last executing test programs: 2m14.769318421s ago: executing program 3 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80540, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) syz_open_pts(r5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002480), 0x80, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f00000024c0)={0x3}) 2m12.023039269s ago: executing program 3 (id=132): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m11.473686771s ago: executing program 3 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 1m59.105954448s ago: executing program 3 (id=150): r0 = socket$kcm(0x25, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "0100", 0xc, 0x11, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x4e20, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x8a, 0x100, @void}}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = open$dir(0x0, 0x0, 0x1) socket(0x11, 0x3, 0x0) r4 = creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r3, 0x100000000) recvmsg$kcm(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x40010102) socket$nl_generic(0x10, 0x3, 0x10) 1m54.384120662s ago: executing program 3 (id=152): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000e80)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5f, 0x0) 1m52.159097461s ago: executing program 3 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 1m36.32331087s ago: executing program 32 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 15.33164065s ago: executing program 2 (id=288): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}}, 0x1c}}, 0x20000050) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r1, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfe00}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x9, &(0x7f0000000040)) 13.711990504s ago: executing program 4 (id=289): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}}, 0x1c}}, 0x20000050) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r1, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfe00}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x9, &(0x7f0000000040)) 13.023441914s ago: executing program 0 (id=291): socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004080) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) 13.022402965s ago: executing program 2 (id=292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$capi20(0xffffffffffffff9c, &(0x7f0000004fc0), 0x60200, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 10.981999992s ago: executing program 2 (id=294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000004fc0), 0x60200, 0x0) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000005000)=0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 10.931245085s ago: executing program 1 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 10.007580539s ago: executing program 4 (id=296): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}}, 0x1c}}, 0x20000050) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r1, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfe00}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1164, 0x2412}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x9, &(0x7f0000000040)) 9.704358107s ago: executing program 1 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 8.661833787s ago: executing program 1 (id=298): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}}, 0x1c}}, 0x20000050) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r1, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfe00}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff42, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x30, 0x11, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1164, 0x2412}, [@IFLA_TXQLEN={0x8, 0xd, 0x2f}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x9, &(0x7f0000000040)) 8.642806078s ago: executing program 2 (id=299): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/144, 0x90}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009cc0)=""/118, 0x76}, {&(0x7f0000009d40)=""/50, 0x32}, {&(0x7f0000009d80)=""/227, 0xe3}, {&(0x7f0000009e80)=""/89, 0x59}, {0x0}], 0x5}, 0x9}], 0x4, 0x40010040, &(0x7f000000a940)={0x0, 0x989680}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 8.27517312s ago: executing program 0 (id=300): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}}, 0x1c}}, 0x20000050) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r1, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfe00}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff42, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x30, 0x11, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1164, 0x2412}, [@IFLA_TXQLEN={0x8, 0xd, 0x2f}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x9, &(0x7f0000000040)) 7.492932485s ago: executing program 2 (id=301): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r1, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/144, 0x90}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009cc0)=""/118, 0x76}, {&(0x7f0000009d40)=""/50, 0x32}, {&(0x7f0000009d80)=""/227, 0xe3}, {&(0x7f0000009e80)=""/89, 0x59}, {0x0}], 0x5}, 0x9}], 0x4, 0x40010040, &(0x7f000000a940)={0x0, 0x989680}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) 6.365119311s ago: executing program 4 (id=302): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/144, 0x90}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009cc0)=""/118, 0x76}, {&(0x7f0000009d40)=""/50, 0x32}, {&(0x7f0000009d80)=""/227, 0xe3}, {&(0x7f0000009e80)=""/89, 0x59}, {0x0}], 0x5}, 0x9}], 0x4, 0x40010040, &(0x7f000000a940)={0x0, 0x989680}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 5.190967759s ago: executing program 4 (id=303): socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004080) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x0) 4.890348316s ago: executing program 1 (id=304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000004fc0), 0x60200, 0x0) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000005000)=0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 4.499379579s ago: executing program 0 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 3.933828721s ago: executing program 4 (id=306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000005000)=0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 2.700116363s ago: executing program 0 (id=307): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/144, 0x90}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009cc0)=""/118, 0x76}, {&(0x7f0000009d40)=""/50, 0x32}, {&(0x7f0000009d80)=""/227, 0xe3}, {&(0x7f0000009e80)=""/89, 0x59}, {0x0}], 0x5}, 0x9}], 0x4, 0x40010040, &(0x7f000000a940)={0x0, 0x989680}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 2.699182843s ago: executing program 1 (id=308): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) socket$inet6(0xa, 0x80001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44acaa55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.821567104s ago: executing program 4 (id=309): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}}, 0x1c}}, 0x20000050) io_setup(0x6, 0x0) io_submit(0x0, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfe00}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff42, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x30, 0x11, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1164, 0x2412}, [@IFLA_TXQLEN={0x8, 0xd, 0x2f}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x9, &(0x7f0000000040)) 1.154607433s ago: executing program 0 (id=310): socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x0) 842.161841ms ago: executing program 2 (id=311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000004fc0), 