last executing test programs: 5m21.19333166s ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800) 4m31.83205949s ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800) 2m47.794622106s ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800) 2m9.265987313s ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800) 1m22.618830376s ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800) 30.967975908s ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800) 13.412009314s ago: executing program 2 (id=2017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6, r6}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x1, 0x2, 0x0) 11.519646075s ago: executing program 2 (id=2023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r6, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) shutdown(r6, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 9.52052487s ago: executing program 3 (id=2027): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0xa, 0x400, 0x54, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, 0x7800, 0x8000, 0x400, 0x1003}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r2, 0x0, 0x44000) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00002db000/0x2000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101201, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 8.7360097s ago: executing program 4 (id=2028): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x5}, @enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x6, 0xff, 0x40}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x61, 0x5f, 0x30, 0x5f, 0x61]}}, 0x0, 0x4b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0xe2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg(r1, 0x0, 0x44004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) read(r4, 0x0, 0x58) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 8.723573811s ago: executing program 2 (id=2029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r5, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) shutdown(r5, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 7.427983795s ago: executing program 0 (id=2030): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x10, 0x3, 0x0) gettid() ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x10000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x80u\x00x@\x19\x14\xfb\x05\xd5#\xfe\xff\xed+\x12\xc9\n\x87D&Q\xc6\x122\x1a\x8ap\xd7%\xb6XN\x8e\x00\xe2\xff\x1c\xfct\xe71\x12\xcb1m5\x96[\xf8q\x7f\xcd\xd5Z\x8d\xa6P\x05)\xec}\xb2\xb5\xe8\x92\xad\xe9\xd1\xb8Q\xab\xc2AoRs\x0fh\x80Wt\xf2\xb5\x14\xb3\xa5\xf2uP\xc3%U\xece\x11YF&T\x88\xe1\xd7?\x04\x1a\x06K\xb1\xfb\xf6\x81\xc8{>\x7fp\xe7\xc70\xf6\x13\x8c~\xc5\xa6\xf6n$%I)\xd7-\x93\xb6\x9c~\x83\xf5wz\x7f\xb6\x02\xd4\xfc\x00\xe4\x1a4?\x03\xfd\xeb\x84\xf2v\xbb\x94u9dg>J\xe6\x8c\x13\xd0\xb6O}\xf3\x13\xdc\xae\xb7\x0f8(\x94\xf9\x86\x7fyEq\xfa\xe3\xa2\x84\xf0\xb5\xf5\xab\b\xf1c\x98\xcbf\x1e/\xe2\x01\xd1\xfc6\xe4\xdd\x14\r\xd3\xd1\x1a0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003001200850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_clone3(&(0x7f0000000400)={0xc0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x25}, &(0x7f0000000640)=""/4096, 0x1000, &(0x7f00000000c0)=""/45, 0x0}, 0x58) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x20002000000, 0x0) 7.251475582s ago: executing program 2 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6, r6}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x1, 0x2, 0x0) 7.078856743s ago: executing program 4 (id=2034): epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000200)={[0x2000007]}, 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat2(r0, 0x0, 0x0, 0x0) signalfd(r1, 0x0, 0xfffffffffffffffe) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) 6.771963733s ago: executing program 3 (id=2035): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r6, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) shutdown(r6, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 6.164477105s ago: executing program 0 (id=2036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6, r6}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x1, 0x2, 0x0) 6.051277515s ago: executing program 2 (id=2037): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0xa, 0x400, 0x54, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, 0x7800, 0x8000, 0x400, 0x1003}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r2, 0x0, 0x44000) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00002db000/0x2000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101201, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 4.501828974s ago: executing program 4 (id=2038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003001200850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x20002000000, 0x0) 4.40695112s ago: executing program 0 (id=2039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r7, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) shutdown(r7, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 3.410416472s ago: executing program 4 (id=2040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl(r3, 0x2202, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) close(r4) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081", 0x2, r6) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {}, 0x0, 0x33}}) setrlimit(0xf, 0x0) 3.37093508s ago: executing program 3 (id=2041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003001200850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x20002000000, 0x0) 3.302065643s ago: executing program 2 (id=2042): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x10, 0x3, 0x0) gettid() ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r5, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x10000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x80u\x00x@\x19\x14\xfb\x05\xd5#\xfe\xff\xed+\x12\xc9\n\x87D&Q\xc6\x122\x1a\x8ap\xd7%\xb6XN\x8e\x00\xe2\xff\x1c\xfct\xe71\x12\xcb1m5\x96[\xf8q\x7f\xcd\xd5Z\x8d\xa6P\x05)\xec}\xb2\xb5\xe8\x92\xad\xe9\xd1\xb8Q\xab\xc2AoRs\x0fh\x80Wt\xf2\xb5\x14\xb3\xa5\xf2uP\xc3%U\xece\x11YF&T\x88\xe1\xd7?\x04\x1a\x06K\xb1\xfb\xf6\x81\xc8{>\x7fp\xe7\xc70\xf6\x13\x8c~\xc5\xa6\xf6n$%I)\xd7-\x93\xb6\x9c~\x83\xf5wz\x7f\xb6\x02\xd4\xfc\x00\xe4\x1a4?\x03\xfd\xeb\x84\xf2v\xbb\x94u9dg>J\xe6\x8c\x13\xd0\xb6O}\xf3\x13\xdc\xae\xb7\x0f8(\x94\xf9\x86\x7fyEq\xfa\xe3\xa2\x84\xf0\xb5\xf5\xab\b\xf1c\x98\xcbf\x1e/\xe2\x01\xd1\xfc6\xe4\xdd\x14\r\xd3\xd1\x1a0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280), 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000004000600", @ANYBLOB="08000300", @ANYRES64=r8], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r9, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet(r1, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c844, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r10, &(0x7f0000000040)='net/ip6_flowlabel\x00') 1.765297748s ago: executing program 3 (id=2044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003001200850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x20002000000, 0x0) 1.748977847s ago: executing program 0 (id=2045): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x5}, @enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x6, 0xff, 0x40}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x61, 0x5f, 0x30, 0x5f, 0x61]}}, 0x0, 0x4b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0xe2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) read(r3, 0x0, 0x58) sendfile(r0, r0, 0x0, 0x200000) 1.239410808s ago: executing program 4 (id=2046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r6, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) shutdown(r6, 0x1) setresuid(0x0, 0x0, 0x0) 98.432735ms ago: executing program 3 (id=2047): r0 = socket$inet6(0xa, 0x3, 0xfe) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$bt_l2cap(r1, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 0s ago: executing program 0 (id=2048): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x5}, @enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x6, 0xff, 0x40}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x61, 0x5f, 0x30, 0x5f, 0x61]}}, 0x0, 0x4b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0xe2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) sendmsg(r1, 0x0, 0x44004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) read(r4, 0x0, 0x58) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) kernel console output (not intermixed with test programs): ver this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.530369][T10768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.705031][ T30] audit: type=1326 audit(1750231866.871:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7fc00000 [ 463.744361][ T30] audit: type=1326 audit(1750231866.871:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7ce6b8e929 code=0x7fc00000 [ 464.305335][ T5832] Bluetooth: hci2: command tx timeout [ 464.318688][ T30] audit: type=1326 audit(1750231866.871:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7fc00000 [ 464.900565][T10768] hsr_slave_0: entered promiscuous mode [ 465.064451][T10768] hsr_slave_1: entered promiscuous mode [ 465.230158][T10768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.340799][T10768] Cannot create hsr debugfs directory [ 467.540122][T10955] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 467.549307][T10955] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 467.561116][T10955] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 468.095740][ T3582] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 468.367704][ T3582] usb 5-1: Using ep0 maxpacket: 16 [ 468.401600][ T3582] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 468.448789][ T3582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.685985][ T3582] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.705041][ T3582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.716007][ T3582] usb 5-1: Product: syz [ 468.720204][ T3582] usb 5-1: Manufacturer: syz [ 468.724814][ T3582] usb 5-1: SerialNumber: syz [ 468.745661][ T3582] usb 5-1: config 0 descriptor?? [ 468.821950][ T3582] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 469.140762][ T3582] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 469.679837][ T3582] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 469.720956][ T3582] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 470.417363][ T3582] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 470.462082][ T3582] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 470.522217][ T3582] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 472.028272][T10768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.037541][ T3582] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 472.050461][ T3582] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 472.066592][ T3582] usb 5-1: USB disconnect, device number 15 [ 472.895537][T11001] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.042033][T10768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.233443][T10768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.258335][T10768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.527256][T10768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.615610][T11032] blktrace: Concurrent blktraces are not allowed on loop6 [ 474.678990][T10768] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.434825][T10768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.445314][T10768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.572334][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.579531][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.708385][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.715578][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.619211][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 476.859837][ T5908] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.899492][ T5908] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.074436][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.652157][ T5908] usb 5-1: Product: syz [ 477.660279][ T5908] usb 5-1: Manufacturer: syz [ 477.664965][ T5908] usb 5-1: SerialNumber: syz [ 477.825378][T10768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.389906][T10768] veth0_vlan: entered promiscuous mode [ 478.398008][ T5908] usb 5-1: can't set config #1, error -71 [ 479.055590][ T5908] usb 5-1: USB disconnect, device number 16 [ 479.143136][T10768] veth1_vlan: entered promiscuous mode [ 479.401650][T10768] veth0_macvtap: entered promiscuous mode [ 479.463271][T10768] veth1_macvtap: entered promiscuous mode [ 