last executing test programs: 1m24.632604947s ago: executing program 4 (id=368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000900800034000000007080004400000000f080001400000000024000580040000007061796c6f6164000800028008000340000040b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 1m24.460786832s ago: executing program 4 (id=369): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000595000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000ce000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000087c0), 0x0, 0x20000000) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000140)={0xa, 0x4a22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000044) shutdown(r0, 0x1) 1m24.239801416s ago: executing program 4 (id=371): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) 1m23.83126367s ago: executing program 4 (id=373): r0 = io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x32b}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.457815239s ago: executing program 4 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1m23.287558606s ago: executing program 4 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = io_uring_setup(0x17f8, &(0x7f0000000080)={0x0, 0xffffafff, 0x0, 0x0, 0x33d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000e6", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m8.060044688s ago: executing program 32 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = io_uring_setup(0x17f8, &(0x7f0000000080)={0x0, 0xffffafff, 0x0, 0x0, 0x33d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000e6", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.710272024s ago: executing program 3 (id=852): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[], 0x48) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xf05, 0x40800) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_emit_ethernet(0x148, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r4], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="b1e976a0a0754b1c90e9fc770d3a2f8ce0b43b64b6029e87feb2edd075ab84037b6ff356378f01e2c02f616a477a85989ff158761197d957280b0ac4aca8cf57"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000a40)='xprtrdma_nomrs_err\x00', r0, 0x0, 0x800}, 0xfffffffffffffeb1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) read$eventfd(r7, &(0x7f0000000280), 0x8) 5.951677258s ago: executing program 3 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d37a6d95c19185020000010000000000000001410001001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) 5.030792803s ago: executing program 3 (id=860): unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x18) setuid(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r2, 0x2004, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.443594776s ago: executing program 0 (id=870): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) 2.801620361s ago: executing program 5 (id=876): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000a40)=""/192, 0xc0}, 0x8}], 0x1, 0x10002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) 2.789771688s ago: executing program 2 (id=877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 2.686665002s ago: executing program 1 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0x2}, {0xe}}}, 0x24}}, 0x40484c4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) 2.452321478s ago: executing program 0 (id=879): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8fd00000900bfa100000000000007010000f8ffffffb702000008000000b7030000000000cbb61d05"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300)}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000014c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000001600)=[{0x1, 0x0, [0x6, 0x0, 0x3, 0xff, 0x0, 0x7f, 0x0, 0x9, 0x7c266004, 0x101, 0x3, 0x8, 0x3, 0xea, 0x0, 0xc329]}, {0x0, 0x0, [0x682, 0xa, 0x9, 0x200, 0x2, 0xaa5, 0x5, 0x6000, 0x2, 0x39, 0xbfd9, 0x100, 0x5, 0x8001, 0x7]}, {0x16, 0x0, [0x25, 0x5, 0x10001, 0x7, 0x9f0a, 0x8001, 0x4, 0x100, 0x4, 0x2, 0xb4, 0x5b, 0x9, 0x9, 0x22, 0x40000000]}, {0x2, 0x0, [0x10, 0x2, 0xe, 0x2, 0xf7c6, 0x16, 0x4, 0xd90, 0x3ff, 0xc8, 0x4, 0x4, 0x8, 0x5, 0xfef, 0xdc]}, {0x1, 0x0, [0x39, 0x6, 0xfffffff8, 0xd, 0x8000, 0xbb, 0x8, 0x6, 0xff, 0x40003, 0x5, 0x8a, 0x8001, 0x81, 0x2, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.300051273s ago: executing program 0 (id=880): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 2.268486566s ago: executing program 2 (id=881): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) acct(0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket(0xa, 0x2, 0x0) r2 = memfd_create(0x0, 0x1) pwritev(r2, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002de8) 2.102603726s ago: executing program 2 (id=882): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.023688532s ago: executing program 1 (id=883): syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x0, 0xcb}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x24040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.794808309s ago: executing program 2 (id=884): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.79328244s ago: executing program 1 (id=885): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'dummy0\x00', @random="0000230c1100"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00%\x00'], 0xfe33) 1.644635092s ago: executing program 0 (id=886): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x3e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0xffffffffffffffff, 0x40}}, 0x48) 1.605123396s ago: executing program 5 (id=887): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.545872956s ago: executing program 3 (id=888): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a00000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11ed, &(0x7f0000000900)=ANY=[], 0x0) 1.422434672s ago: executing program 1 (id=889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r2) accept4(r1, 0x0, 0x0, 0x80800) 1.343578732s ago: executing program 5 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.342873809s ago: executing program 0 (id=891): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r4}, 0x18) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x100, 0x101, 0xfff8, 0xffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) open_by_handle_at(r7, &(0x7f0000000300)=@fuse_with_parent={0x18, 0x82, {{0x4, 0x3, 0x80000000}, {0x9, 0x6, 0x6}}}, 0x800002) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r8) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x111, 0x58bd2c, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0x6, 0x8}, {0x5, 0xffff}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 1.224184528s ago: executing program 1 (id=892): r0 = socket$netlink(0x10, 0x3, 0x0) fsync(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x40, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 1.149178312s ago: executing program 5 (id=893): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{0x0}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 1.052346991s ago: executing program 3 (id=894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18a8000000000000000000000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 876.176878ms ago: executing program 5 (id=895): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 747.623087ms ago: executing program 5 (id=896): openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000840)=""/242) 742.233533ms ago: executing program 2 (id=897): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r1}) 604.288438ms ago: executing program 0 (id=898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) 60.135405ms ago: executing program 2 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = inotify_init() r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) 59.413375ms ago: executing program 3 (id=900): syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 0s ago: executing program 1 (id=901): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) kernel console output (not intermixed with test programs): [ 92.157601][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 99.425939][ T5788] cgroup: Unknown subsys name 'net' [ 99.677325][ T5788] cgroup: Unknown subsys name 'cpuset' [ 