0x60200, 0x0) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000005000)=0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 1.680539ms ago: executing program 0 (id=312): socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004080) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5e20, 0x1ff, @loopback}, 0x1c) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x0) 0s ago: executing program 1 (id=313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0x14000002, @loopback, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 81.904036][ T5758] cgroup: Unknown subsys name 'net' [ 82.046086][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.729830][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.431933][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.447114][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.455286][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.468178][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.478278][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.488672][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.512793][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.520875][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.557065][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.570055][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.572800][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.581791][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.592365][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.596040][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.607751][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.609022][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.618248][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.623121][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.648200][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.656953][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.664669][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.677746][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.685547][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.693383][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.160600][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.211393][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 86.314936][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.343643][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.429358][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.436539][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.446210][ T5774] bridge_slave_0: entered allmulticast mode [ 86.453982][ T5774] bridge_slave_0: entered promiscuous mode [ 86.522213][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.529937][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.537429][ T5774] bridge_slave_1: entered allmulticast mode [ 86.544764][ T5774] bridge_slave_1: entered promiscuous mode [ 86.570097][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.580225][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.587513][ T5783] bridge_slave_0: entered allmulticast mode [ 86.594539][ T5783] bridge_slave_0: entered promiscuous mode [ 86.632041][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.639570][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.646775][ T5783] bridge_slave_1: entered allmulticast mode [ 86.654214][ T5783] bridge_slave_1: entered promiscuous mode [ 86.702937][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.710369][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.718494][ T5775] bridge_slave_0: entered allmulticast mode [ 86.725532][ T5775] bridge_slave_0: entered promiscuous mode [ 86.736453][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.750407][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.762512][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.783652][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.791868][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.799642][ T5775] bridge_slave_1: entered allmulticast mode [ 86.808071][ T5775] bridge_slave_1: entered promiscuous mode [ 86.828737][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.903850][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.911100][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.919123][ T5770] bridge_slave_0: entered allmulticast mode [ 86.926494][ T5770] bridge_slave_0: entered promiscuous mode [ 86.937858][ T5783] team0: Port device team_slave_0 added [ 86.946590][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.961102][ T5774] team0: Port device team_slave_0 added [ 86.967795][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.975056][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.982926][ T5770] bridge_slave_1: entered allmulticast mode [ 86.990510][ T5770] bridge_slave_1: entered promiscuous mode [ 87.000436][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.014506][ T5783] team0: Port device team_slave_1 added [ 87.022561][ T5774] team0: Port device team_slave_1 added [ 87.166207][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.190248][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.225522][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.237804][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.271192][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.286277][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.293354][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.330536][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.343351][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.351028][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.378094][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.391376][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.398901][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.425515][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.457978][ T5775] team0: Port device team_slave_0 added [ 87.522730][ T5775] team0: Port device team_slave_1 added [ 87.561631][ T5774] hsr_slave_0: entered promiscuous mode [ 87.573061][ T5774] hsr_slave_1: entered promiscuous mode [ 87.584292][ T5770] team0: Port device team_slave_0 added [ 87.590791][ T51] Bluetooth: hci0: command tx timeout [ 87.631444][ T5783] hsr_slave_0: entered promiscuous mode [ 87.640838][ T5783] hsr_slave_1: entered promiscuous mode [ 87.647997][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.656069][ T5783] Cannot create hsr debugfs directory [ 87.664775][ T5770] team0: Port device team_slave_1 added [ 87.671001][ T51] Bluetooth: hci2: command tx timeout [ 87.743449][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.750745][ T51] Bluetooth: hci3: command tx timeout [ 87.750767][ T5777] Bluetooth: hci1: command tx timeout [ 87.762935][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.789305][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.802489][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.809786][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.836572][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.887305][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.894314][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.920752][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.934953][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.942308][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.968681][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.091785][ T5775] hsr_slave_0: entered promiscuous mode [ 88.098396][ T5775] hsr_slave_1: entered promiscuous mode [ 88.104531][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.112770][ T5775] Cannot create hsr debugfs directory [ 88.193090][ T5770] hsr_slave_0: entered promiscuous mode [ 88.199672][ T5770] hsr_slave_1: entered promiscuous mode [ 88.206061][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.214111][ T5770] Cannot create hsr debugfs directory [ 88.486167][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.498303][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.538308][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.550567][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.660770][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.683326][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.695111][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.716312][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.814860][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.829318][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.844999][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.856550][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.954009][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.986289][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.999065][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.020965][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.044656][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.128358][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.144075][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.182879][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.190233][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.216414][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.223611][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.276290][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.293359][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.318248][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.325495][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.374337][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.400987][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.408210][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.423284][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.449942][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.457240][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.493739][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.500950][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.535274][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.570616][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.577845][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.668556][ T51] Bluetooth: hci0: command tx timeout [ 89.682466][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.689718][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.749455][ T51] Bluetooth: hci2: command tx timeout [ 89.828107][ T51] Bluetooth: hci3: command tx timeout [ 89.829295][ T5777] Bluetooth: hci1: command tx timeout [ 89.981539][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.122675][ T5774] veth0_vlan: entered promiscuous mode [ 90.161930][ T5774] veth1_vlan: entered promiscuous mode [ 90.184966][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.295452][ T5774] veth0_macvtap: entered promiscuous mode [ 90.336342][ T5774] veth1_macvtap: entered promiscuous mode [ 90.354175][ T5783] veth0_vlan: entered promiscuous mode [ 90.384434][ T5783] veth1_vlan: entered promiscuous mode [ 90.413388][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.436521][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.450329][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.479482][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.517992][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.527781][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.536538][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.545582][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.594194][ T5775] veth0_vlan: entered promiscuous mode [ 90.615166][ T5770] veth0_vlan: entered promiscuous mode [ 90.667820][ T5770] veth1_vlan: entered promiscuous mode [ 90.694551][ T5783] veth0_macvtap: entered promiscuous mode [ 90.711331][ T5775] veth1_vlan: entered promiscuous mode [ 90.764382][ T5783] veth1_macvtap: entered promiscuous mode [ 90.788285][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.796544][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.868229][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.880582][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.892850][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.910304][ T5770] veth0_macvtap: entered promiscuous mode [ 90.921776][ T5770] veth1_macvtap: entered promiscuous mode [ 90.942746][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.954474][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.968615][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.979345][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.995612][ T5775] veth0_macvtap: entered promiscuous mode [ 91.001733][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.022518][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.037512][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.046272][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.059798][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.093908][ T5775] veth1_macvtap: entered promiscuous mode [ 91.111987][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.126598][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.141138][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.151770][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.165587][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.199455][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.211802][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.222788][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.234357][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.246565][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.306259][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.323795][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.333476][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.343135][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.410361][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.439968][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.455115][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.471531][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.492340][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.511535][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.526368][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.594657][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.625319][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.635785][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.651300][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.661626][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.677259][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.708831][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.750231][ T5777] Bluetooth: hci0: command tx timeout [ 91.771201][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.801058][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.913781][ T51] Bluetooth: hci1: command tx timeout [ 91.914694][ T5777] Bluetooth: hci2: command tx timeout [ 91.917901][ T5777] Bluetooth: hci3: command tx timeout [ 91.936633][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.116587][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.263092][ T967] cfg80211: failed to