479.705540][ T5908] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 479.975198][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.238206][ T5908] usb 3-1: not running at top speed; connect to a high speed hub [ 480.244588][T10768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.335034][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.493871][T10768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.509971][T10768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.520442][T10768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.525303][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.529574][T10768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.568037][T10768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.613315][ T5908] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.636832][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.802084][ T5908] usb 3-1: Product: syz [ 481.630496][ T5908] usb 3-1: Manufacturer: syz [ 481.635427][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.643265][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.669420][ T5908] usb 3-1: SerialNumber: syz [ 481.738816][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.747428][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.815649][ T5908] usb 3-1: 0:2 : does not exist [ 483.820619][ T5908] usb 3-1: unit 0 not found! [ 483.875962][ T5908] usb 3-1: USB disconnect, device number 16 [ 489.158020][ T6262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.386910][ T6262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.497257][ T6262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.578549][ T6262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.758942][ T6262] bridge_slave_1: left allmulticast mode [ 489.770650][ T6262] bridge_slave_1: left promiscuous mode [ 489.777107][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.789907][ T6262] bridge_slave_0: left allmulticast mode [ 489.796175][ T6262] bridge_slave_0: left promiscuous mode [ 489.803753][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.531663][ T6262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.551195][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.563119][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.577032][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.587672][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.597033][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.739727][ T6262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.754911][ T6262] bond0 (unregistering): Released all slaves [ 493.350221][T11195] bridge0: port 3(syz_tun) entered blocking state [ 493.357805][T11195] bridge0: port 3(syz_tun) entered disabled state [ 493.364454][T11195] syz_tun: entered allmulticast mode [ 493.372956][T11195] syz_tun: entered promiscuous mode [ 493.378908][T11195] bridge0: port 3(syz_tun) entered blocking state [ 493.385712][T11195] bridge0: port 3(syz_tun) entered forwarding state [ 493.653034][T11200] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 493.699450][T11200] netlink: 'syz.2.1210': attribute type 39 has an invalid length. [ 494.666650][ T5830] Bluetooth: hci2: command tx timeout [ 495.617135][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 497.026902][ T5830] Bluetooth: hci2: command tx timeout [ 498.324460][ T6262] hsr_slave_0: left promiscuous mode [ 498.342165][ T6262] hsr_slave_1: left promiscuous mode [ 498.366568][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.380764][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.398600][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.407429][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.473474][ T6262] veth1_macvtap: left promiscuous mode [ 498.480678][ T6262] veth0_macvtap: left promiscuous mode [ 498.487508][ T6262] veth1_vlan: left promiscuous mode [ 498.495414][ T6262] veth0_vlan: left promiscuous mode [ 499.145654][ T5832] Bluetooth: hci2: command tx timeout [ 499.875311][ T6262] team0 (unregistering): Port device team_slave_1 removed [ 499.934575][ T6262] team0 (unregistering): Port device team_slave_0 removed [ 500.551149][T11254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.557867][T11239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 500.567551][T11239] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 500.588087][T11239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 500.594012][T11254] batadv_slave_0: entered promiscuous mode [ 500.594780][T11239] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 500.628566][T11239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 500.645826][T11239] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 500.726398][T11239] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 501.012516][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 501.489263][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.540675][T11189] chnl_net:caif_netlink_parms(): no params data found [ 503.051222][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 503.058469][ T5830] Bluetooth: hci2: command 0x0419 tx timeout [ 503.064877][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 503.642048][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.665377][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.707813][T11189] bridge_slave_0: entered allmulticast mode [ 503.715763][T11189] bridge_slave_0: entered promiscuous mode [ 503.985693][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.285221][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.292500][T11189] bridge_slave_1: entered allmulticast mode [ 505.397131][T11189] bridge_slave_1: entered promiscuous mode [ 505.564645][T11291] Bluetooth: hci4: command 0x0405 tx timeout [ 505.570716][ T5833] Bluetooth: hci2: command 0x0419 tx timeout [ 505.625051][T11291] Bluetooth: hci1: command 0x0406 tx timeout [ 505.680541][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 507.873430][ T5832] Bluetooth: hci2: command 0x0419 tx timeout [ 509.426562][T11318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.503046][T11189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.610106][T11189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.640096][T11325] netlink: 'syz.3.1233': attribute type 10 has an invalid length. [ 509.946780][T11291] Bluetooth: hci2: command 0x0419 tx timeout [ 509.989718][T11189] team0: Port device team_slave_0 added [ 510.089279][T11333] fuse: Unknown parameter '00000000000000000000' [ 510.758606][T11189] team0: Port device team_slave_1 added [ 510.973885][T11343] syz.4.1236: attempt to access beyond end of device [ 510.973885][T11343] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 512.111740][T11291] Bluetooth: hci2: command 0x0419 tx timeout [ 513.273275][T11189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.355118][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.527564][T11189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.856712][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 513.869558][T11189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.880401][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.925042][T11189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.076241][T11189] hsr_slave_0: entered promiscuous mode [ 514.084542][T11189] hsr_slave_1: entered promiscuous mode [ 514.094298][T11189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.108292][T11189] Cannot create hsr debugfs directory [ 515.416898][T11374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.459443][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 515.512870][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 516.541962][T11412] (syz.4.1250,11412,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 516.551040][T11412] (syz.4.1250,11412,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 519.010911][T11429] syz_tun: entered allmulticast mode [ 519.718014][T11432] dvmrp1: entered allmulticast mode [ 519.863116][T11427] syz_tun: left allmulticast mode [ 520.933578][T11189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 521.130867][T11189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 521.192030][T11189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 521.911340][ T5950] Process accounting resumed [ 521.994288][T11189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.379821][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 522.795743][T11189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.844877][T11189] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.999418][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.006633][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.174377][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.181613][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.476918][T11189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.497774][T11189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.593942][ T5950] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 524.414337][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 524.443705][ T5950] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 524.465009][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.506018][ T5950] usb 3-1: config 0 descriptor?? [ 524.535390][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 525.333776][ T5950] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 525.490288][T11189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.597243][T11189] veth0_vlan: entered promiscuous mode [ 526.645757][T11189] veth1_vlan: entered promiscuous mode [ 527.313161][T11189] veth0_macvtap: entered promiscuous mode [ 527.335799][T11189] veth1_macvtap: entered promiscuous mode [ 527.465876][T11189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.480760][T11189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.962268][T11189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.089552][T11189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.119478][T11189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.139374][T11189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.401647][ T5950] usb 3-1: USB disconnect, device number 17 [ 529.637431][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.681671][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.189744][ T8644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.223832][ T8644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.286437][T11615] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 535.423305][T11615] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 535.649148][ T1010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.758028][ T1010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.957202][ T1010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.015226][ T1010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.199953][ T1010] bridge_slave_1: left allmulticast mode [ 536.207389][ T1010] bridge_slave_1: left promiscuous mode [ 536.213080][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.222380][ T1010] bridge_slave_0: left allmulticast mode [ 536.228291][ T1010] bridge_slave_0: left promiscuous mode [ 536.233946][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.788636][T11643] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 537.610792][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 537.619758][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 537.628493][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 537.640473][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 537.648397][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 537.834631][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.322368][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.471211][ T1010] bond0 (unregistering): Released all slaves [ 539.705196][T11291] Bluetooth: hci2: command tx timeout [ 540.758020][T11670] tipc: Enabling of bearer rejected, media not registered [ 541.492459][ T1010] hsr_slave_0: left promiscuous mode [ 541.511357][ T1010] hsr_slave_1: left promiscuous mode [ 541.525791][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.533497][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.564324][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.587113][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.647764][T11679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.807535][T11291] Bluetooth: hci2: command tx timeout [ 541.809478][ T30] audit: type=1326 audit(1750231944.931:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11701 comm="syz.0.1303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ce6b8e929 