99.721401][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.426432][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.420583][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.423578][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.432593][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.440066][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.442914][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.449531][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.455715][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.457746][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.470218][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.503191][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.503436][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.508431][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.512365][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.517839][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.523748][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.528551][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.529134][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.529648][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.545353][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.578106][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.660253][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.717049][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.718304][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.801515][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.807428][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.052240][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 109.124934][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 109.157148][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 109.452133][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 109.569920][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 109.593612][ T5813] Bluetooth: hci1: command tx timeout [ 109.750772][ T5813] Bluetooth: hci4: command tx timeout [ 109.840836][ T61] Bluetooth: hci3: command tx timeout [ 109.840859][ T5813] Bluetooth: hci0: command tx timeout [ 109.910884][ T5813] Bluetooth: hci2: command tx timeout [ 110.153802][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.154710][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.155190][ T5811] bridge_slave_0: entered allmulticast mode [ 110.157319][ T5811] bridge_slave_0: entered promiscuous mode [ 110.313790][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.313930][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.314153][ T5811] bridge_slave_1: entered allmulticast mode [ 110.316856][ T5811] bridge_slave_1: entered promiscuous mode [ 110.321929][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.322086][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.322319][ T5808] bridge_slave_0: entered allmulticast mode [ 110.325945][ T5808] bridge_slave_0: entered promiscuous mode [ 110.381599][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.381782][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.386418][ T5807] bridge_slave_0: entered allmulticast mode [ 110.390127][ T5807] bridge_slave_0: entered promiscuous mode [ 110.501875][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.501982][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.502121][ T5808] bridge_slave_1: entered allmulticast mode [ 110.504075][ T5808] bridge_slave_1: entered promiscuous mode [ 110.610156][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.610275][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.610909][ T5807] bridge_slave_1: entered allmulticast mode [ 110.614614][ T5807] bridge_slave_1: entered promiscuous mode [ 110.945394][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.022771][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.022865][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.023015][ T5820] bridge_slave_0: entered allmulticast mode [ 111.024978][ T5820] bridge_slave_0: entered promiscuous mode [ 111.194797][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.198434][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.322376][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.322551][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.322700][ T5820] bridge_slave_1: entered allmulticast mode [ 111.324681][ T5820] bridge_slave_1: entered promiscuous mode [ 111.326313][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.326421][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.326622][ T5806] bridge_slave_0: entered allmulticast mode [ 111.328617][ T5806] bridge_slave_0: entered promiscuous mode [ 111.404828][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.495846][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.561865][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.562122][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.562395][ T5806] bridge_slave_1: entered allmulticast mode [ 111.564452][ T5806] bridge_slave_1: entered promiscuous mode [ 111.568474][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.670762][ T5813] Bluetooth: hci1: command tx timeout [ 111.830763][ T5813] Bluetooth: hci4: command tx timeout [ 111.910851][ T5813] Bluetooth: hci0: command tx timeout [ 111.910888][ T5813] Bluetooth: hci3: command tx timeout [ 111.983811][ T5811] team0: Port device team_slave_0 added [ 111.990750][ T61] Bluetooth: hci2: command tx timeout [ 112.076015][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.224001][ T5811] team0: Port device team_slave_1 added [ 112.226512][ T5808] team0: Port device team_slave_0 added [ 112.229831][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.239400][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.244450][ T5807] team0: Port device team_slave_0 added [ 112.343920][ T5808] team0: Port device team_slave_1 added [ 112.424131][ T5807] team0: Port device team_slave_1 added [ 112.427785][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.043404][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.043419][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.043438][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.134038][ T5820] team0: Port device team_slave_0 added [ 113.272764][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.272785][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.272814][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.274117][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.274129][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.274150][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.276824][ T5820] team0: Port device team_slave_1 added [ 113.277858][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.277872][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.277891][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.280872][ T5806] team0: Port device team_slave_0 added [ 113.300242][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.300270][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.300303][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.399159][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.399190][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.399224][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.403433][ T5806] team0: Port device team_slave_1 added [ 113.713183][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.713203][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.713229][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.750606][ T61] Bluetooth: hci1: command tx timeout [ 113.856580][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.856595][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.856616][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.858173][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.858193][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.858213][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.910969][ T61] Bluetooth: hci4: command tx timeout [ 113.990725][ T61] Bluetooth: hci3: command tx timeout [ 113.990764][ T61] Bluetooth: hci0: command tx timeout [ 114.080352][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.080369][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.080388][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.090720][ T5813] Bluetooth: hci2: command tx timeout [ 114.095264][ T5811] hsr_slave_0: entered promiscuous mode [ 114.097313][ T5811] hsr_slave_1: entered promiscuous mode [ 114.349012][ T5808] hsr_slave_0: entered promiscuous mode [ 114.350304][ T5808] hsr_slave_1: entered promiscuous mode [ 114.353211][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 114.353389][ T5808] Cannot create hsr debugfs directory [ 114.376236][ T5807] hsr_slave_0: entered promiscuous mode [ 114.377448][ T5807] hsr_slave_1: entered promiscuous mode [ 114.378169][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 114.378194][ T5807] Cannot create hsr debugfs directory [ 114.788856][ T5820] hsr_slave_0: entered promiscuous mode [ 114.790231][ T5820] hsr_slave_1: entered promiscuous mode [ 114.793068][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 114.793104][ T5820] Cannot create hsr debugfs directory [ 115.262114][ T5806] hsr_slave_0: entered promiscuous mode [ 115.263254][ T5806] hsr_slave_1: entered promiscuous mode [ 115.264011][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 115.264038][ T5806] Cannot create hsr debugfs directory [ 115.830836][ T5813] Bluetooth: hci1: command tx timeout [ 116.000922][ T5813] Bluetooth: hci4: command tx timeout [ 116.071566][ T5813] Bluetooth: hci0: command tx timeout [ 116.071608][ T5813] Bluetooth: hci3: command tx timeout [ 116.152510][ T61] Bluetooth: hci2: command tx timeout [ 116.751463][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.801520][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.826622][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.883964][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.040385][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.083997][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.118262][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.181963][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.315198][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.348833][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.392261][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.448738][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.619944][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.663940][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.702555][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.774715][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.933921][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.987575][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.009124][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.054954][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.088988][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.234626][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.258898][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.301723][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.302238][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.350246][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.350382][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.406764][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.454862][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.461045][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.461278][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.511070][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.511263][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.591760][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.633741][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.639385][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.639558][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.689754][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.689891][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.786407][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.816787][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.864732][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.864892][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.944857][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.946570][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.030755][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.072364][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.072591][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.114867][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.118000][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.385919][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.515972][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.648794][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.844740][ T5811] veth0_vlan: entered promiscuous mode [ 119.944109][ T5808] veth0_vlan: entered promiscuous mode [ 119.959416][ T5811] veth1_vlan: entered promiscuous mode [ 120.033839][ T5808] veth1_vlan: entered promiscuous mode [ 120.060043][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.153188][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.189100][ T5811] veth0_macvtap: entered promiscuous mode [ 120.239789][ T5811] veth1_macvtap: entered promiscuous mode [ 120.295305][ T5808] veth0_macvtap: entered promiscuous mode [ 120.338585][ T5808] veth1_macvtap: entered promiscuous mode [ 120.368671][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.388986][ T5820] veth0_vlan: entered promiscuous mode [ 120.416344][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.463489][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.463836][ T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.494131][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.498328][ T5820] veth1_vlan: entered promiscuous mode [ 120.499757][ T5806] veth0_vlan: entered promiscuous mode [ 120.507520][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.522712][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.522819][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.633396][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.647769][ T5806] veth1_vlan: entered promiscuous mode [ 120.658196][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.713572][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.738786][ T3621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.744186][ T5807] veth0_vlan: entered promiscuous mode [ 120.875992][ T5807] veth1_vlan: entered promiscuous mode [ 121.046115][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.046146][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.054280][ T5820] veth0_macvtap: entered promiscuous mode [ 121.109126][ T5820] veth1_macvtap: entered promiscuous mode [ 121.179957][ T5806] veth0_macvtap: entered promiscuous mode [ 121.206109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.206133][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.234123][ T5806] veth1_macvtap: entered promiscuous mode [ 121.274996][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.309365][ T5807] veth0_macvtap: entered promiscuous mode [ 121.319208][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.319232][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.360887][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.394873][ T5807] veth1_macvtap: entered promiscuous mode [ 121.409256][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.409277][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.434096][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.470208][ T3621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.494575][ T3621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.504056][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.504289][ T3621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.518902][ T3621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.557678][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.608967][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.617256][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.622436][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.625728][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.701876][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.799377][ T149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.816862][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.873772][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.941578][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.191696][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.191719][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.237090][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 122.760141][ T5931] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 122.760185][ T5931] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 122.760206][ T5931] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 122.792741][ T2196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.792761][ T2196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.907671][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.907697][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.142932][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.143073][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.398057][ T2196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.398079][ T2196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.674455][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.674481][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.081871][ T5943] tipc: Started in network mode [ 124.081916][ T5943] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 124.082834][ T5943] tipc: Enabled bearer , priority 0 [ 125.263048][ T9] tipc: Node number set to 9611946 [ 128.519626][ T38] audit: type=1326 audit(1764453775.112:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm=232120 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.519677][ T38] audit: type=1326 audit(1764453775.112:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm=232120 exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.519714][ T38] audit: type=1326 audit(1764453775.112:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm=232120 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.519750][ T38] audit: type=1326 audit(1764453775.112:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm=232120 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.519973][ T38] audit: type=1326 audit(1764453775.112:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm=232120 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.543367][ T38] audit: type=1326 audit(1764453775.