load regulatory.db [ 92.297625][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.313054][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.430321][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.470682][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.562683][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.591542][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.677082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.707813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.716322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.852730][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.887827][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.133665][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.228685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.535494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.638127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.732254][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.740400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.945260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.173527][ T5777] Bluetooth: hci0: command tx timeout [ 94.177314][ T51] Bluetooth: hci3: command tx timeout [ 94.179569][ T5777] Bluetooth: hci2: command tx timeout [ 94.184988][ T51] Bluetooth: hci1: command tx timeout [ 94.495875][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.691893][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.810524][ T5880] ceph: No source [ 94.820161][ T5880] kAFS: unable to lookup cell '\/' [ 96.138098][ T5892] syz.1.2[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.306632][ T27] audit: type=1326 audit(1769796410.961:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 97.713086][ T27] audit: type=1326 audit(1769796410.961:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 97.859616][ T27] audit: type=1326 audit(1769796410.961:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 98.066254][ T27] audit: type=1326 audit(1769796410.971:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 98.198275][ T27] audit: type=1326 audit(1769796410.971:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 98.345040][ T5906] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.382384][ T27] audit: type=1326 audit(1769796410.971:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 98.467554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 98.501372][ T27] audit: type=1326 audit(1769796410.971:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 98.581562][ T5910] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 98.758282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.927775][ T27] audit: type=1326 audit(1769796410.971:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 99.276728][ T27] audit: type=1326 audit(1769796410.981:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 99.391470][ T27] audit: type=1326 audit(1769796410.981:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d8b9aeb9 code=0x7ffc0000 [ 108.541043][ T5947] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.732002][ T5951] loop3: detected capacity change from 0 to 64 [ 108.939878][ T5953] @: renamed from vlan0 (while UP) [ 109.734115][ T5954] input: syz1 as /devices/virtual/input/input5 [ 110.421591][ T5958] loop3: detected capacity change from 0 to 4096 [ 110.428832][ T5958] ======================================================= [ 110.428832][ T5958] WARNING: The mand mount option has been deprecated and [ 110.428832][ T5958] and is ignored by this kernel. Remove the mand [ 110.428832][ T5958] option from the mount to silence this warning. [ 110.428832][ T5958] ======================================================= [ 110.472589][ T5958] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 110.488735][ T5958] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 110.503859][ T5958] ntfs3: loop3: failed to replay log file. Can't mount rw! [ 110.618763][ T5785] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.472239][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 113.609160][ T5979] loop3: detected capacity change from 0 to 32768 [ 115.387472][ T5979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.25 (5979) [ 115.419410][ T5979] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.429971][ T5979] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 115.438805][ T5979] BTRFS info (device loop3): setting nodatacow, compression disabled [ 115.446963][ T5979] BTRFS info (device loop3): enabling auto defrag [ 115.454015][ T5979] BTRFS info (device loop3): max_inline at 0 [ 115.460113][ T5979] BTRFS info (device loop3): using free space tree [ 115.552575][ T5979] BTRFS info (device loop3): auto enabling async discard [ 117.424823][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.285445][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 121.893386][ T6035] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 128.854768][ T6051] loop1: detected capacity change from 0 to 1024 [ 129.091628][ T6051] EXT4-fs (loop1): failed to initialize system zone (-117) [ 129.099083][ T6051] EXT4-fs (loop1): mount failed [ 131.112375][ T6074] vivid-007: disconnect [ 131.413539][ T6065] vivid-007: reconnect [ 133.117667][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.124324][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.315626][ T6083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.45'. [ 133.344447][ T6083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.45'. [ 135.118554][ T6084] overlay: Unknown parameter '/' [ 135.343065][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 135.343082][ T27] audit: type=1326 audit(1769796449.081:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c1a994cd7 code=0x7fc00000 [ 135.422663][ T27] audit: type=1326 audit(1769796449.081:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c1a93c2d9 code=0x7fc00000 [ 135.451723][ T27] audit: type=1326 audit(1769796449.081:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9c1a93c39d code=0x7fc00000 [ 135.524034][ T27] audit: type=1326 audit(1769796449.081:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1a99aeb9 code=0x7fc00000 [ 135.786991][ T27] audit: type=1326 audit(1769796449.081:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1a99aeb9 code=0x7fc00000 [ 135.895428][ T27] audit: type=1326 audit(1769796449.081:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1a99aeb9 code=0x7fc00000 [ 135.920659][ T27] audit: type=1326 audit(1769796449.081:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1a99aeb9 code=0x7fc00000 [ 136.100812][ T27] audit: type=1326 audit(1769796449.081:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1a99aeb9 code=0x7fc00000 [ 136.381444][ T27] audit: type=1326 audit(1769796449.081:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1a99aeb9 code=0x7fc00000 [ 136.754395][ T27] audit: type=1326 audit(1769796449.081:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1a99aeb9 code=0x7fc00000 [ 138.870538][ T6112] loop2: detected capacity change from 0 to 128 [ 138.882445][ T6112] EXT4-fs: Ignoring removed nobh option [ 139.458321][ T6112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.472279][ T6112] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.785333][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.958616][ T6120] loop2: detected capacity change from 0 to 256 [ 140.024268][ T6120] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.660809][ T8] IPVS: starting estimator thread 0... [ 140.997135][ T6126] IPVS: using max 17 ests per chain, 40800 per kthread [ 144.956663][ T6137] netlink: 71 bytes leftover after parsing attributes in process `syz.3.51'. [ 145.246103][ T6134] netlink: 71 bytes leftover after parsing attributes in process `syz.2.57'. [ 145.367828][ T6139] netlink: 71 bytes leftover after parsing attributes in process `syz.0.58'. [ 147.125974][ T8] libceph: connect (1)[c::]:6789 error -101 [ 147.135896][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 147.145108][ T6149] ceph: No mds server is up or the cluster is laggy [ 150.520283][ T6165] loop2: detected capacity change from 0 to 512 [ 152.025402][ T6174] loop1: detected capacity change from 0 to 128 [ 152.058869][ T6174] FAT-fs (loop1): Unrecognized mount option "@" or missing value [ 152.124442][ T5785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.782832][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.665132][ T5820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.686927][ T5820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.698875][ T5820] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.716876][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.772741][ T5820] usb 1-1: SerialNumber: syz [ 154.522945][ T5820] usb 1-1: 0:2 : does not exist [ 154.644904][ T5820] usb 1-1: unit 255 not found! [ 154.660473][ T5820] usb 1-1: 5:0: cannot get min/max values for control 15 (id 5) [ 154.682770][ T5820] usb 1-1: 5:0: cannot get min/max values for control 16 (id 5) [ 154.743550][ T5820] usb 1-1: USB disconnect, device number 2 [ 157.987204][ T5776] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.154029][ T6203] Bluetooth: MGMT ver 1.22 [ 158.177433][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 158.198736][ T5776] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.227080][ T5776] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.258235][ T5776] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.297041][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.305165][ T5776] usb 1-1: Product: syz [ 158.330256][ T5776] usb 1-1: Manufacturer: syz [ 158.334956][ T5776] usb 1-1: SerialNumber: syz [ 158.613595][ T5776] usb 1-1: 0:2 : does not exist [ 158.687720][ T5776] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 159.010291][ T5776] usb 1-1: USB disconnect, device number 3 [ 159.430148][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.932922][ T6225] Zero length message leads to an empty skb [ 163.581609][ T6237] tipc: Started in network mode [ 163.597087][ T6237] tipc: Node identity 72e6d8e73c2e, cluster identity 4711 [ 163.638250][ T6237] tipc: Enabled bearer , priority 0 [ 163.680617][ T6239] syzkaller0: entered promiscuous mode [ 163.686217][ T6239] syzkaller0: entered allmulticast mode [ 163.771246][ T6237] tipc: Resetting bearer [ 163.817364][ T6236] tipc: Resetting bearer [ 163.885551][ T6236] tipc: Disabling bearer [ 165.448654][ T6251] loop1: detected capacity change from 0 to 40427 [ 165.463032][ T6251] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 165.471147][ T6251] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.492035][ T6251] F2FS-fs (loop1): invalid crc value [ 167.212469][ T6251] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.327773][ T6251] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 167.341022][ T6251] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.485851][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.788258][ T6263] loop2: detected capacity change from 0 to 128 [ 168.493098][ T6264] sched: RT throttling activated [ 168.712949][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.953029][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.130907][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.508507][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.532342][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.541681][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.565994][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.588130][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.597599][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.746259][ T6281] tipc: Started in network mode [ 171.761358][ T6281] tipc: Node identity d6c87b23e459, cluster identity 4711 [ 171.781510][ T6281] tipc: Enabled bearer , priority 0 [ 171.883237][ T6284] syzkaller0: entered promiscuous mode [ 171.896939][ T6284] syzkaller0: entered allmulticast mode [ 173.690554][ T51] Bluetooth: hci0: command tx timeout [ 173.718506][ T6281] tipc: Resetting bearer [ 173.785820][ T6279] tipc: Resetting bearer [ 173.876364][ T6279] tipc: Disabling bearer [ 174.058678][ T5844] tipc: Node number set to 848395043 [ 176.895658][ T51] Bluetooth: hci0: command tx timeout [ 177.094943][ T6310] tipc: Enabled bearer , priority 0 [ 177.107356][ T6277] chnl_net:caif_netlink_parms(): no params data found [ 177.188557][ T6307] syzkaller0: entered promiscuous mode [ 177.199527][ T6307] syzkaller0: entered allmulticast mode [ 177.567575][ T6307] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 177.699068][ T6310] tipc: Resetting bearer [ 178.001962][ T6305] tipc: Resetting bearer [ 178.328372][ T6305] tipc: Disabling bearer [ 178.614085][ T6327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.682373][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 178.873646][ T65] hsr_slave_0: left promiscuous mode [ 178.873650][ T6330] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.916569][ T65] hsr_slave_1: left promiscuous mode [ 178.927441][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.946997][ T51] Bluetooth: hci0: command tx timeout [ 178.955899][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.985183][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.000430][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.019056][ T65] bridge_slave_1: left allmulticast mode [ 179.030460][ T65] bridge_slave_1: left promiscuous mode [ 179.046815][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.071681][ T65] bridge_slave_0: left allmulticast mode [ 179.087966][ T65] bridge_slave_0: left promiscuous mode [ 179.093910][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.160037][ T65] veth1_macvtap: left promiscuous mode [ 179.166361][ T65] veth0_macvtap: left promiscuous mode [ 179.173912][ T65] veth1_vlan: left promiscuous mode [ 179.179867][ T65] veth0_vlan: left promiscuous mode [ 179.315641][ T6337] loop2: detected capacity change from 0 to 1024 [ 181.499085][ T51] Bluetooth: hci0: command tx timeout [ 184.191447][ T65] team0 (unregistering): Port device team_slave_1 removed [ 184.239508][ T65] team0 (unregistering): Port device team_slave_0 removed [ 184.291098][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.341578][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.703352][ T65] bond0 (unregistering): Released all slaves [ 184.812154][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.819697][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.827626][ T6277] bridge_slave_0: entered allmulticast mode [ 184.834682][ T6277] bridge_slave_0: entered promiscuous mode [ 184.844778][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.852335][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.860033][ T6277] bridge_slave_1: entered allmulticast mode [ 184.868236][ T6277] bridge_slave_1: entered promiscuous mode [ 184.950338][ T6347] tipc: Enabling of bearer rejected, failed to enable media [ 185.112382][ T6277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.262295][ T6277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.874086][ T6277] team0: Port device team_slave_0 added [ 185.921712][ T6277] team0: Port device team_slave_1 added [ 186.084996][ T6372] bond1: (slave veth3): Enslaving as an active interface with a down link [ 186.111695][ T6377] bond1: (slave ip6gretap1): making