code=0x0 [ 542.427610][ T1010] veth1_macvtap: left promiscuous mode [ 542.433206][ T1010] veth0_macvtap: left promiscuous mode [ 542.491010][ T1010] veth1_vlan: left promiscuous mode [ 542.571418][ T1010] veth0_vlan: left promiscuous mode [ 543.130789][ T30] audit: type=1326 audit(1750231946.301:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11717 comm="syz.4.1307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c4e38e929 code=0x0 [ 543.866241][T11291] Bluetooth: hci2: command tx timeout [ 544.697990][T11737] Can't find a SQUASHFS superblock on nullb0 [ 544.750664][ T30] audit: type=1800 audit(1750231947.851:15): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1309" name="SYSV798dd81b" dev="tmpfs" ino=0 res=0 errno=0 [ 545.287583][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 545.334415][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 545.965230][T11291] Bluetooth: hci2: command tx timeout [ 546.379915][ T30] audit: type=1326 audit(1750231949.541:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11743 comm="syz.3.1311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0a38e929 code=0x0 [ 548.221680][T11768] bridge0: port 3(syz_tun) entered blocking state [ 548.229247][T11768] bridge0: port 3(syz_tun) entered disabled state [ 548.237389][T11768] syz_tun: entered allmulticast mode [ 548.262518][T11768] syz_tun: entered promiscuous mode [ 548.274055][T11768] bridge0: port 3(syz_tun) entered blocking state [ 548.280622][T11768] bridge0: port 3(syz_tun) entered forwarding state [ 548.582124][T11653] chnl_net:caif_netlink_parms(): no params data found [ 549.721806][T11653] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.747472][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.754732][T11653] bridge_slave_0: entered allmulticast mode [ 549.777074][T11653] bridge_slave_0: entered promiscuous mode [ 549.787879][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.801736][T11653] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.277931][T11653] bridge_slave_1: entered allmulticast mode [ 550.286587][T11653] bridge_slave_1: entered promiscuous mode [ 550.506832][T11653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.015178][T11653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.221593][ T30] audit: type=1326 audit(1750231954.381:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 551.280222][T11653] team0: Port device team_slave_0 added [ 551.312725][T11653] team0: Port device team_slave_1 added [ 551.401911][ T30] audit: type=1326 audit(1750231954.391:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.606513][ T30] audit: type=1326 audit(1750231954.391:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.669515][ T30] audit: type=1326 audit(1750231954.391:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.692002][ T30] audit: type=1326 audit(1750231954.391:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.713684][ T30] audit: type=1326 audit(1750231954.391:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.738260][ T30] audit: type=1326 audit(1750231954.391:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.760942][T11820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1327'. [ 552.770355][ T30] audit: type=1326 audit(1750231954.391:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.834792][ T30] audit: type=1326 audit(1750231954.391:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 552.985212][ T30] audit: type=1326 audit(1750231954.391:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11809 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 553.058593][T11653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.066124][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.099306][T11653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.767319][T11653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.774411][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.921505][T11653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.607182][T11653] hsr_slave_0: entered promiscuous mode [ 554.620810][T11653] hsr_slave_1: entered promiscuous mode [ 554.655808][T11653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.663414][T11653] Cannot create hsr debugfs directory [ 556.180786][T11838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.256356][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 558.474720][T11291] Bluetooth: hci1: command 0x0406 tx timeout [ 559.654089][T11653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 559.868350][T11653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 559.898237][T11653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 560.551088][T11653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 560.932840][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 560.932860][ T30] audit: type=1326 audit(1750231964.101:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 560.972366][T11653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.986508][ T30] audit: type=1326 audit(1750231964.101:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.058578][T11653] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.060241][ T30] audit: type=1326 audit(1750231964.101:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.090826][ T30] audit: type=1326 audit(1750231964.101:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.113155][ T30] audit: type=1326 audit(1750231964.101:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.152385][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.159528][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.174629][ T30] audit: type=1326 audit(1750231964.101:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.476513][T11291] Bluetooth: hci1: command 0x0406 tx timeout [ 561.710831][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.718113][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.724726][ T30] audit: type=1326 audit(1750231964.101:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.817747][ T30] audit: type=1326 audit(1750231964.101:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.843871][ T30] audit: type=1326 audit(1750231964.101:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 561.910059][ T30] audit: type=1326 audit(1750231964.101:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11933 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 563.137259][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.767942][T11653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.845874][T11653] veth0_vlan: entered promiscuous mode [ 566.163015][T11653] veth1_vlan: entered promiscuous mode [ 567.144572][T11653] veth0_macvtap: entered promiscuous mode [ 567.254758][T11653] veth1_macvtap: entered promiscuous mode [ 567.409888][T11653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.469898][T11653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.513481][T11653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.526705][T11653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.700102][T11653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.720003][T11653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.525748][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.220480][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.451740][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.472283][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.615187][T11291] Bluetooth: hci4: command 0x0405 tx timeout [ 576.388685][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 576.388702][ T30] audit: type=1326 audit(1750231979.541:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 576.563578][ T30] audit: type=1326 audit(1750231979.541:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 576.585806][ T30] audit: type=1326 audit(1750231979.541:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 576.976263][ T30] audit: type=1326 audit(1750231979.541:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 576.997898][ T30] audit: type=1326 audit(1750231979.541:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 577.094446][ T30] audit: type=1326 audit(1750231979.541:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 577.205000][ T30] audit: type=1326 audit(1750231979.541:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 577.226585][T11291] Bluetooth: hci4: command 0x0405 tx timeout [ 577.248570][ T6262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.288056][ T30] audit: type=1326 audit(1750231979.541:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 577.377555][ T30] audit: type=1326 audit(1750231979.541:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 577.432131][ T30] audit: type=1326 audit(1750231979.541:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 577.521841][ T6262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.665450][ T6262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.734818][ T6262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.892691][ T6262] bridge_slave_1: left allmulticast mode [ 577.905243][ T6262] bridge_slave_1: left promiscuous mode [ 577.911109][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.926110][ T6262] bridge_slave_0: left allmulticast mode [ 577.931807][ T6262] bridge_slave_0: left promiscuous mode [ 577.939924][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.380958][ T6262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.393852][ T6262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.407851][ T6262] bond0 (unregistering): Released all slaves [ 581.647203][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 581.647241][ T30] audit: type=1326 audit(1750231984.821:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ce6b858e7 code=0x7ffc0000 [ 581.777877][ T30] audit: type=1326 audit(1750231984.851:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ce6b2ab19 code=0x7ffc0000 [ 581.819448][ T30] audit: type=1326 audit(1750231984.951:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ce6b858e7 code=0x7ffc0000 [ 581.843863][ T30] audit: type=1326 audit(1750231984.951:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ce6b2ab19 code=0x7ffc0000 [ 582.034506][ T30] audit: type=1326 audit(1750231984.951:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 582.133864][ T30] audit: type=1326 audit(1750231984.981:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ce6b858e7 code=0x7ffc0000 [ 582.158065][ T30] audit: type=1326 audit(1750231984.981:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ce6b2ab19 code=0x7ffc0000 [ 582.357177][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.367007][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.380939][ T30] audit: type=1326 audit(1750231984.981:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ce6b858e7 code=0x7ffc0000 [ 582.775106][ T30] audit: type=1326 audit(1750231984.981:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ce6b2ab19 code=0x7ffc0000 [ 583.760187][ T30] audit: type=1326 audit(1750231984.981:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 583.782797][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 584.135544][ T6262] hsr_slave_0: left promiscuous mode [ 584.146916][ T6262] hsr_slave_1: left promiscuous mode [ 584.201468][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.497719][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.526331][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.545878][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.599320][ T6262] veth1_macvtap: left promiscuous mode [ 584.604894][ T6262] veth0_macvtap: left promiscuous mode [ 584.613035][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 584.620858][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 584.627198][ T6262] veth1_vlan: left promiscuous mode [ 584.645327][ T6262] veth0_vlan: left promiscuous mode [ 585.883363][ T6262] team0 (unregistering): Port device team_slave_1 removed [ 586.145209][ T6262] team0 (unregistering): Port device team_slave_0 removed [ 586.777050][T11291] Bluetooth: hci2: command tx timeout [ 588.815923][T12153] chnl_net:caif_netlink_parms(): no params data found [ 588.827314][T11291] Bluetooth: hci2: command tx timeout [ 590.905494][T11291] Bluetooth: hci2: command tx timeout [ 590.997651][T12232] blktrace: Concurrent blktraces are not allowed on loop4 [ 591.025202][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.063292][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.075579][T12153] bridge_slave_0: entered allmulticast mode [ 591.111985][T12153] bridge_slave_0: entered promiscuous mode [ 