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm=232120 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.549954][ T38] audit: type=1326 audit(1764453775.142:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.558769][ T38] audit: type=1326 audit(1764453775.152:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.558822][ T38] audit: type=1326 audit(1764453775.152:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 128.601014][ T38] audit: type=1326 audit(1764453775.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf18faf749 code=0x7ffc0000 [ 129.033584][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 132.164164][ T6084] Zero length message leads to an empty skb [ 133.328308][ T6110] capability: warning: `syz.1.73' uses deprecated v2 capabilities in a way that may be insecure [ 134.161454][ T6135] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.460096][ T6139] vlan2: entered allmulticast mode [ 135.136338][ T6151] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.87'. [ 136.067185][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 136.212565][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 136.212607][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 136.219445][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 136.219476][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 136.540584][ T38] kauditd_printk_skb: 12 callbacks suppressed [ 136.540609][ T38] audit: type=1326 audit(1764453783.132:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.559515][ T38] audit: type=1326 audit(1764453783.142:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.559589][ T38] audit: type=1326 audit(1764453783.142:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.580572][ T38] audit: type=1326 audit(1764453783.152:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.580646][ T38] audit: type=1326 audit(1764453783.162:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.580694][ T38] audit: type=1326 audit(1764453783.162:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.580740][ T38] audit: type=1326 audit(1764453783.162:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.639240][ T38] audit: type=1326 audit(1764453783.232:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.639307][ T38] audit: type=1326 audit(1764453783.232:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 136.639359][ T38] audit: type=1326 audit(1764453783.232:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 137.157213][ T6191] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 137.799186][ T6207] netlink: 60 bytes leftover after parsing attributes in process `syz.3.111'. [ 137.799231][ T6207] IPVS: Unknown mcast interface: vet [ 137.997387][ T6211] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET) [ 138.244032][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.055302][ T6219] syz.2.117 (6219) used greatest stack depth: 18328 bytes left [ 139.652500][ T6233] netlink: 52 bytes leftover after parsing attributes in process `syz.3.124'. [ 139.778487][ T6233] IPVS: Unknown mcast interface: vetN1_macvtap [ 140.098577][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 140.098601][ T6242] tipc: Started in network mode [ 140.098617][ T6242] tipc: Node identity 7, cluster identity 4711 [ 140.098630][ T6242] tipc: Node number set to 7 [ 140.161782][ T6242] netlink: 'syz.0.125': attribute type 4 has an invalid length. [ 140.161807][ T6242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.125'. [ 141.915084][ T6260] tipc: Enabling of bearer rejected, already enabled [ 142.765751][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 142.809797][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.809833][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.878422][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.878457][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.132445][ T6286] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.147'. [ 143.464485][ T6283] syz.0.146 (6283) used greatest stack depth: 16024 bytes left [ 144.325469][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 144.325490][ T38] audit: type=1326 audit(1764453790.922:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.327893][ T38] audit: type=1326 audit(1764453790.922:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.327950][ T38] audit: type=1326 audit(1764453790.922:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.328653][ T38] audit: type=1326 audit(1764453790.922:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.328979][ T38] audit: type=1326 audit(1764453790.922:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.329360][ T38] audit: type=1326 audit(1764453790.922:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.329656][ T38] audit: type=1326 audit(1764453790.922:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.524764][ T38] audit: type=1326 audit(1764453791.122:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 144.525060][ T38] audit: type=1326 audit(1764453791.122:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc14f749 code=0x7ffc0000 [ 145.112569][ T6331] Illegal XDP return value 3088795500 on prog (id 52) dev syz_tun, expect packet loss! [ 146.945472][ T6369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.945658][ T6368] bridge: RTM_NEWNEIGH with invalid ether address [ 148.251702][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.189'. [ 148.251735][ T6400] IPVS: Unknown mcast interface: ip [ 149.841462][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.202'. [ 149.841496][ T6431] IPVS: Unknown mcast interface: ip [ 149.938615][ T6435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.203'. [ 149.938872][ T6435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.203'. [ 150.016448][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 150.731063][ T6453] netlink: 'syz.2.210': attribute type 2 has an invalid length. [ 151.115242][ T6467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.215'. [ 151.115535][ T6467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.215'. [ 151.218421][ T6468] tipc: Started in network mode [ 151.218456][ T6468] tipc: Node identity ac14140f, cluster identity 4711 [ 151.249428][ T6468] tipc: New replicast peer: 255.255.255.255 [ 151.271681][ T6468] tipc: Enabled bearer , priority 10 [ 151.277640][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 151.277668][ T6468] tipc: Disabling bearer [ 151.858510][ T6487] tipc: Enabled bearer , priority 0 [ 152.605099][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 153.198622][ T6510] bridge: RTM_NEWNEIGH with invalid ether address [ 155.370504][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'. [ 155.472181][ T6563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.250'. [ 155.472463][ T6563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.250'. [ 156.142449][ T6583] lo speed is unknown, defaulting to 1000 [ 156.145555][ T6583] lo speed is unknown, defaulting to 1000 [ 156.150087][ T6583] lo speed is unknown, defaulting to 1000 [ 156.271853][ T6583] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.361043][ T6583] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.666012][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 156.827530][ T6583] lo speed is unknown, defaulting to 1000 [ 156.886403][ T6603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.269'. [ 156.886668][ T6603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.269'. [ 156.908499][ T6583] lo speed is unknown, defaulting to 1000 [ 157.028979][ T6583] lo speed is unknown, defaulting to 1000 [ 157.082988][ T6583] lo speed is unknown, defaulting to 1000 [ 157.107962][ T6583] lo speed is unknown, defaulting to 1000 [ 157.624007][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 158.669326][ T6611] lo speed is unknown, defaulting to 1000 [ 159.060869][ T6640] netlink: 48 bytes leftover after parsing attributes in process `syz.4.281'. [ 159.064401][ T6640] netlink: 48 bytes leftover after parsing attributes in process `syz.4.281'. [ 159.672169][ T6655] netlink: 7 bytes leftover after parsing attributes in process `syz.1.288'. [ 160.676277][ T6667] lo speed is unknown, defaulting to 1000 [ 160.679353][ T6678] __nla_validate_parse: 2 callbacks suppressed [ 160.679377][ T6678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.295'. [ 160.679658][ T6678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.295'. [ 161.142962][ T6687] binfmt_misc: register: failed to install interpreter file ./file2 [ 161.282193][ T6690] tipc: Started in network mode [ 161.282235][ T6690] tipc: Node identity 46945b53db87, cluster identity 4711 [ 161.282950][ T6690] tipc: Enabled bearer , priority 0 [ 161.555162][ T6685] syzkaller0: entered promiscuous mode [ 161.555196][ T6685] syzkaller0: entered allmulticast mode [ 161.834833][ T6697] tipc: Resetting bearer [ 161.993422][ T6684] tipc: Resetting bearer [ 162.141582][ T6684] tipc: Disabling bearer [ 162.895178][ T6712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.308'. [ 162.895448][ T6712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.308'. [ 163.323148][ T6723] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.311' sets config #1 [ 164.196921][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 164.198936][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 164.828333][ T6753] lo speed is unknown, defaulting to 1000 [ 165.190233][ T6771] tipc: Started in network mode [ 165.190269][ T6771] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 165.191740][ T6771] tipc: Enabled bearer , priority 0 [ 165.846263][ T6785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.198669][ T44] tipc: Node number set to 9611946 [ 169.146801][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 169.175183][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 169.227504][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 170.178427][ T6847] lo speed is unknown, defaulting to 1000 [ 170.190004][ T6843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.190033][ T6843] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 170.216017][ T6875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.370'. [ 170.520704][ T6884] netlink: 27 bytes leftover after parsing attributes in process `syz.0.372'. [ 170.591472][ T6843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.591497][ T6843] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 171.088140][ T6843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.088175][ T6843] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 172.057406][ T6897] lo speed is unknown, defaulting to 1000 [ 173.176651][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.311381][ T6843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.311409][ T6843] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 174.651288][ T6843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.651318][ T6843] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 176.384769][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 176.436482][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 179.867134][ T7005] netlink: 27 bytes leftover after parsing attributes in process `syz.2.405'. [ 180.307856][ T7015] bridge: RTM_NEWNEIGH with invalid ether address [ 181.720646][ T7029] syz.0.410 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.423305][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 183.468991][ T7074] lo speed is unknown, defaulting to 1000 [ 186.225209][ T7132] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 186.225256][ T7132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 186.225281][ T7132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 187.580474][ T7168] serio: Serial port ttyS3 [ 187.654883][ T7176] netlink: 27 bytes leftover after parsing attributes in process `syz.1.461'. [ 187.793224][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.800144][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.816575][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.832946][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.833984][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.900778][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.901456][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.902572][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.905008][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.907021][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.249492][ T7177] lo speed is unknown, defaulting to 1000 [ 188.572970][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 189.755497][ T3621] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.992695][ T61] Bluetooth: hci5: command tx timeout [ 189.996381][ T7222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.477'. [ 190.551841][ T3621] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.091268][ T7244] serio: Serial port ttyS3 [ 191.098186][ T3621] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.486476][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 191.527346][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.527382][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.578233][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.578265][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.080601][ T61] Bluetooth: hci5: command tx timeout [ 192.227989][ T3621] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.292085][ T7262] bridge: RTM_NEWNEIGH with invalid ether address [ 192.506312][ T7281] netlink: 27 bytes leftover after parsing attributes in process `syz.0.499'. [ 192.885748][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 193.111443][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 193.358372][ T7294] macvlan1: entered promiscuous mode [ 193.375635][ T7294] ipvlan0: entered promiscuous mode [ 193.390875][ T7294] ipvlan0: left promiscuous mode [ 193.429854][ T7294] macvlan1: left promiscuous mode [ 193.864374][ T7292] lo speed is unknown, defaulting to 1000 [ 194.150607][ T61] Bluetooth: hci5: command tx timeout [ 194.424541][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.425005][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.425227][ T7177] bridge_slave_0: entered allmulticast mode [ 194.456563][ T7177] bridge_slave_0: entered promiscuous mode [ 194.482665][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.482807][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.483228][ T7177] bridge_slave_1: entered allmulticast mode [ 194.514578][ T7177] bridge_slave_1: entered promiscuous mode [ 194.941658][ T3621] bridge_slave_1: left allmulticast mode [ 194.941906][ T3621] bridge_slave_1: left promiscuous mode [ 194.945015][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.953720][ T7332] serio: Serial port ttyS3 [ 195.189837][ T3621] bridge_slave_0: left allmulticast mode [ 195.189875][ T3621] bridge_slave_0: left promiscuous mode [ 195.190175][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.284390][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 195.284418][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 196.230596][ T61] Bluetooth: hci5: command tx timeout [ 197.992045][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.052805][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.085769][ T3621] bond0 (unregistering): Released all slaves [ 198.410556][ T3621] tipc: Disabling bearer [ 198.464626][ T7353] netlink: 27 bytes leftover after parsing attributes in process `syz.1.526'. [ 198.501590][ T3621] tipc: Left network mode [ 198.505852][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.741571][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.047027][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 199.047055][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 199.398944][ T7376] serio: Serial port ttyS3 [ 199.677871][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.867576][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 199.882550][ T7177] team0: Port device team_slave_0 added [ 199.885327][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 199.922164][ T7177] team0: Port device team_slave_1 added [ 200.205575][ T7396] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.546'. [ 201.202984][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 201.231895][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.231914][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.231945][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.442614][ T3621] hsr_slave_0: left promiscuous mode [ 201.490579][ T3621] hsr_slave_1: left promiscuous mode [ 201.491988][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.492134][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.572216][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.572247][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.904684][ T3621] veth1_macvtap: left promiscuous mode [ 201.904991][ T3621] veth0_macvtap: left promiscuous mode [ 201.905360][ T3621] veth1_vlan: left promiscuous mode [ 201.908807][ T3621] veth0_vlan: left promiscuous mode [ 205.433524][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 205.671383][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 