480.055625][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.061774][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1480.066569][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.072565][ T31] RIP: 0033:0x7fa44b18e929 [ 1480.077032][ T31] RSP: 002b:00007fa44c00e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1480.085572][ T31] RAX: ffffffffffffffda RBX: 00007fa44b3b5fa0 RCX: 00007fa44b18e929 [ 1480.093614][ T31] RDX: 00000000001c1341 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1480.101693][ T31] RBP: 00007fa44b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1480.109686][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.117774][ T31] R13: 0000000000000001 R14: 00007fa44b3b5fa0 R15: 00007fffcb0929f8 [ 1480.125926][ T31] [ 1480.128971][ T31] INFO: task syz.6.3710:19030 blocked for more than 144 seconds. [ 1480.136987][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1480.144945][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1480.153856][ T31] task:syz.6.3710 state:D stack:28328 pid:19030 tgid:19027 ppid:14114 task_flags:0x400040 flags:0x00004004 [ 1480.165932][ T31] Call Trace: [ 1480.169225][ T31] [ 1480.172538][ T31] __schedule+0x16a2/0x4cb0 [ 1480.177122][ T31] ? __kasan_slab_free+0x62/0x70 [ 1480.182231][ T31] ? security_file_open+0xb1/0x270 [ 1480.187388][ T31] ? __lock_acquire+0xa81/0xd20 [ 1480.192327][ T31] ? schedule+0x165/0x360 [ 1480.196700][ T31] ? __pfx___schedule+0x10/0x10 [ 1480.201777][ T31] ? schedule+0x91/0x360 [ 1480.206068][ T31] schedule+0x165/0x360 [ 1480.210430][ T31] schedule_preempt_disabled+0x13/0x30 [ 1480.215919][ T31] __mutex_lock+0x724/0xe80 [ 1480.220612][ T31] ? __mutex_lock+0x51b/0xe80 [ 1480.225356][ T31] ? misc_open+0x51/0x330 [ 1480.229696][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1480.234841][ T31] misc_open+0x51/0x330 [ 1480.239050][ T31] chrdev_open+0x4c9/0x5e0 [ 1480.243605][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1480.248626][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1480.254139][ T31] do_dentry_open+0xdf0/0x1970 [ 1480.258973][ T31] vfs_open+0x3b/0x340 [ 1480.263204][ T31] ? path_openat+0x2ecd/0x3830 [ 1480.268005][ T31] path_openat+0x2ee5/0x3830 [ 1480.272729][ T31] ? arch_stack_walk+0xfc/0x150 [ 1480.277632][ T31] ? __pfx_path_openat+0x10/0x10 [ 1480.282882][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.288988][ T31] do_filp_open+0x1fa/0x410 [ 1480.293567][ T31] ? __lock_acquire+0xab9/0xd20 [ 1480.298445][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1480.303609][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1480.308508][ T31] ? alloc_fd+0x64c/0x6c0 [ 1480.312935][ T31] do_sys_openat2+0x121/0x1c0 [ 1480.317644][ T31] ? __se_sys_futex+0x36f/0x400 [ 1480.322610][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1480.327862][ T31] ? rcu_is_watching+0x15/0xb0 [ 1480.332726][ T31] __x64_sys_openat+0x138/0x170 [ 1480.337618][ T31] do_syscall_64+0xfa/0x3b0 [ 1480.342273][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1480.347623][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.353801][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1480.358522][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.364510][ T31] RIP: 0033:0x7fa44b18e929 [ 1480.368951][ T31] RSP: 002b:00007fa44bfed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1480.377558][ T31] RAX: ffffffffffffffda RBX: 00007fa44b3b6080 RCX: 00007fa44b18e929 [ 1480.385736][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1480.394070][ T31] RBP: 00007fa44b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1480.402146][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.410404][ T31] R13: 0000000000000000 R14: 00007fa44b3b6080 R15: 00007fffcb0929f8 [ 1480.418432][ T31] [ 1480.421592][ T31] INFO: task syz.2.3719:19085 blocked for more than 145 seconds. [ 1480.429345][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1480.438111][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1480.446905][ T31] task:syz.2.3719 state:D stack:28328 pid:19085 tgid:19084 ppid:16942 task_flags:0x400040 flags:0x00004004 [ 1480.458948][ T31] Call Trace: [ 1480.462377][ T31] [ 1480.465338][ T31] __schedule+0x16a2/0x4cb0 [ 1480.469860][ T31] ? __kasan_slab_free+0x62/0x70 [ 1480.474919][ T31] ? security_file_open+0xb1/0x270 [ 1480.480096][ T31] ? __lock_acquire+0xa81/0xd20 [ 1480.485138][ T31] ? schedule+0x165/0x360 [ 1480.489508][ T31] ? __pfx___schedule+0x10/0x10 [ 1480.495502][ T31] ? schedule+0x91/0x360 [ 1480.499830][ T31] schedule+0x165/0x360 [ 1480.504404][ T31] schedule_preempt_disabled+0x13/0x30 [ 1480.509903][ T31] __mutex_lock+0x724/0xe80 [ 1480.514501][ T31] ? __mutex_lock+0x51b/0xe80 [ 1480.519305][ T31] ? misc_open+0x51/0x330 [ 1480.523747][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1480.528828][ T31] misc_open+0x51/0x330 [ 1480.533092][ T31] chrdev_open+0x4c9/0x5e0 [ 1480.537551][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1480.542658][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1480.547638][ T31] do_dentry_open+0xdf0/0x1970 [ 1480.552509][ T31] vfs_open+0x3b/0x340 [ 1480.556609][ T31] ? path_openat+0x2ecd/0x3830 [ 1480.561484][ T31] path_openat+0x2ee5/0x3830 [ 1480.566100][ T31] ? arch_stack_walk+0xfc/0x150 [ 1480.571094][ T31] ? __pfx_path_openat+0x10/0x10 [ 1480.576059][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.582298][ T31] do_filp_open+0x1fa/0x410 [ 1480.586839][ T31] ? __lock_acquire+0xab9/0xd20 [ 1480.591856][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1480.596938][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1480.601938][ T31] ? alloc_fd+0x64c/0x6c0 [ 1480.606309][ T31] do_sys_openat2+0x121/0x1c0 [ 1480.611375][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1480.616632][ T31] ? exc_page_fault+0x76/0xf0 [ 1480.621462][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1480.626786][ T31] __x64_sys_openat+0x138/0x170 [ 1480.631744][ T31] do_syscall_64+0xfa/0x3b0 [ 1480.636286][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1480.641588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.647683][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1480.652543][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.658479][ T31] RIP: 0033:0x7fc9d4b8e929 [ 1480.663079][ T31] RSP: 002b:00007fc9d5913038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1480.671602][ T31] RAX: ffffffffffffffda RBX: 00007fc9d4db5fa0 RCX: 00007fc9d4b8e929 [ 1480.679610][ T31] RDX: 0000000000000400 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1480.687730][ T31] RBP: 00007fc9d4c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1480.695777][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.703896][ T31] R13: 0000000000000001 R14: 00007fc9d4db5fa0 R15: 00007fff18f4faa8 [ 1480.711992][ T31] [ 1480.715067][ T31] [ 1480.715067][ T31] Showing all locks held in the system: [ 1480.723098][ T31] 1 lock held by khungtaskd/31: [ 1480.727973][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1480.737957][ T31] 1 lock held by klogd/5183: [ 1480.742707][ T31] #0: ffff8880b863b798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1480.752710][ T31] 2 locks held by getty/5584: [ 1480.757389][ T31] #0: ffff88814c8a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1480.767252][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1480.777445][ T31] 4 locks held by kworker/0:6/5943: [ 1480.782702][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1480.793864][ T31] #1: ffffc900046efbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1480.806351][ T31] #2: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1480.816631][ T31] #3: ffff88806694e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1480.826665][ T31] 2 locks held by kworker/u8:9/5999: [ 1480.832269][ T31] #0: ffff8880b863b798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1480.842578][ T31] #1: ffffc9000508fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1480.855899][ T31] 3 locks held by kworker/0:2/17394: [ 1480.861280][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1480.872507][ T31] #1: ffffc9000b837bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1480.886132][ T31] #2: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1480.897972][ T31] 1 lock held by syz.1.3668/18843: [ 1480.903160][ T31] #0: ffff88806694e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1480.913194][ T31] 2 locks held by syz.0.3707/19014: [ 1480.918384][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1480.926997][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1480.937265][ T31] 1 lock held by syz.6.3710/19028: [ 1480.943086][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1480.951681][ T31] 1 lock held by syz.6.3710/19030: [ 1480.956942][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1480.965534][ T31] 1 lock held by syz.2.3719/19085: [ 1480.971200][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1480.979683][ T31] 1 lock held by syz-executor/19096: [ 1480.985393][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1480.993975][ T31] 1 lock held by syz.5.3727/19140: [ 1480.999110][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.007638][ T31] 1 lock held by syz-executor/19142: [ 1481.013465][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.022004][ T31] 1 lock held by syz-executor/19144: [ 1481.027321][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.035969][ T31] 1 lock held by syz-executor/19146: [ 1481.041323][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.049813][ T31] 1 lock held by syz-executor/19148: [ 1481.055403][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.064248][ T31] 1 lock held by syz-executor/19153: [ 1481.069550][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.078101][ T31] 1 lock held by syz-executor/19159: [ 1481.083487][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.092078][ T31] 1 lock held by syz-executor/19161: [ 1481.097579][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.106177][ T31] 1 lock held by syz-executor/19163: [ 1481.111587][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.120104][ T31] 1 lock held by syz-executor/19165: [ 1481.125486][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.134496][ T31] 1 lock held by syz-executor/19170: [ 1481.139808][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.148398][ T31] 1 lock held by syz-executor/19176: [ 1481.153807][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.162365][ T31] 1 lock held by syz-executor/19178: [ 1481.167676][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.176466][ T31] 1 lock held by syz-executor/19180: [ 1481.182102][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.190745][ T31] 1 lock held by syz-executor/19182: [ 1481.196050][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1481.204613][ T31] [ 1481.206973][ T31] ============================================= [ 1481.206973][ T31] [ 1481.215586][ T31] NMI backtrace for cpu 1 [ 1481.215607][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 1481.215647][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1481.215658][ T31] Call Trace: [ 1481.215665][ T31] [ 1481.215672][ T31] dump_stack_lvl+0x189/0x250 [ 1481.215698][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1481.215719][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1481.215743][ T31] ? __pfx__printk+0x10/0x10 [ 1481.215771][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1481.215796][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1481.215814][ T31] ? _printk+0xcf/0x120 [ 1481.215835][ T31] ? __pfx__printk+0x10/0x10 [ 1481.215855][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1481.215879][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1481.215902][ T31] watchdog+0xfee/0x1030 [ 1481.215925][ T31] ? watchdog+0x1de/0x1030 [ 1481.215955][ T31] kthread+0x70e/0x8a0 [ 1481.215977][ T31] ? __pfx_watchdog+0x10/0x10 [ 1481.215997][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.216016][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1481.216039][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1481.216061][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.216080][ T31] ret_from_fork+0x3f9/0x770 [ 1481.216105][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1481.216134][ T31] ? __switch_to_asm+0x39/0x70 [ 1481.216149][ T31] ? __switch_to_asm+0x33/0x70 [ 1481.216163][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.216182][ T31] ret_from_fork_asm+0x1a/0x30 [ 