591.611887][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.726321][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.749801][T12153] bridge_slave_1: entered allmulticast mode [ 591.801651][T12153] bridge_slave_1: entered promiscuous mode [ 592.946917][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.047566][T11291] Bluetooth: hci2: command tx timeout [ 593.255301][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.069009][T12153] team0: Port device team_slave_0 added [ 595.110420][T12153] team0: Port device team_slave_1 added [ 595.187602][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 595.187621][ T30] audit: type=1326 audit(1750231998.361:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c4e38e929 code=0x0 [ 595.218984][ T30] audit: type=1326 audit(1750231998.391:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12273 comm="syz.0.1412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ce6b8e929 code=0x0 [ 595.530825][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.538140][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.565017][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.594593][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.002598][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.064615][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.529206][T12153] hsr_slave_0: entered promiscuous mode [ 597.904680][T12153] hsr_slave_1: entered promiscuous mode [ 597.941543][T12153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.950532][T12153] Cannot create hsr debugfs directory [ 601.472561][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 602.511502][ T30] audit: type=1326 audit(1750232005.671:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 602.624853][ T30] audit: type=1326 audit(1750232005.671:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 602.775823][ T30] audit: type=1326 audit(1750232005.671:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 602.797431][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.597303][ T30] audit: type=1326 audit(1750232005.671:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 603.937575][ T30] audit: type=1326 audit(1750232005.671:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 604.091263][ T30] audit: type=1326 audit(1750232005.671:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 604.113131][ T30] audit: type=1326 audit(1750232005.671:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 604.773711][ T30] audit: type=1326 audit(1750232005.671:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 604.814497][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'. [ 605.445824][ T30] audit: type=1326 audit(1750232005.681:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 606.060162][ T30] audit: type=1326 audit(1750232005.681:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12357 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 607.684528][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 607.684541][ T30] audit: type=1326 audit(1750232010.261:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b0df2ab19 code=0x7ffc0000 [ 607.826175][ T30] audit: type=1326 audit(1750232010.991:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b0df858e7 code=0x7ffc0000 [ 607.953303][ T30] audit: type=1326 audit(1750232010.991:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b0df2ab19 code=0x7ffc0000 [ 608.070715][ T30] audit: type=1326 audit(1750232010.991:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b0df858e7 code=0x7ffc0000 [ 608.170141][T12153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 608.177646][ T30] audit: type=1326 audit(1750232010.991:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b0df2ab19 code=0x7ffc0000 [ 609.262055][T12153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 609.300295][ T30] audit: type=1326 audit(1750232010.991:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 609.715339][ T30] audit: type=1326 audit(1750232010.991:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b0df858e7 code=0x7ffc0000 [ 609.863584][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 609.882528][ T30] audit: type=1326 audit(1750232010.991:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b0df2ab19 code=0x7ffc0000 [ 609.904344][ T30] audit: type=1326 audit(1750232010.991:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 609.929136][T12153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 610.179800][ T30] audit: type=1326 audit(1750232011.021:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b0df858e7 code=0x7ffc0000 [ 610.405537][T12153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 611.964106][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.068807][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.123216][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.130421][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.256369][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.263500][ T8094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.272109][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 616.141894][T12153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.290865][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 616.655817][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 617.652505][T12153] veth0_vlan: entered promiscuous mode [ 617.765453][T12153] veth1_vlan: entered promiscuous mode [ 617.800871][T12153] veth0_macvtap: entered promiscuous mode [ 618.373411][T12153] veth1_macvtap: entered promiscuous mode [ 618.408125][T12153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.447925][T12153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.697782][T12153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.723972][T12153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.451268][T12153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.460517][T12153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.973286][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 621.166505][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.856930][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.150468][ T8094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.229645][ T8094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.612326][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'. [ 623.354074][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 623.519271][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 624.475603][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.157985][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 625.158004][ T30] audit: type=1326 audit(1750232028.331:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.198553][ T30] audit: type=1326 audit(1750232028.361:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.246570][ T30] audit: type=1326 audit(1750232028.361:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.274570][ T30] audit: type=1326 audit(1750232028.361:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.308290][ T30] audit: type=1326 audit(1750232028.361:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.329789][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.338173][ T30] audit: type=1326 audit(1750232028.361:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.361114][ T30] audit: type=1326 audit(1750232028.361:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.382657][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.394362][ T30] audit: type=1326 audit(1750232028.361:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.415955][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.540541][ T30] audit: type=1326 audit(1750232028.361:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.562631][ T30] audit: type=1326 audit(1750232028.361:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12586 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 625.584209][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.593387][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 627.416507][ T8644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.605686][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 627.764809][ T8644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.895361][ T8644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.970988][ T8644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.157837][ T8644] bridge_slave_1: left allmulticast mode [ 628.163538][ T8644] bridge_slave_1: left promiscuous mode [ 628.174027][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.188797][ T8644] bridge_slave_0: left allmulticast mode [ 628.194477][ T8644] bridge_slave_0: left promiscuous mode [ 628.203019][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.611983][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.622951][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.632952][ T8644] bond0 (unregistering): Released all slaves [ 630.254162][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 630.550860][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 632.200481][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 632.210309][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 632.218345][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 632.226119][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 632.234551][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 634.787508][T11291] Bluetooth: hci2: command tx timeout [ 635.160873][ T8644] hsr_slave_0: left promiscuous mode [ 635.201543][ T8644] hsr_slave_1: left promiscuous mode [ 635.212361][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.231237][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.316823][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 635.316842][ T30] audit: type=1326 audit(1750232038.391:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12698 comm="syz.0.1486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ce6b8e929 code=0x0 [ 635.359782][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.374166][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.016853][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 636.837336][ T5833] Bluetooth: hci2: command tx timeout [ 636.952219][ T8644] veth1_macvtap: left promiscuous mode [ 637.027734][ T8644] veth0_macvtap: left promiscuous mode [ 637.037421][ T8644] veth1_vlan: left promiscuous mode [ 637.048474][ T8644] veth0_vlan: left promiscuous mode [ 638.483287][ T8644] team0 (unregistering): Port device team_slave_1 removed [ 638.580798][ T8644] team0 (unregistering): Port device team_slave_0 removed [ 638.905153][ T5833] Bluetooth: hci2: command 0x040f tx timeout [ 640.283482][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 640.985472][T11291] Bluetooth: hci2: command 0x040f tx timeout [ 641.510954][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 642.413042][T12668] chnl_net:caif_netlink_parms(): no params data found [ 643.002194][T12780] [U] „ [ 643.065148][T11291] Bluetooth: hci2: command 0x040f tx timeout [ 643.679286][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 645.070939][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 645.168798][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1508'. [ 645.536069][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.543230][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.125068][T12668] bridge_slave_0: entered allmulticast mode [ 646.135808][T12668] bridge_slave_0: entered promiscuous mode [ 646.159414][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.213923][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.241192][T12668] bridge_slave_1: entered allmulticast mode [ 646.249091][T12668] bridge_slave_1: entered promiscuous mode [ 648.017956][T12832] [U] „ [ 648.408041][T12668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.674821][T12668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.141088][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 650.723952][ T30] audit: type=1326 audit(1750232053.891:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 650.851339][ T30] audit: type=1326 audit(1750232053.921:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 650.875037][ T30] audit: type=1326 audit(1750232053.921:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 651.519691][ T30] audit: type=1326 audit(1750232053.921:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 651.654990][ T30] audit: type=1326 audit(1750232053.921:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 651.692661][T12668] team0: Port device team_slave_0 added [ 651.884380][T12668] team0: Port device team_slave_1 added [ 652.439074][ T30] audit: type=1326 audit(1750232053.921:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 653.391371][T12892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 654.042570][ T30] audit: type=1326 audit(1750232053.921:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 654.350787][ T30] audit: type=1326 audit(1750232053.921:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 655.853740][ T30] audit: type=1326 audit(1750232053.921:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 656.388713][ T30] audit: type=1326 audit(1750232053.921:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 656.569638][ T30] audit: type=1326 audit(1750232053.921:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 656.643333][ T30] audit: type=1326 audit(1750232053.921:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 657.215465][T12668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.245163][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.305244][ T30] audit: type=1326 audit(1750232054.061:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 657.411924][T12668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.484974][ T30] audit: type=1326 audit(1750232054.061:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 657.504207][T12668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.531320][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.595736][ T30] audit: type=1326 audit(1750232054.071:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf0a3858e7 code=0x7ffc0000 [ 657.629634][T12668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.692754][ T30] audit: type=1326 audit(1750232054.071:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf0a32ab19 code=0x7ffc0000 [ 657.790925][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 657.948266][ T30] audit: type=1326 audit(1750232054.071:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 658.219395][ T30] audit: type=1326 audit(1750232054.081:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12864 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf0a3858e7 code=0x7ffc0000 [ 659.389529][T12668] hsr_slave_0: entered promiscuous mode [ 659.526014][T12668] hsr_slave_1: entered promiscuous mode [ 659.538874][T12668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.546985][T12668] Cannot create hsr debugfs directory [ 661.102336][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 661.916977][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 668.825113][T11291] Bluetooth: hci1: command 0x0406 tx timeout [ 670.417911][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 673.993633][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 674.158634][T13057] [U] „ [ 674.202287][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 676.080925][T12668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 676.200277][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1558'. [ 676.251906][T12668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.647100][T12668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.791950][T13082] [U] „ [ 678.301267][T12668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 681.150084][T12668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.286976][T12668] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.347227][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 681.560487][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.567696][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.581777][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.588998][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.356375][T11291] Bluetooth: hci1: command 0x0406 tx timeout [ 682.383777][T12668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.394285][T12668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.539972][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1569'. [ 685.729780][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.690017][T12668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.742416][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'. [ 687.753523][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'. [ 689.850454][ T3534] bridge_slave_1: left allmulticast mode [ 689.856336][ T3534] bridge_slave_1: left promiscuous mode [ 689.862098][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.916031][ T3534] bridge_slave_0: left allmulticast mode [ 689.956443][ T3534] bridge_slave_0: left promiscuous mode [ 689.962250][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.521617][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 692.663584][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 692.682925][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 692.692461][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 692.703461][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 692.712883][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 692.925580][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.937070][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.947047][ T3534] bond0 (unregistering): Released all slaves [ 693.370778][ T3534] hsr_slave_0: left promiscuous mode [ 693.429497][ T3534] hsr_slave_1: left promiscuous mode [ 693.629242][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.807195][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.483916][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 694.512840][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 694.822317][ T5833] Bluetooth: hci2: command tx timeout [ 696.604589][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 696.917410][ T5833] Bluetooth: hci2: command tx timeout [ 697.008222][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 698.104981][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 698.940509][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 698.940527][ T30] audit: type=1326 audit(1750232102.111:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.2.1595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b0df8e929 code=0x0 [ 698.985152][ T5833] Bluetooth: hci2: command tx timeout [ 701.028180][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1601'. [ 701.074372][ T5833] Bluetooth: hci2: command tx timeout [ 701.260404][T13284] chnl_net:caif_netlink_parms(): no params data found [ 701.582634][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 703.419821][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 704.156950][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 706.035129][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.042411][T13284] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.075226][T13284] bridge_slave_0: entered allmulticast mode [ 706.109971][T13284] bridge_slave_0: entered promiscuous mode [ 706.139253][T13284] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.166848][T13284] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.205840][T13284] bridge_slave_1: entered allmulticast mode [ 706.276027][T13284] bridge_slave_1: entered promiscuous mode [ 706.783711][T13284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.820205][T13284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.941708][T13284] team0: Port device team_slave_0 added [ 706.975754][T13284] team0: Port device team_slave_1 added [ 707.299898][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1615'. [ 708.921750][T13477] [U] „ [ 709.295553][T13284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.302552][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.332948][T13284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.465415][T13284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.487447][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.576434][T13284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.680483][T13284] hsr_slave_0: entered promiscuous mode [ 709.854125][T13284] hsr_slave_1: entered promiscuous mode [ 709.860728][T13284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.869739][T13284] Cannot create hsr debugfs directory [ 710.219456][T13489] [U] „ [ 713.276279][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 717.244499][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 717.531993][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'. [ 718.246798][T13284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 718.295108][T13284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 718.335312][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 718.377793][T13284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 718.426414][T13284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 721.444348][T13284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.465190][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 721.513335][ T30] audit: type=1326 audit(1750232124.681:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 721.546636][T13284] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.986105][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.993203][ T8644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.017121][ T30] audit: type=1326 audit(1750232124.681:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 722.058846][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.065994][ T8644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.125777][ T30] audit: type=1326 audit(1750232124.681:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 722.221949][ T30] audit: type=1326 audit(1750232124.681:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 722.299727][ T30] audit: type=1326 audit(1750232124.681:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 722.431131][ T30] audit: type=1326 audit(1750232124.681:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 723.108033][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 723.790724][ T30] audit: type=1326 audit(1750232124.681:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 723.813194][ T30] audit: type=1326 audit(1750232124.681:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 723.923301][ T30] audit: type=1326 audit(1750232124.681:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 724.068688][ T30] audit: type=1326 audit(1750232124.681:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13610 comm="syz.2.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 724.174462][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'. [ 725.202406][T13284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.355082][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 726.365384][T13284] veth0_vlan: entered promiscuous mode [ 726.382536][T13284] veth1_vlan: entered promiscuous mode [ 726.513203][T13284] veth0_macvtap: entered promiscuous mode [ 726.523481][T13284] veth1_macvtap: entered promiscuous mode [ 727.156274][T13284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.231596][T13284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.250939][T13284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.262799][T13284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.350712][T13284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.399227][T13284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.751392][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 728.786108][ T8644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.804961][ T8644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.133868][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.172860][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.289640][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.276812][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.411016][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.538236][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.753608][ T49] bridge_slave_1: left allmulticast mode [ 731.786384][ T49] bridge_slave_1: left promiscuous mode [ 731.792346][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.807281][ T49] bridge_slave_0: left allmulticast mode [ 731.813054][ T49] bridge_slave_0: left promiscuous mode [ 731.822545][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.355514][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.372129][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.383063][ T49] bond0 (unregistering): Released all slaves [ 734.176305][T13777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'. [ 734.418019][T11291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.431024][T11291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.594727][T11291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.613974][T11291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.626699][T11291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.525704][ T49] hsr_slave_0: left promiscuous mode [ 735.544782][ T49] hsr_slave_1: left promiscuous mode [ 735.572318][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.589612][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.693586][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.709830][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.759289][ T49] veth1_macvtap: left promiscuous mode [ 735.773816][ T49] veth0_macvtap: left promiscuous mode [ 735.795923][ T49] veth1_vlan: left promiscuous mode [ 735.819397][ T49] veth0_vlan: left promiscuous mode [ 735.928863][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 736.861312][ T5833] Bluetooth: hci2: command tx timeout [ 737.405289][T13825] [U] „ [ 738.314267][ T49] team0 (unregistering): Port device team_slave_1 removed [ 738.362033][ T49] team0 (unregistering): Port device team_slave_0 removed [ 738.905048][ T5833] Bluetooth: hci2: command tx timeout [ 740.985011][ T5833] Bluetooth: hci2: command tx timeout [ 741.542354][T13868] [U] „ [ 742.143943][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1696'. [ 743.185155][ T5833] Bluetooth: hci2: command tx timeout [ 743.771396][T13790] chnl_net:caif_netlink_parms(): no params data found [ 745.078440][T13790] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.110117][T13790] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.435092][T13790] bridge_slave_0: entered allmulticast mode [ 745.443050][T13790] bridge_slave_0: entered promiscuous mode [ 745.467471][T13790] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.475666][T13790] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.482984][T13790] bridge_slave_1: entered allmulticast mode [ 745.490925][T13790] bridge_slave_1: entered promiscuous mode [ 746.158084][T13790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.187731][T13790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.259396][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 746.312840][T13790] team0: Port device team_slave_0 added [ 746.336847][T13790] team0: Port device team_slave_1 added [ 746.438249][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 746.465170][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 746.675708][T13790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.015012][T13790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.083856][T13790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.150923][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.234186][T13790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.244501][T13790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.306099][T13790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.194631][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1718'. [ 749.688056][T13790] hsr_slave_0: entered promiscuous mode [ 750.055725][T13790] hsr_slave_1: entered promiscuous mode [ 750.069579][T13790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.077990][T13790] Cannot create hsr debugfs directory [ 752.347371][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 753.121021][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 757.495262][T13790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 757.666446][T13790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 758.415806][T13790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 758.533867][T13790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.704155][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 761.346997][T13790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.741837][T13790] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.808181][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.815396][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.919382][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.926637][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.064515][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 763.064534][ T30] audit: type=1326 audit(1750232166.221:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 763.159079][ T30] audit: type=1326 audit(1750232166.221:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 763.335030][ T30] audit: type=1326 audit(1750232166.221:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 763.806687][ T30] audit: type=1326 audit(1750232166.231:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 763.876848][T13790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.885867][ T30] audit: type=1326 audit(1750232166.231:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 763.914167][ T30] audit: type=1326 audit(1750232166.231:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 764.103277][ T30] audit: type=1326 audit(1750232166.231:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 764.126179][ T30] audit: type=1326 audit(1750232166.231:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 764.148701][ T30] audit: type=1326 audit(1750232166.231:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 764.170950][ T30] audit: type=1326 audit(1750232166.231:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14111 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a38e929 code=0x7ffc0000 [ 764.422515][T13790] veth0_vlan: entered promiscuous mode [ 764.440899][T13790] veth1_vlan: entered promiscuous mode [ 764.978784][T13790] veth0_macvtap: entered promiscuous mode [ 765.026546][T13790] veth1_macvtap: entered promiscuous mode [ 765.141057][T13790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.190946][T13790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.628238][T13790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.650777][T13790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.684080][T13790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.704205][T13790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.097335][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.117857][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.457905][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1761'. [ 766.513746][ T8094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.558480][ T8094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.164488][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 768.122472][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 769.177845][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.489453][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.586917][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.672818][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.849108][ T1158] bridge_slave_1: left allmulticast mode [ 769.854806][ T1158] bridge_slave_1: left promiscuous mode [ 769.862484][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.872797][ T1158] bridge_slave_0: left allmulticast mode [ 769.879982][ T1158] bridge_slave_0: left promiscuous mode [ 769.886247][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.350338][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.363391][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.378552][ T1158] bond0 (unregistering): Released all slaves [ 770.716703][ T1158] hsr_slave_0: left promiscuous mode [ 770.722794][ T1158] hsr_slave_1: left promiscuous mode [ 770.731992][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.767464][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.815823][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.823274][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.225609][ T1158] veth1_macvtap: left promiscuous mode [ 772.260562][ T1158] veth0_macvtap: left promiscuous mode [ 772.316773][ T1158] veth1_vlan: left promiscuous mode [ 772.352690][ T1158] veth0_vlan: left promiscuous mode [ 772.444731][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1772'. [ 772.730428][T11291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 772.741368][T11291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 772.963127][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 773.007716][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 773.016201][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 775.065123][T11291] Bluetooth: hci2: command tx timeout [ 775.857536][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 776.742808][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 776.784535][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 777.145100][T11291] Bluetooth: hci2: command tx timeout [ 777.191054][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'. [ 779.122907][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 779.227999][ T5833] Bluetooth: hci2: command tx timeout [ 779.445693][T14263] chnl_net:caif_netlink_parms(): no params data found [ 781.304968][ T5833] Bluetooth: hci2: command 0x0419 tx timeout [ 782.581151][T14263] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.740367][T14263] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.749042][T14263] bridge_slave_0: entered allmulticast mode [ 782.757587][T14263] bridge_slave_0: entered promiscuous mode [ 782.774432][T14263] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.488309][T14263] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.610990][T14263] bridge_slave_1: entered allmulticast mode [ 783.619175][T14263] bridge_slave_1: entered promiscuous mode [ 784.327032][T14263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.487948][T14263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.544121][T14263] team0: Port device team_slave_0 added [ 786.560872][T14263] team0: Port device team_slave_1 added [ 787.568053][T14263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.719634][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.315017][T14263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.327789][T14263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.334760][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.445693][T14263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.331665][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'. [ 790.493409][T14263] hsr_slave_0: entered promiscuous mode [ 790.509721][T14263] hsr_slave_1: entered promiscuous mode [ 790.521760][T14263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.529461][T14263] Cannot create hsr debugfs directory [ 793.236604][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 793.236622][ T30] audit: type=1326 audit(1750232196.411:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 793.310204][ T30] audit: type=1326 audit(1750232196.411:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 793.336565][ T30] audit: type=1326 audit(1750232196.411:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 793.360869][ T30] audit: type=1326 audit(1750232196.411:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 793.439626][ T30] audit: type=1326 audit(1750232196.411:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 794.535345][ T30] audit: type=1326 audit(1750232196.411:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 794.557993][ T30] audit: type=1326 audit(1750232196.411:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 794.579716][ T30] audit: type=1326 audit(1750232196.411:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 794.706142][ T30] audit: type=1326 audit(1750232196.411:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 794.738349][ T30] audit: type=1326 audit(1750232196.411:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 795.099063][T14473] [U] „ [ 798.304227][T14263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 798.366993][T14263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 798.426526][T14263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 798.440305][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 798.440320][ T30] audit: type=1326 audit(1750232201.611:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 798.490845][ T30] audit: type=1326 audit(1750232201.641:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 798.513442][ T30] audit: type=1326 audit(1750232201.641:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 799.145309][ T30] audit: type=1326 audit(1750232201.641:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 799.208362][T14263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 799.248521][ T30] audit: type=1326 audit(1750232201.641:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 799.275456][ T30] audit: type=1326 audit(1750232201.641:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 799.458284][ T30] audit: type=1326 