208.081268][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.081287][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.081317][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.139983][ T9] lo speed is unknown, defaulting to 1000 [ 208.141513][ T9] syz2: Port: 1 Link DOWN [ 209.674780][ T7505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.734772][ T7177] hsr_slave_0: entered promiscuous mode [ 209.736277][ T7177] hsr_slave_1: entered promiscuous mode [ 209.737280][ T7177] debugfs: 'hsr0' already exists in 'hsr' [ 209.737306][ T7177] Cannot create hsr debugfs directory [ 210.615127][ T7521] bridge_slave_0: left allmulticast mode [ 210.615265][ T7521] bridge_slave_0: left promiscuous mode [ 210.615810][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.723948][ T7521] bridge_slave_1: left allmulticast mode [ 210.723981][ T7521] bridge_slave_1: left promiscuous mode [ 210.724392][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.862482][ T7521] bond0: (slave bond_slave_0): Releasing backup interface [ 210.942130][ T7521] bond0: (slave bond_slave_1): Releasing backup interface [ 211.031350][ T7521] team0: Port device team_slave_0 removed [ 211.086663][ T7521] team0: Port device team_slave_1 removed [ 211.104923][ T7521] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.608440][ T7177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.701882][ T7177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.798935][ T7177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.859408][ T7177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.282469][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.369926][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.441241][ T7597] kthread_run failed with err -4 [ 216.649468][ T7632] bridge: RTM_NEWNEIGH with invalid ether address [ 216.688802][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.693567][ T814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.738547][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.738935][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.881423][ T7646] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.621'. [ 217.933541][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 218.132803][ T7177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.218882][ T7660] bridge: RTM_NEWNEIGH with invalid ether address [ 218.373313][ T7663] serio: Serial port ttyS3 [ 218.665306][ T7654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.744959][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 220.101675][ T7654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.159080][ T7698] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.635'. [ 220.159357][ T7703] bridge: RTM_NEWNEIGH with invalid ether address [ 220.183284][ T7694] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 220.183332][ T7694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 220.183353][ T7694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 220.530316][ T7654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.653264][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.729525][ T7723] 9pnet_fd: Insufficient options for proto=fd [ 220.926639][ T7654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.570544][ T7743] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.648'. [ 221.766117][ T2196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.835856][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.886474][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 222.329284][ T814] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.460522][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.588153][ T7177] veth0_vlan: entered promiscuous mode [ 222.625196][ T7177] veth1_vlan: entered promiscuous mode [ 222.722762][ T7177] veth0_macvtap: entered promiscuous mode [ 222.729708][ T7177] veth1_macvtap: entered promiscuous mode [ 222.755104][ T7767] serio: Serial port ttyS3 [ 222.814187][ T7768] tipc: Enabled bearer , priority 0 [ 223.067900][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.107664][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.153932][ T2196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.170280][ T2196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.171609][ T2196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.171701][ T2196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.347770][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 223.828936][ T2196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.828959][ T2196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.041407][ T5895] tipc: Node number set to 2635291475 [ 224.088698][ T7798] tipc: Enabling of bearer rejected, already enabled [ 224.112352][ T814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.112376][ T814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.362699][ T7806] serio: Serial port ttyS3 [ 225.098005][ T7835] tipc: Started in network mode [ 225.098042][ T7835] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 225.098342][ T7835] tipc: Enabled bearer , priority 0 [ 226.227308][ T5872] tipc: Node number set to 9611946 [ 226.286223][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 226.664616][ T7878] serio: Serial port ttyS3 [ 227.092654][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 227.092682][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 227.124017][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 227.124046][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 227.200107][ T7899] 9pnet_fd: Insufficient options for proto=fd [ 227.444265][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 227.488369][ T7908] netlink: 27 bytes leftover after parsing attributes in process `syz.3.710'. [ 228.127471][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 228.127501][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 228.558640][ T7939] __nla_validate_parse: 3 callbacks suppressed [ 228.558661][ T7939] netlink: 27 bytes leftover after parsing attributes in process `syz.0.724'. [ 229.745314][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 230.727397][ T7989] tipc: Enabled bearer , priority 0 [ 230.728263][ T7989] syzkaller0: entered promiscuous mode [ 230.728287][ T7989] syzkaller0: entered allmulticast mode [ 231.769505][ T7992] tipc: Resetting bearer [ 231.944317][ T7988] tipc: Resetting bearer [ 232.131800][ T7988] tipc: Disabling bearer [ 232.414220][ T38] audit: type=1326 audit(1764453879.012:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.414384][ T38] audit: type=1326 audit(1764453879.012:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.416793][ T38] audit: type=1326 audit(1764453879.012:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.416853][ T38] audit: type=1326 audit(1764453879.012:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.419538][ T38] audit: type=1326 audit(1764453879.012:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.474094][ T38] audit: type=1326 audit(1764453879.072:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.474159][ T38] audit: type=1326 audit(1764453879.072:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.474210][ T38] audit: type=1326 audit(1764453879.072:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.474949][ T38] audit: type=1326 audit(1764453879.072:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.475003][ T38] audit: type=1326 audit(1764453879.072:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x7ffc0000 [ 232.560707][ T5872] tipc: Node number set to 2886997007 [ 232.684727][ T8030] bridge: RTM_NEWNEIGH with invalid ether address [ 234.020167][ T61] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 234.782323][ T8067] tipc: Enabled bearer , priority 0 [ 234.784689][ T8067] syzkaller0: entered promiscuous mode [ 234.784717][ T8067] syzkaller0: entered allmulticast mode [ 234.976440][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.766'. [ 234.976468][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.766'. [ 234.980148][ T8076] tipc: Resetting bearer [ 235.011505][ T8077] bridge: RTM_NEWNEIGH with invalid ether address [ 235.076257][ T8066] tipc: Resetting bearer [ 235.303822][ T8066] tipc: Disabling bearer [ 235.639891][ T8102] tipc: Enabling of bearer rejected, already enabled [ 235.979791][ T8115] 9pnet_fd: Insufficient options for proto=fd [ 236.184765][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 236.184818][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 236.343734][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 236.579603][ T8139] netlink: 27 bytes leftover after parsing attributes in process `syz.3.785'. [ 236.920970][ T8150] 9pnet_fd: Insufficient options for proto=fd [ 237.165032][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 237.165056][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 237.296681][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 