1481.216214][ T31] [ 1481.216221][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1481.373877][ C0] NMI backtrace for cpu 0 [ 1481.373894][ C0] CPU: 0 UID: 0 PID: 6140 Comm: kworker/u8:10 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 1481.373915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1481.373926][ C0] Workqueue: bat_events batadv_nc_worker [ 1481.373953][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 1481.373984][ C0] Code: e8 3f b2 48 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 d0 8d f2 10 e8 fb 2e b8 09 89 c3 83 f8 08 73 65 [ 1481.374000][ C0] RSP: 0018:ffffc9000b47fa10 EFLAGS: 00000202 [ 1481.374013][ C0] RAX: ffffffff8b2d0923 RBX: 0000000000000001 RCX: 0000000000000000 [ 1481.374025][ C0] RDX: ffff88802531da00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1481.374035][ C0] RBP: ffff888028be87c0 R08: 0000000000000000 R09: ffffffff8b2d08f2 [ 1481.374047][ C0] R10: dffffc0000000000 R11: ffffffff8b2d0820 R12: dffffc0000000000 [ 1481.374059][ C0] R13: ffffffff8b2d08f2 R14: ffff88801e2e8d80 R15: 00000000000000f8 [ 1481.374071][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 1481.374085][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.374096][ C0] CR2: 0000555796d7e000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1481.374111][ C0] DR0: 00000000000000f8 DR1: 0000000000000000 DR2: 0000000000000000 [ 1481.374121][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1481.374131][ C0] Call Trace: [ 1481.374137][ C0] [ 1481.374144][ C0] batadv_nc_worker+0x10c/0x610 [ 1481.374168][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1481.374193][ C0] process_scheduled_works+0xade/0x17b0 [ 1481.374234][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1481.374267][ C0] worker_thread+0x8a0/0xda0 [ 1481.374292][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1481.374319][ C0] ? __kthread_parkme+0x7b/0x200 [ 1481.374349][ C0] kthread+0x70e/0x8a0 [ 1481.374375][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1481.374398][ C0] ? __pfx_kthread+0x10/0x10 [ 1481.374415][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1481.374436][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1481.374458][ C0] ? __pfx_kthread+0x10/0x10 [ 1481.374475][ C0] ret_from_fork+0x3f9/0x770 [ 1481.374498][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1481.374523][ C0] ? __switch_to_asm+0x39/0x70 [ 1481.374568][ C0] ? __switch_to_asm+0x33/0x70 [ 1481.374582][ C0] ? __pfx_kthread+0x10/0x10 [ 1481.374619][ C0] ret_from_fork_asm+0x1a/0x30 [ 1481.374659][ C0] [ 1481.374973][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1481.630569][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 1481.642393][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1481.652456][ T31] Call Trace: [ 1481.655747][ T31] [ 1481.658688][ T31] dump_stack_lvl+0x99/0x250 [ 1481.663299][ T31] ? __asan_memcpy+0x40/0x70 [ 1481.667898][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1481.673123][ T31] ? __pfx__printk+0x10/0x10 [ 1481.677734][ T31] panic+0x2db/0x790 [ 1481.681653][ T31] ? __pfx_panic+0x10/0x10 [ 1481.686085][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1481.691918][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1481.697403][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1481.703584][ T31] watchdog+0x102d/0x1030 [ 1481.707934][ T31] ? watchdog+0x1de/0x1030 [ 1481.712374][ T31] kthread+0x70e/0x8a0 [ 1481.716456][ T31] ? __pfx_watchdog+0x10/0x10 [ 1481.721166][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.725763][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1481.730976][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1481.736194][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.740797][ T31] ret_from_fork+0x3f9/0x770 [ 1481.745408][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1481.750549][ T31] ? __switch_to_asm+0x39/0x70 [ 1481.755327][ T31] ? __switch_to_asm+0x33/0x70 [ 1481.760092][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.764694][ T31] ret_from_fork_asm+0x1a/0x30 [ 1481.769490][ T31] [ 1481.772909][ T31] Kernel Offset: disabled [ 1481.777399][ T31] Rebooting in 86400 seconds..