audit(1750232201.641:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 799.852072][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 799.901399][ T30] audit: type=1326 audit(1750232201.641:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 800.218955][ T30] audit: type=1326 audit(1750232201.681:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 800.613400][ T30] audit: type=1326 audit(1750232201.681:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14513 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 801.589768][T14263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.647099][T14263] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.717271][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.724468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.758241][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.765420][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.747599][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 806.626348][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 806.626366][ T30] audit: type=1326 audit(1750232209.771:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.055657][T14263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.116975][ T30] audit: type=1326 audit(1750232209.771:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.174257][ T30] audit: type=1326 audit(1750232209.771:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.278721][ T30] audit: type=1326 audit(1750232209.781:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.319146][T14263] veth0_vlan: entered promiscuous mode [ 807.369215][T14263] veth1_vlan: entered promiscuous mode [ 807.524933][ T30] audit: type=1326 audit(1750232209.781:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.548712][ T30] audit: type=1326 audit(1750232209.781:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.571050][ T30] audit: type=1326 audit(1750232209.781:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.593154][ T30] audit: type=1326 audit(1750232209.781:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 807.615219][ T30] audit: type=1326 audit(1750232209.781:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 808.312059][ T30] audit: type=1326 audit(1750232209.781:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 808.410607][T14263] veth0_macvtap: entered promiscuous mode [ 808.460737][T14263] veth1_macvtap: entered promiscuous mode [ 808.626957][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.508400][T14263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.525316][T14263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.543917][T14263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.553407][T14263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.570372][T14263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.579286][T14263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.841608][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'. [ 811.699630][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.719791][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.598097][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.781222][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.655478][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1860'. [ 815.267761][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.421242][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.558935][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.667553][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.908469][ T36] bridge_slave_1: left allmulticast mode [ 815.914171][ T36] bridge_slave_1: left promiscuous mode [ 815.931052][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.958549][ T36] bridge_slave_0: left allmulticast mode [ 815.969423][ T36] bridge_slave_0: left promiscuous mode [ 815.982604][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.442550][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.453580][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.464296][ T36] bond0 (unregistering): Released all slaves [ 817.484511][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 818.232509][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 819.310871][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 819.389768][T14758] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1873'. [ 819.599082][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 819.609808][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 819.620228][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 819.642378][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 819.650636][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 820.144358][ T36] hsr_slave_0: left promiscuous mode [ 820.217589][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 820.242693][ T36] hsr_slave_1: left promiscuous mode [ 820.265812][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.279042][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.476041][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.490889][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.384990][T11291] Bluetooth: hci4: command 0x0405 tx timeout [ 821.446455][ T36] veth1_macvtap: left promiscuous mode [ 821.473747][ T36] veth0_macvtap: left promiscuous mode [ 821.706354][T11291] Bluetooth: hci2: command tx timeout [ 821.965891][ T36] veth1_vlan: left promiscuous mode [ 821.971288][ T36] veth0_vlan: left promiscuous mode [ 823.785494][T11291] Bluetooth: hci2: command tx timeout [ 824.836341][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 825.971588][T11291] Bluetooth: hci2: command tx timeout [ 826.490176][ T36] team0 (unregistering): Port device team_slave_1 removed [ 826.561830][ T36] team0 (unregistering): Port device team_slave_0 removed [ 828.026825][T11291] Bluetooth: hci2: command tx timeout [ 829.292826][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 829.292844][ T30] audit: type=1326 audit(1750232232.461:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 829.321929][ T30] audit: type=1326 audit(1750232232.461:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 829.424794][ T30] audit: type=1326 audit(1750232232.501:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 829.903140][ T30] audit: type=1326 audit(1750232232.501:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 830.035269][ T30] audit: type=1326 audit(1750232232.501:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 831.192536][ T30] audit: type=1326 audit(1750232232.501:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 831.264925][ T30] audit: type=1326 audit(1750232232.501:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 831.324160][ T30] audit: type=1326 audit(1750232232.501:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 831.350335][ T30] audit: type=1326 audit(1750232232.511:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 831.374705][ T30] audit: type=1326 audit(1750232232.511:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14843 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce6b8e929 code=0x7ffc0000 [ 832.872875][T14764] chnl_net:caif_netlink_parms(): no params data found [ 835.361856][T14764] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.486727][T14764] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.055092][T14764] bridge_slave_0: entered allmulticast mode [ 836.062879][T14764] bridge_slave_0: entered promiscuous mode [ 836.175623][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 836.239664][T14764] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.276167][T14764] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.283617][T14764] bridge_slave_1: entered allmulticast mode [ 836.291628][T14764] bridge_slave_1: entered promiscuous mode [ 837.090099][T14764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.179291][T14764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.824910][T11291] Bluetooth: hci1: command 0x0406 tx timeout [ 838.830982][T11291] Bluetooth: hci4: command 0x0405 tx timeout [ 839.208270][T14764] team0: Port device team_slave_0 added [ 839.885460][T14764] team0: Port device team_slave_1 added [ 843.243756][T14764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.342831][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.555089][T14764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.573362][T14764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.588165][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.725792][T14764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.995640][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 844.995658][ T30] audit: type=1326 audit(1750232248.091:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.151344][ T30] audit: type=1326 audit(1750232248.091:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.252867][ T30] audit: type=1326 audit(1750232248.101:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.280405][ T30] audit: type=1326 audit(1750232248.101:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.408073][ T30] audit: type=1326 audit(1750232248.101:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.430554][ T30] audit: type=1326 audit(1750232248.101:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.454897][ T30] audit: type=1326 audit(1750232248.101:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.477159][ T30] audit: type=1326 audit(1750232248.101:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.498889][ T30] audit: type=1326 audit(1750232248.101:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 846.520677][ T30] audit: type=1326 audit(1750232248.101:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0df8e929 code=0x7ffc0000 [ 847.225495][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 847.226709][T14764] hsr_slave_0: entered promiscuous mode [ 847.242168][T14764] hsr_slave_1: entered promiscuous mode [ 847.248516][T14764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 847.256709][T14764] Cannot create hsr debugfs directory [ 852.108008][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 854.396528][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 854.396546][ T30] audit: type=1326 audit(1750232257.571:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 854.539946][T15088] [U] „ [ 854.562430][ T30] audit: type=1326 audit(1750232257.601:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 854.586872][ T30] audit: type=1326 audit(1750232257.601:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 854.722009][ T30] audit: type=1326 audit(1750232257.601:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 854.828008][T14764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 854.843235][ T30] audit: type=1326 audit(1750232257.601:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 854.878875][ T30] audit: type=1326 audit(1750232257.611:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 854.937208][ T30] audit: type=1326 audit(1750232257.611:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 854.960879][T14764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 854.975091][ T30] audit: type=1326 audit(1750232257.611:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 855.019357][T14764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 855.074722][ T30] audit: type=1326 audit(1750232257.611:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 855.106334][T14764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 855.200228][ T30] audit: type=1326 audit(1750232257.611:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15086 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 856.402791][T14764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.469985][T14764] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.526415][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.533513][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.596986][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.604088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.294004][T14764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.444865][T14764] veth0_vlan: entered promiscuous mode [ 857.483768][T14764] veth1_vlan: entered promiscuous mode [ 858.695359][T14764] veth0_macvtap: entered promiscuous mode [ 858.814553][T14764] veth1_macvtap: entered promiscuous mode [ 858.998948][T14764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.107632][T14764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.588559][T14764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.629383][T14764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.664916][T14764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.687223][T14764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.937979][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1969'. [ 