239.731988][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 241.233583][ T8242] tipc: Enabling of bearer rejected, already enabled [ 242.279618][ T8258] __nla_validate_parse: 2 callbacks suppressed [ 242.279638][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 242.761078][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.824'. [ 242.761112][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.824'. [ 243.425401][ T8281] tipc: Enabling of bearer rejected, already enabled [ 243.769348][ T8267] syz.2.826: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.769741][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.2.826 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 243.769768][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.769789][ T8267] Call Trace: [ 243.769802][ T8267] [ 243.769812][ T8267] dump_stack_lvl+0x189/0x250 [ 243.769865][ T8267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.769899][ T8267] ? __pfx__printk+0x10/0x10 [ 243.769927][ T8267] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 243.769954][ T8267] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 243.769983][ T8267] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 243.770012][ T8267] warn_alloc+0x22e/0x3b0 [ 243.770055][ T8267] ? __pfx_warn_alloc+0x10/0x10 [ 243.770100][ T8267] ? __get_vm_area_node+0x2bc/0x350 [ 243.770131][ T8267] ? xskq_create+0xbf/0x170 [ 243.770166][ T8267] __vmalloc_node_range_noprof+0x690/0x12d0 [ 243.770233][ T8267] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.770270][ T8267] ? __kasan_kmalloc+0x93/0xb0 [ 243.770305][ T8267] vmalloc_user_noprof+0xad/0xf0 [ 243.770341][ T8267] ? xskq_create+0xbf/0x170 [ 243.770371][ T8267] xskq_create+0xbf/0x170 [ 243.770407][ T8267] xsk_init_queue+0xb0/0x110 [ 243.770440][ T8267] xsk_setsockopt+0x57b/0x8d0 [ 243.770471][ T8267] ? __pfx_xsk_setsockopt+0x10/0x10 [ 243.770506][ T8267] ? __fget_files+0x2a/0x420 [ 243.770541][ T8267] ? __fget_files+0x2a/0x420 [ 243.770578][ T8267] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 243.770608][ T8267] ? __pfx_xsk_setsockopt+0x10/0x10 [ 243.770636][ T8267] do_sock_setsockopt+0x17c/0x1b0 [ 243.770668][ T8267] __x64_sys_setsockopt+0x145/0x1b0 [ 243.770699][ T8267] do_syscall_64+0xfa/0xfa0 [ 243.770728][ T8267] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.770760][ T8267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.770781][ T8267] ? clear_bhb_loop+0x60/0xb0 [ 243.770809][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.770830][ T8267] RIP: 0033:0x7f083342f749 [ 243.770859][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.770878][ T8267] RSP: 002b:00007f083168e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 243.770900][ T8267] RAX: ffffffffffffffda RBX: 00007f0833685fa0 RCX: 00007f083342f749 [ 243.770917][ T8267] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 243.770931][ T8267] RBP: 00007f08334b3f91 R08: 0000000000000004 R09: 0000000000000000 [ 243.770944][ T8267] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 243.770957][ T8267] R13: 00007f0833686038 R14: 00007f0833685fa0 R15: 00007ffc48479e28 [ 243.770994][ T8267] [ 243.783798][ T8267] Mem-Info: [ 243.783817][ T8267] active_anon:273 inactive_anon:5882 isolated_anon:0 [ 243.783817][ T8267] active_file:5501 inactive_file:37650 isolated_file:0 [ 243.783817][ T8267] unevictable:768 dirty:143 writeback:0 [ 243.783817][ T8267] slab_reclaimable:11388 slab_unreclaimable:100595 [ 243.783817][ T8267] mapped:29862 shmem:1371 pagetables:1550 [ 243.783817][ T8267] sec_pagetables:0 bounce:0 [ 243.783817][ T8267] kernel_misc_reclaimable:0 [ 243.783817][ T8267] free:1322500 free_pcp:5371 free_cma:0 [ 243.783890][ T8267] Node 0 active_anon:1092kB inactive_anon:23528kB active_file:21804kB inactive_file:150600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119448kB dirty:572kB writeback:0kB shmem:3948kB kernel_stack:13008kB pagetables:6036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.783948][ T8267] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.783999][ T8267] Node 0 DMA free:15348kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 243.784071][ T8267] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 243.784113][ T8267] Node 0 DMA32 free:1363488kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1092kB inactive_anon:23528kB active_file:21804kB inactive_file:150600kB unevictable:1536kB writepending:572kB zspages:0kB present:3129332kB managed:2576072kB mlocked:0kB bounce:0kB free_pcp:21480kB local_pcp:9232kB free_cma:0kB [ 243.784183][ T8267] lowmem_reserve[]: 0 0 1 1 1 [ 243.784220][ T8267] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.784314][ T8267] lowmem_reserve[]: 0 0 0 0 0 [ 243.784356][ T8267] Node 1 Normal free:3911164kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.784432][ T8267] lowmem_reserve[]: 0 0 0 0 0 [ 243.784472][ T8267] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15348kB [ 243.784667][ T8267] Node 0 DMA32: 34*4kB (M) 83*8kB (ME) 1394*16kB (UME) 1401*32kB (UME) 994*64kB (UME) 696*128kB (UME) 502*256kB (UM) 283*512kB (UM) 79*1024kB (UME) 3*2048kB (UME) 191*4096kB (UM) = 1363424kB [ 243.784865][ T8267] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 243.784987][ T8267] Node 1 Normal: 203*4kB (UE) 56*8kB (UME) 51*16kB (UME) 189*32kB (UME) 97*64kB (UME) 34*128kB (UME) 13*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 4*2048kB (UME) 946*4096kB (M) = 3911164kB [ 243.785180][ T8267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.785200][ T8267] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 243.785219][ T8267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.785238][ T8267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.785256][ T8267] 44518 total pagecache pages [ 243.785270][ T8267] 0 pages in swap cache [ 243.785278][ T8267] Free swap = 124996kB [ 243.785286][ T8267] Total swap = 124996kB [ 243.785295][ T8267] 2097051 pages RAM [ 243.785303][ T8267] 0 pages HighMem/MovableOnly [ 243.785311][ T8267] 421007 pages reserved [ 243.785318][ T8267] 0 pages cma reserved [ 244.532815][ T8294] qrtr: Invalid version 0 [ 244.778011][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 244.853925][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.837'. [ 244.853955][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.837'. [ 245.016649][ T8307] macvtap1: entered promiscuous mode [ 245.016680][ T8307] macvtap1: entered allmulticast mode [ 245.017430][ T8307] dummy0: entered promiscuous mode [ 245.017451][ T8307] dummy0: entered allmulticast mode [ 245.048059][ T8307] team0: Device macvtap1 failed to register rx_handler [ 245.105447][ T8307] dummy0: left allmulticast mode [ 245.105872][ T8307] dummy0: left promiscuous mode [ 245.303082][ T8310] binfmt_misc: register: failed to install interpreter file ./file2 [ 245.813169][ T8308] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 245.813196][ T8308] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 247.529749][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 247.859611][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 249.246791][ T8359] macvtap1: entered promiscuous mode [ 249.246822][ T8359] macvtap1: entered allmulticast mode [ 249.247379][ T8359] dummy0: entered promiscuous mode [ 249.247401][ T8359] dummy0: entered allmulticast mode [ 249.249660][ T8359] team0: Device macvtap1 failed to register rx_handler [ 249.324871][ T38] kauditd_printk_skb: 19 callbacks suppressed [ 249.324891][ T38] audit: type=1326 audit(1764453895.922:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8362 comm="syz.0.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a1231f749 code=0x0 [ 249.680006][ T8359] dummy0: left allmulticast mode [ 249.687825][ T8359] dummy0: left promiscuous mode [ 250.717812][ T8384] qrtr: Invalid version 0 [ 251.241725][ T8400] netlink: 7 bytes leftover after parsing attributes in process `syz.1.872'. [ 251.702157][ T8414] macvtap1: entered promiscuous mode [ 251.702186][ T8414] macvtap1: entered allmulticast mode [ 251.709897][ T8414] dummy0: entered promiscuous mode [ 251.709943][ T8414] dummy0: entered allmulticast mode [ 251.742090][ T8414] team0: Device macvtap1 failed to register rx_handler [ 251.789557][ T8415] netlink: 7 bytes leftover after parsing attributes in process `syz.2.877'. [ 251.944483][ T8421] qrtr: Invalid version 0 [ 251.983688][ T8414] dummy0: left allmulticast mode [ 251.984875][ T8414] dummy0: left promiscuous mode [ 251.988626][ T8415] netlink: 7 bytes leftover after parsing attributes in process `syz.2.877'. [ 252.451193][ T8430] netlink: 7 bytes leftover after parsing attributes in process `syz.1.883'. [ 253.230811][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 253.358249][ T8451] netlink: 'syz.1.892': attribute type 16 has an invalid length. [ 253.358274][ T8451] netlink: 'syz.1.892': attribute type 17 has an invalid length. [ 253.653253][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.679153][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.882133][ T8451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.882189][ T8454] bridge: RTM_NEWNEIGH with invalid ether address [ 254.256230][ T8469] macvtap1: entered promiscuous mode [ 254.256259][ T8469] macvtap1: entered allmulticast mode [ 254.256710][ T8469] dummy0: entered promiscuous mode [ 254.256731][ T8469] dummy0: entered allmulticast mode [ 254.259039][ T8469] team0: Device macvtap1 failed to register rx_handler [ 254.297409][ T8469] dummy0: left allmulticast mode [ 254.297737][ T8469] dummy0: left promiscuous mode [ 254.527791][ T8470] ------------[ cut here ]------------ [ 254.527884][ T8470] rtmutex deadlock detected [ 254.528026][ T8470] WARNING: CPU: 1 PID: 8470 at kernel/locking/rtmutex.c:1674 rt_mutex_handle_deadlock+0x28/0xb0 [ 254.528072][ T8470] Modules linked in: [ 254.528097][ T8470] CPU: 1 UID: 0 PID: 8470 Comm: syz.0.898 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.528147][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.528172][ T8470] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 254.528226][ T8470] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 69 fe bf f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 c0 a2 91 4c 8d [ 254.528263][ T8470] RSP: 0018:ffffc900053cf8d0 EFLAGS: 00010246 [ 254.528299][ T8470] RAX: c677c44010447100 RBX: ffffc900053cf960 RCX: 0000000000080000 [ 254.528331][ T8470] RDX: ffffc9000f5d7000 RSI: 00000000000005a6 RDI: 00000000000005a7 [ 254.528361][ T8470] RBP: ffffc900053cfa80 R08: 0000000000000000 R09: 0000000000000000 [ 254.528389][ T8470] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000a79f28 [ 254.528423][ T8470] R13: ffffffff8ac2f0a9 R14: ffff88802831b098 R15: dffffc0000000000 [ 254.528457][ T8470] FS: 00007f9a1055d6c0(0000) GS:ffff888126ef4000(0000) knlGS:0000000000000000 [ 254.528495][ T8470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.528525][ T8470] CR2: 000055558e952808 CR3: 00000000285fa000 CR4: 00000000003526f0 [ 254.528555][ T8470] Call Trace: [ 254.528572][ T8470] [ 254.528584][ T8470] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 254.528612][ T8470] rt_mutex_slowlock+0x692/0x6e0 [ 254.528643][ T8470] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 254.528673][ T8470] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 254.528698][ T8470] ? __lock_acquire+0xab9/0xd20 [ 254.528744][ T8470] ? nfc_rfkill_set_block+0x50/0x2e0 [ 254.528774][ T8470] ? rt_mutex_slowunlock+0x493/0x8a0 [ 254.528811][ T8470] ? nfc_rfkill_set_block+0x50/0x2e0 [ 254.528834][ T8470] mutex_lock_nested+0x16a/0x1d0 [ 254.528863][ T8470] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 254.528890][ T8470] nfc_rfkill_set_block+0x50/0x2e0 [ 254.528913][ T8470] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 254.528940][ T8470] rfkill_set_block+0x1e5/0x450 [ 254.528980][ T8470] rfkill_fop_write+0x44e/0x580 [ 254.529007][ T8470] ? __pfx_rfkill_fop_write+0x10/0x10 [ 254.529036][ T8470] ? rw_verify_area+0x25b/0x4e0 [ 254.529070][ T8470] vfs_writev+0x4bf/0x970 [ 254.529094][ T8470] ? __pfx_rfkill_fop_write+0x10/0x10 [ 254.529123][ T8470] ? __pfx_vfs_writev+0x10/0x10 [ 254.529163][ T8470] ? __fget_files+0x2a/0x420 [ 254.529201][ T8470] ? __fget_files+0x3a6/0x420 [ 254.529232][ T8470] ? __fget_files+0x2a/0x420 [ 254.529276][ T8470] do_writev+0x153/0x2d0 [ 254.529300][ T8470] ? __pfx_do_writev+0x10/0x10 [ 254.529327][ T8470] ? do_syscall_64+0xbe/0xfa0 [ 254.529366][ T8470] do_syscall_64+0xfa/0xfa0 [ 254.529397][ T8470] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.529429][ T8470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.529452][ T8470] ? clear_bhb_loop+0x60/0xb0 [ 254.529485][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.529508][ T8470] RIP: 0033:0x7f9a1231f749 [ 254.529528][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.529546][ T8470] RSP: 002b:00007f9a1055d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 254.529577][ T8470] RAX: ffffffffffffffda RBX: 00007f9a12576090 RCX: 00007f9a1231f749 [ 254.529594][ T8470] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000009 [ 254.529608][ T8470] RBP: 00007f9a123a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.529622][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.529635][ T8470] R13: 00007f9a12576128 R14: 00007f9a12576090 R15: 00007ffcac17ba58 [ 254.529674][ T8470] [ 254.529686][ T8470] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 254.529704][ T8470] CPU: 1 UID: 0 PID: 8470 Comm: syz.0.898 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.529729][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.529742][ T8470] Call Trace: [ 254.529751][ T8470] [ 254.529760][ T8470] dump_stack_lvl+0x99/0x250 [ 254.529796][ T8470] ? __asan_memcpy+0x40/0x70 [ 254.529823][ T8470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.529859][ T8470] ? __pfx__printk+0x10/0x10 [ 254.529903][ T8470] vpanic+0x237/0x6d0 [ 254.529926][ T8470] ? __pfx_vpanic+0x10/0x10 [ 254.529961][ T8470] panic+0xb9/0xc0 [ 254.529982][ T8470] ? __pfx_panic+0x10/0x10 [ 254.530024][ T8470] __warn+0x31b/0x4b0 [ 254.530045][ T8470] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 254.530077][ T8470] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 254.530104][ T8470] report_bug+0x2be/0x4f0 [ 254.530136][ T8470] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 254.530165][ T8470] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 254.530192][ T8470] ? rt_mutex_handle_deadlock+0x2a/0xb0 [ 254.530220][ T8470] handle_bug+0x84/0x160 [ 254.530243][ T8470] exc_invalid_op+0x1a/0x50 [ 254.530266][ T8470] asm_exc_invalid_op+0x1a/0x20 [ 254.530287][ T8470] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 254.530316][ T8470] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 69 fe bf f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 c0 a2 91 4c 8d [ 254.530338][ T8470] RSP: 0018:ffffc900053cf8d0 EFLAGS: 00010246 [ 254.530357][ T8470] RAX: c677c44010447100 RBX: ffffc900053cf960 RCX: 0000000000080000 [ 254.530372][ T8470] RDX: ffffc9000f5d7000 RSI: 00000000000005a6 RDI: 00000000000005a7 [ 254.530387][ T8470] RBP: ffffc900053cfa80 R08: 0000000000000000 R09: 0000000000000000 [ 254.530401][ T8470] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000a79f28 [ 254.530417][ T8470] R13: ffffffff8ac2f0a9 R14: ffff88802831b098 R15: dffffc0000000000 [ 254.530437][ T8470] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 254.530480][ T8470] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 254.530505][ T8470] rt_mutex_slowlock+0x692/0x6e0 [ 254.530534][ T8470] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 254.530569][ T8470] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 254.530594][ T8470] ? __lock_acquire+0xab9/0xd20 [ 254.530636][ T8470] ? nfc_rfkill_set_block+0x50/0x2e0 [ 254.530662][ T8470] ? rt_mutex_slowunlock+0x493/0x8a0 [ 254.530704][ T8470] ? nfc_rfkill_set_block+0x50/0x2e0 [ 254.530725][ T8470] mutex_lock_nested+0x16a/0x1d0 [ 254.530753][ T8470] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 254.530780][ T8470] nfc_rfkill_set_block+0x50/0x2e0 [ 254.530800][ T8470] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 254.530827][ T8470] rfkill_set_block+0x1e5/0x450 [ 254.530866][ T8470] rfkill_fop_write+0x44e/0x580 [ 254.530894][ T8470] ? __pfx_rfkill_fop_write+0x10/0x10 [ 254.530922][ T8470] ? rw_verify_area+0x25b/0x4e0 [ 254.530955][ T8470] vfs_writev+0x4bf/0x970 [ 254.530979][ T8470] ? __pfx_rfkill_fop_write+0x10/0x10 [ 254.531006][ T8470] ? __pfx_vfs_writev+0x10/0x10 [ 254.531046][ T8470] ? __fget_files+0x2a/0x420 [ 254.531083][ T8470] ? __fget_files+0x3a6/0x420 [ 254.531113][ T8470] ? __fget_files+0x2a/0x420 [ 254.531155][ T8470] do_writev+0x153/0x2d0 [ 254.531179][ T8470] ? __pfx_do_writev+0x10/0x10 [ 254.531206][ T8470] ? do_syscall_64+0xbe/0xfa0 [ 254.531244][ T8470] do_syscall_64+0xfa/0xfa0 [ 254.531275][ T8470] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.531308][ T8470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.531329][ T8470] ? clear_bhb_loop+0x60/0xb0 [ 254.531356][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.531376][ T8470] RIP: 0033:0x7f9a1231f749 [ 254.531394][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.531412][ T8470] RSP: 002b:00007f9a1055d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 254.531435][ T8470] RAX: ffffffffffffffda RBX: 00007f9a12576090 RCX: 00007f9a1231f749 [ 254.531452][ T8470] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000009 [ 254.531466][ T8470] RBP: 00007f9a123a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.531479][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.531492][ T8470] R13: 00007f9a12576128 R14: 00007f9a12576090 R15: 00007ffcac17ba58 [ 254.531531][ T8470] [ 254.531889][ T8470] Kernel Offset: disabled