860.836962][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'. [ 860.973880][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 860.973892][ T30] audit: type=1326 audit(1750232264.141:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 862.009422][ T30] audit: type=1326 audit(1750232264.141:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 862.227022][ T30] audit: type=1326 audit(1750232264.141:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.415929][ T30] audit: type=1326 audit(1750232264.141:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.439558][ T30] audit: type=1326 audit(1750232264.141:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.464595][T11291] Bluetooth: hci2: command 0x0405 tx timeout [ 863.471795][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1972'. [ 863.512383][ T30] audit: type=1326 audit(1750232264.141:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.539356][ T30] audit: type=1326 audit(1750232264.141:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.562898][ T30] audit: type=1326 audit(1750232264.141:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.574243][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.622760][ T30] audit: type=1326 audit(1750232264.141:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.684887][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.734396][ T30] audit: type=1326 audit(1750232264.141:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 863.807785][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.827113][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.046660][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1978'. [ 865.397826][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1982'. [ 867.377962][T14642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.525760][T14642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.600733][T14642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.673273][T14642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.844438][T14642] bridge_slave_1: left allmulticast mode [ 867.857017][T14642] bridge_slave_1: left promiscuous mode [ 867.863210][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.876230][T14642] bridge_slave_0: left allmulticast mode [ 867.881971][T14642] bridge_slave_0: left promiscuous mode [ 867.888447][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.331712][T14642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.343230][T14642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.353417][T14642] bond0 (unregistering): Released all slaves [ 868.622947][T14642] hsr_slave_0: left promiscuous mode [ 868.630946][T14642] hsr_slave_1: left promiscuous mode [ 868.640463][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.651616][T14642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.660708][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.670496][T14642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.699173][T14642] veth1_macvtap: left promiscuous mode [ 868.704730][T14642] veth0_macvtap: left promiscuous mode [ 868.712210][T14642] veth1_vlan: left promiscuous mode [ 868.718449][T14642] veth0_vlan: left promiscuous mode [ 870.143667][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.506661][T15306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 871.885169][T11291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 871.895243][T11291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 871.910061][T11291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 871.926591][T11291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 871.946428][T11291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 872.208289][T14642] team0 (unregistering): Port device team_slave_1 removed [ 872.264622][T14642] team0 (unregistering): Port device team_slave_0 removed [ 874.011279][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1996'. [ 874.036037][ T5833] Bluetooth: hci2: command tx timeout [ 876.731000][ T5833] Bluetooth: hci2: command tx timeout [ 878.805067][ T5833] Bluetooth: hci2: command tx timeout [ 878.961754][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 879.034094][T15367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2005'. [ 879.064457][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 879.064475][ T30] audit: type=1326 audit(1750232282.221:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 879.108171][ T30] audit: type=1326 audit(1750232282.221:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 879.306016][ T30] audit: type=1326 audit(1750232282.221:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 879.328863][ T30] audit: type=1326 audit(1750232282.221:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 880.200037][ T30] audit: type=1326 audit(1750232282.221:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 880.234877][ T30] audit: type=1326 audit(1750232282.221:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 880.271646][ T30] audit: type=1326 audit(1750232282.221:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 880.368824][ T30] audit: type=1326 audit(1750232282.221:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 880.531519][ T30] audit: type=1326 audit(1750232282.221:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 880.579984][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2009'. [ 880.754038][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2011'. [ 880.824981][T11291] Bluetooth: hci2: command tx timeout [ 880.830804][ T30] audit: type=1326 audit(1750232282.221:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8c4e38e929 code=0x7ffc0000 [ 882.530862][T15316] chnl_net:caif_netlink_parms(): no params data found [ 882.602393][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'. [ 882.905221][T11291] Bluetooth: hci2: command 0x0405 tx timeout [ 882.938875][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 885.327640][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 885.337150][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2020'. [ 885.955027][T15316] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.135377][T15316] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.161504][T15316] bridge_slave_0: entered allmulticast mode [ 886.182886][T15316] bridge_slave_0: entered promiscuous mode [ 886.746218][T15316] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.753392][T15316] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.762956][T15316] bridge_slave_1: entered allmulticast mode [ 886.850759][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'. [ 887.576347][T15316] bridge_slave_1: entered promiscuous mode [ 887.657992][T15456] overlayfs: failed to clone upperpath [ 887.684193][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2025'. [ 889.260184][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 889.974140][T15316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.029280][T15316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.406316][T15316] team0: Port device team_slave_0 added [ 890.538507][T15316] team0: Port device team_slave_1 added [ 891.695244][T15316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.799656][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 891.816156][T15316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.974975][T15316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.989521][T15316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.996979][T15316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.023999][T15316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.408592][T15532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 893.997754][T15316] hsr_slave_0: entered promiscuous mode [ 894.004402][T15316] hsr_slave_1: entered promiscuous mode [ 894.011191][T15316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.019074][T15316] Cannot create hsr debugfs directory [ 897.450017][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2046'. [ 897.766683][T11291] non-paged memory [ 897.770901][T11291] list_del corruption, ffff888029035d00->next is LIST_POISON1 (dead000000000100) [ 897.781757][T11291] ------------[ cut here ]------------ [ 897.787792][T11291] kernel BUG at lib/list_debug.c:58! [ 897.894611][T11291] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 897.900911][T11291] CPU: 1 UID: 0 PID: 11291 Comm: kworker/u9:0 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 897.913163][T11291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 897.923228][T11291] Workqueue: hci2 hci_conn_timeout [ 897.928386][T11291] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 897.935425][T11291] Code: 80 bb e1 8b 48 89 de e8 70 07 67 fc 90 0f 0b 4c 89 e7 e8 25 97 40 fd 48 c7 c7 e0 bb e1 8b 48 89 de 4c 89 e2 e8 53 07 67 fc 90 <0f> 0b 4c 89 e7 e8 08 97 40 fd 48 c7 c7 40 bc e1 8b 48 89 de 4c 89 [ 897.955040][T11291] RSP: 0018:ffffc900044ff980 EFLAGS: 00010246 [ 897.961114][T11291] RAX: 000000000000004e RBX: ffff888029035d00 RCX: d8e563198bd1d000 [ 897.969088][T11291] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 897.977069][T11291] RBP: ffffffff8a6e6150 R08: 0000000000000003 R09: 0000000000000004 [ 897.985049][T11291] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dead000000000100 [ 897.993028][T11291] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 898.001005][T11291] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 898.009942][T11291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.016530][T11291] CR2: 00007f0146397000 CR3: 0000000027ca6000 CR4: 00000000003526f0 [ 898.024507][T11291] DR0: 0000000000000440 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.032484][T11291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 898.040469][T11291] Call Trace: [ 898.043764][T11291] [ 898.046704][T11291] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 898.052363][T11291] hci_cancel_connect_sync+0xc8/0x120 [ 898.057749][T11291] hci_abort_conn+0x191/0x330 [ 898.062434][T11291] ? process_scheduled_works+0x9ef/0x17b0 [ 898.068166][T11291] process_scheduled_works+0xade/0x17b0 [ 898.073737][T11291] ? __pfx_process_scheduled_works+0x10/0x10 [ 898.079739][T11291] worker_thread+0x8a0/0xda0 [ 898.084347][T11291] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 898.090689][T11291] ? __kthread_parkme+0x7b/0x200 [ 898.095643][T11291] kthread+0x70e/0x8a0 [ 898.099721][T11291] ? __pfx_worker_thread+0x10/0x10 [ 898.104845][T11291] ? __pfx_kthread+0x10/0x10 [ 898.109439][T11291] ? _raw_spin_unlock_irq+0x23/0x50 [ 898.114649][T11291] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.119856][T11291] ? __pfx_kthread+0x10/0x10 [ 898.124449][T11291] ret_from_fork+0x3f9/0x770 [ 898.129056][T11291] ? __pfx_ret_from_fork+0x10/0x10 [ 898.134178][T11291] ? __switch_to_asm+0x39/0x70 [ 898.138947][T11291] ? __switch_to_asm+0x33/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 898.143715][T11291] ? __pfx_kthread+0x10/0x10 [ 898.148310][T11291] ret_from_fork_asm+0x1a/0x30 [ 898.153087][T11291] [ 898.156115][T11291] Modules linked in: [ 898.160858][T11291] ---[ end trace 0000000000000000 ]--- [ 898.328843][T11291] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 898.339226][T11291] Code: 80 bb e1 8b 48 89 de e8 70 07 67 fc 90 0f 0b 4c 89 e7 e8 25 97 40 fd 48 c7 c7 e0 bb e1 8b 48 89 de 4c 89 e2 e8 53 07 67 fc 90 <0f> 0b 4c 89 e7 e8 08 97 40 fd 48 c7 c7 40 bc e1 8b 48 89 de 4c 89 [ 898.365817][T11291] RSP: 0018:ffffc900044ff980 EFLAGS: 00010246 [ 898.374833][T11291] RAX: 000000000000004e RBX: ffff888029035d00 RCX: d8e563198bd1d000 [ 898.382836][T11291] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 898.391351][T11291] RBP: ffffffff8a6e6150 R08: 0000000000000003 R09: 0000000000000004 [ 898.400578][T11291] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dead000000000100 [ 898.408648][T11291] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 898.423544][T11291] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 898.434848][T11291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.444864][T11291] CR2: 0000000000000000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 898.452862][T11291] DR0: 0000000000000440 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.460876][T11291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 898.468891][T11291] Kernel panic - not syncing: Fatal exception [ 898.475198][T11291] Kernel Offset: disabled [ 898.479514][T11291] Rebooting in 86400 seconds..