interface the new active one [ 186.133601][ T6377] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.177050][ T5776] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 186.210911][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.229137][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.290299][ T6277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.313216][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.320459][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.357323][ T6277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.379547][ T5776] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.409305][ T5776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.450454][ T5776] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.464107][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.482904][ T5776] usb 3-1: SerialNumber: syz [ 186.519804][ T6393] @: renamed from vlan0 (while UP) [ 186.564965][ T6277] hsr_slave_0: entered promiscuous mode [ 186.710931][ T6277] hsr_slave_1: entered promiscuous mode [ 186.757923][ T6396] input: syz1 as /devices/virtual/input/input6 [ 186.910928][ T6277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.995300][ T6277] Cannot create hsr debugfs directory [ 188.035694][ T5776] usb 3-1: 0:2 : does not exist [ 188.798008][ T5776] usb 3-1: USB disconnect, device number 2 [ 188.977554][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.093878][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 193.324133][ T6277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.358368][ T6277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.397535][ T6277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.430692][ T6277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.707528][ T6444] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 193.820958][ T6444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.909393][ T6448] vlan0: entered allmulticast mode [ 193.914598][ T6448] veth0_to_bond: entered allmulticast mode [ 193.996064][ T6448] bond1: (slave vlan0): making interface the new active one [ 194.006340][ T6448] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 194.055336][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.128868][ T6277] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.159030][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.166208][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.216510][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.223771][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.572021][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.579412][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.943704][ T6277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.143173][ T6277] veth0_vlan: entered promiscuous mode [ 195.214148][ T6277] veth1_vlan: entered promiscuous mode [ 195.258846][ T6470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.119'. [ 195.344439][ T6277] veth0_macvtap: entered promiscuous mode [ 195.748446][ T6277] veth1_macvtap: entered promiscuous mode [ 196.487105][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.512652][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.536738][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.547573][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.559698][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.570743][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.584552][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.609746][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.626820][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.653250][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.664228][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.691478][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.721322][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.746153][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.787580][ T6277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.812147][ T6277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.821532][ T6277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.831333][ T6277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.012535][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.036948][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.086359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.117282][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.542321][ T6499] netlink: 71 bytes leftover after parsing attributes in process `syz.1.130'. [ 198.727100][ T5776] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 199.348415][ T5776] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 199.386885][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.411652][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.433121][ T5776] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.466382][ T5776] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.504730][ T6513] netlink: 71 bytes leftover after parsing attributes in process `syz.0.134'. [ 199.506534][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.561758][ T5776] usb 2-1: config 0 descriptor?? [ 200.767393][ T5776] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 200.803254][ T5776] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 201.497957][ T5776] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 201.735915][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.126'. [ 201.777014][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.126'. [ 201.783244][ T5776] usb 2-1: USB disconnect, device number 2 [ 201.918403][ T6533] fido_id[6533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 202.077715][ T6545] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 202.274276][ T6545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.295430][ T6547] vlan0: entered allmulticast mode [ 202.301249][ T6547] veth0_to_bond: entered allmulticast mode [ 202.311603][ T6547] bond2: (slave vlan0): making interface the new active one [ 202.321073][ T6547] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 202.461209][ T6554] netlink: 71 bytes leftover after parsing attributes in process `syz.3.132'. [ 205.767046][ T5844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 206.717354][ T5844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.736459][ T5844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.773001][ T5844] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.863692][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.897242][ T5844] usb 2-1: SerialNumber: syz [ 209.499215][ T5844] usb 2-1: 0:2 : does not exist [ 209.566514][ T5844] usb 2-1: USB disconnect, device number 3 [ 209.671335][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.961075][ T6611] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 211.989693][ T6611] loop2: detected capacity change from 0 to 64 [ 212.071184][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 212.147086][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 212.153292][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 212.338690][ T6624] loop0: detected capacity change from 0 to 256 [ 212.387097][ T6624] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.307688][ T5844] IPVS: starting estimator thread 0... [ 213.499862][ T6628] IPVS: using max 18 ests per chain, 43200 per kthread [ 222.041224][ T6661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.153'. [ 225.923588][ T6674] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 227.107971][ T6682] loop1: detected capacity change from 0 to 1024 [ 229.540161][ T6674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.643539][ T6678] vlan2: entered allmulticast mode [ 229.690961][ T6678] veth0_to_bond: entered allmulticast mode [ 229.754073][ T6678] bond1: (slave vlan2): making interface the new active one [ 229.819662][ T6678] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 239.881263][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.938603][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.950578][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.961845][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.970709][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 239.978388][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.413634][ T5084] Bluetooth: hci4: command tx timeout [ 244.466968][ T5777] Bluetooth: hci4: command tx timeout [ 246.885881][ T5777] Bluetooth: hci4: command tx timeout [ 247.349018][ T6717] chnl_net:caif_netlink_parms(): no params data found [ 248.272413][ T1006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.946992][ T5777] Bluetooth: hci4: command tx timeout [ 249.747108][ T1006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.997179][ T6748] netlink: 71 bytes leftover after parsing attributes in process `syz.0.180'. [ 250.078066][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.085287][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.248205][ T6717] bridge_slave_0: entered allmulticast mode [ 250.256030][ T6717] bridge_slave_0: entered promiscuous mode [ 250.336209][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.353829][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.377042][ T6717] bridge_slave_1: entered allmulticast mode [ 250.397509][ T6717] bridge_slave_1: entered promiscuous mode [ 250.641005][ T1006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.425642][ T6717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.479032][ T6717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.513854][ T6771] netlink: 71 bytes leftover after parsing attributes in process `syz.2.183'. [ 251.571736][ T1006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.624182][ T6717] team0: Port device team_slave_0 added [ 252.696609][ T6717] team0: Port device team_slave_1 added [ 252.905228][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.922097][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.994241][ T6717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.053964][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.072594][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.127312][ T6717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.021995][ T6717] hsr_slave_0: entered promiscuous mode [ 255.395926][ T6717] hsr_slave_1: entered promiscuous mode [ 255.403731][ T6717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.807008][ T6717] Cannot create hsr debugfs directory [ 256.048865][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.055249][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.331779][ T6717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.386887][ T6717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.686852][ T6717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.307130][ T6717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.618518][ T1006] hsr_slave_0: left promiscuous mode [ 275.633860][ T1006] hsr_slave_1: left promiscuous mode [ 275.654883][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.672978][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.690020][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.706517][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.723627][ T1006] bridge_slave_1: left allmulticast mode [ 275.961932][ T1006] bridge_slave_1: left promiscuous mode [ 275.973388][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.023285][ T1006] bridge_slave_0: left allmulticast mode [ 276.047529][ T1006] bridge_slave_0: left promiscuous mode [ 276.064018][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.127412][ T1006] veth1_macvtap: left promiscuous mode [ 276.133044][ T1006] veth0_macvtap: left promiscuous mode [ 276.171509][ T1006] veth1_vlan: left promiscuous mode [ 276.209252][ T1006] veth0_vlan: left promiscuous mode [ 277.661776][ T5084] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 277.672190][ T5084] CPU: 0 PID: 5084 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 277.679826][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.689987][ T5084] Workqueue: hci3 hci_rx_work [ 277.694752][ T5084] Call Trace: [ 277.698087][ T5084] [ 277.701108][ T5084] dump_stack_lvl+0x18c/0x250 [ 277.705845][ T5084] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 277.711543][ T5084] ? show_regs_print_info+0x20/0x20 [ 277.716799][ T5084] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 277.722584][ T5084] sysfs_create_dir_ns+0x26e/0x2a0 [ 277.727750][ T5084] ? sysfs_warn_dup+0xa0/0xa0 [ 277.732474][ T5084] ? do_raw_spin_unlock+0x121/0x230 [ 277.737739][ T5084] kobject_add_internal+0x61c/0xcc0 [ 277.743005][ T5084] kobject_add+0x164/0x240 [ 277.747484][ T5084] ? kobject_init+0x1e0/0x1e0 [ 277.752218][ T5084] ? _raw_spin_unlock+0x3a/0x40 [ 277.757128][ T5084] ? get_device_parent+0x366/0x390 [ 277.762298][ T5084] device_add+0x408/0xc20 [ 277.766782][ T5084] hci_conn_add_sysfs+0xd5/0x1e0 [ 277.771778][ T5084] le_conn_complete_evt+0xf5d/0x1540 [ 277.777207][ T5084] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 277.783523][ T5084] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 277.789211][ T5084] ? lockdep_hardirqs_on+0x98/0x150 [ 277.794473][ T5084] ? skb_pull_data+0xfb/0x200 [ 277.799221][ T5084] hci_le_conn_complete_evt+0x187/0x440 [ 277.805287][ T5084] ? hci_remote_host_features_evt+0x150/0x150 [ 277.811417][ T5084] hci_event_packet+0x7ba/0x1270 [ 277.816433][ T5084] ? bis_list+0x290/0x290 [ 277.820823][ T5084] ? kcov_remote_start+0x2b/0x7e0 [ 277.825914][ T5084] ? hci_send_to_monitor+0xd7/0x4f0 [ 277.831297][ T5084] hci_rx_work+0x43a/0xd60 [ 277.835801][ T5084] ? process_scheduled_works+0x96f/0x15d0 [ 277.841595][ T5084] process_scheduled_works+0xa5d/0x15d0 [ 277.847238][ T5084] ? assign_work+0x430/0x430 [ 277.851901][ T5084] ? assign_work+0x3d0/0x430 [ 277.856550][ T5084] worker_thread+0xa55/0xfc0 [ 277.861201][ T5084] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 277.867208][ T5084] kthread+0x2fa/0x390 [ 277.871344][ T5084] ? pr_cont_work+0x560/0x560 [ 277.876087][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 277.880744][ T5084] ret_from_fork+0x48/0x80 [ 277.885273][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 277.889938][ T5084] ret_from_fork_asm+0x11/0x20 [ 277.894791][ T5084] [ 277.919238][ T5084] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 277.934050][ T5084] Bluetooth: hci3: failed to register connection device [ 278.493382][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 279.875240][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 279.885404][ T5777] CPU: 1 PID: 5777 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 279.893017][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.903217][ T5777] Workqueue: hci3 hci_rx_work [ 279.907972][ T5777] Call Trace: [ 279.911310][ T5777] [ 279.914281][ T5777] dump_stack_lvl+0x18c/0x250 [ 279.919025][ T5777] ? show_regs_print_info+0x20/0x20 [ 279.924291][ T5777] ? load_image+0x400/0x400 [ 279.928859][ T5777] sysfs_create_dir_ns+0x26e/0x2a0 [ 279.934025][ T5777] ? sysfs_warn_dup+0xa0/0xa0 [ 279.938755][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 279.944019][ T5777] kobject_add_internal+0x61c/0xcc0 [ 279.949276][ T5777] kobject_add+0x164/0x240 [ 279.953757][ T5777] ? kobject_init+0x1e0/0x1e0 [ 279.958485][ T5777] ? _raw_spin_unlock+0x3a/0x40 [ 279.963387][ T5777] ? get_device_parent+0x366/0x390 [ 279.968555][ T5777] device_add+0x408/0xc20 [ 279.972942][ T5777] hci_conn_add_sysfs+0xd5/0x1e0 [ 279.978028][ T5777] le_conn_complete_evt+0xf5d/0x1540 [ 279.983373][ T5777] ? hci_event_packet+0x4cb/0x1270 [ 279.988544][ T5777] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 279.994890][ T5777] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 280.000608][ T5777] ? skb_pull_data+0xfb/0x200 [ 280.005340][ T5777] hci_le_conn_complete_evt+0x187/0x440 [ 280.010954][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 280.017087][ T5777] hci_event_packet+0x7ba/0x1270 [ 280.022096][ T5777] ? bis_list+0x290/0x290 [ 280.026483][ T5777] ? kcov_remote_start+0x2b/0x7e0 [ 280.031558][ T5777] ? hci_send_to_monitor+0xd7/0x4f0 [ 280.036901][ T5777] hci_rx_work+0x43a/0xd60 [ 280.041477][ T5777] ? process_scheduled_works+0x96f/0x15d0 [ 280.047258][ T5777] process_scheduled_works+0xa5d/0x15d0 [ 280.052892][ T5777] ? assign_work+0x430/0x430 [ 280.057544][ T5777] ? assign_work+0x3d0/0x430 [ 280.062185][ T5777] worker_thread+0xa55/0xfc0 [ 280.066856][ T5777] kthread+0x2fa/0x390 [ 280.070970][ T5777] ? pr_cont_work+0x560/0x560 [ 280.075696][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 280.080328][ T5777] ret_from_fork+0x48/0x80 [ 280.084806][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 280.089615][ T5777] ret_from_fork_asm+0x11/0x20 [ 280.094451][ T5777] [ 280.098628][ T5777] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 280.135518][ T5777] Bluetooth: hci3: failed to register connection device [ 280.512447][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 280.549332][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 280.614078][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 280.696666][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.763118][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.856156][ T1006] bond0 (unregistering): Released all slaves [ 282.027184][ T6918] netlink: 71 bytes leftover after parsing attributes in process `syz.0.219'. [ 282.040645][ T6936] netlink: 71 bytes leftover after parsing attributes in process `syz.1.221'. [ 282.669598][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 282.965325][ T6717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.094569][ T6717] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.775934][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.783293][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.965854][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.973115][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.029382][ T6717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.039931][ T6717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.560872][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 287.638783][ T6717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.589669][ T6717] veth0_vlan: entered promiscuous mode [ 291.618702][ T6717] veth1_vlan: entered promiscuous mode [ 291.754589][ T6717] veth0_macvtap: entered promiscuous mode [ 291.765790][ T6717] veth1_macvtap: entered promiscuous mode [ 291.788719][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.803357][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.877036][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.117345][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.308826][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.464172][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.526114][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.620163][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.656842][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.677131][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.707051][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.726806][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.756886][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.778670][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.842592][ T6717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.880344][ T6717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.899499][ T6717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.919260][ T6717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.108412][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.132779][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.241822][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.270481][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.278621][ T7057] netlink: 71 bytes leftover after parsing attributes in process `syz.2.242'. [ 294.550217][ T7074] netlink: 48 bytes leftover after parsing attributes in process `syz.4.167'. [ 294.691435][ T7063] netlink: 71 bytes leftover after parsing attributes in process `syz.0.243'. [ 299.215505][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 299.226271][ T5777] CPU: 1 PID: 5777 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 299.233886][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.243991][ T5777] Workqueue: hci3 hci_rx_work [ 299.248744][ T5777] Call Trace: [ 299.252076][ T5777] [ 299.255047][ T5777] dump_stack_lvl+0x18c/0x250 [ 299.259969][ T5777] ? show_regs_print_info+0x20/0x20 [ 299.265227][ T5777] ? load_image+0x400/0x400 [ 299.269786][ T5777] ? kasan_save_alloc_info+0xb/0x30 [ 299.275039][ T5777] sysfs_create_dir_ns+0x26e/0x2a0 [ 299.280222][ T5777] ? sysfs_warn_dup+0xa0/0xa0 [ 299.284971][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 299.290238][ T5777] kobject_add_internal+0x61c/0xcc0 [ 299.295497][ T5777] kobject_add+0x164/0x240 [ 299.299986][ T5777] ? kobject_init+0x1e0/0x1e0 [ 299.304753][ T5777] ? _raw_spin_unlock+0x3a/0x40 [ 299.309677][ T5777] ? get_device_parent+0x366/0x390 [ 299.314852][ T5777] device_add+0x408/0xc20 [ 299.319250][ T5777] hci_conn_add_sysfs+0xd5/0x1e0 [ 299.324252][ T5777] le_conn_complete_evt+0xf5d/0x1540 [ 299.329599][ T5777] ? hci_event_packet+0x4cb/0x1270 [ 299.334767][ T5777] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 299.341075][ T5777] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 299.346776][ T5777] ? skb_pull_data+0xfb/0x200 [ 299.351507][ T5777] hci_le_conn_complete_evt+0x187/0x440 [ 299.357152][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 299.363281][ T5777] hci_event_packet+0x7ba/0x1270 [ 299.368296][ T5777] ? bis_list+0x290/0x290 [ 299.372673][ T5777] ? kcov_remote_start+0x2b/0x7e0 [ 299.377785][ T5777] ? hci_send_to_monitor+0xd7/0x4f0 [ 299.383063][ T5777] hci_rx_work+0x43a/0xd60 [ 299.387548][ T5777] ? process_scheduled_works+0x96f/0x15d0 [ 299.393321][ T5777] process_scheduled_works+0xa5d/0x15d0 [ 299.398956][ T5777] ? assign_work+0x430/0x430 [ 299.403614][ T5777] ? assign_work+0x3d0/0x430 [ 299.408262][ T5777] worker_thread+0xa55/0xfc0 [ 299.412932][ T5777] kthread+0x2fa/0x390 [ 299.417059][ T5777] ? pr_cont_work+0x560/0x560 [ 299.421793][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 299.426461][ T5777] ret_from_fork+0x48/0x80 [ 299.430951][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 299.435604][ T5777] ret_from_fork_asm+0x11/0x20 [ 299.440471][ T5777] [ 299.445121][ T5777] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 299.459797][ T5777] Bluetooth: hci3: failed to register connection device [ 301.506873][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 303.295389][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 303.305268][ T5777] CPU: 1 PID: 5777 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 303.312963][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.323157][ T5777] Workqueue: hci1 hci_rx_work [ 303.327993][ T5777] Call Trace: [ 303.331315][ T5777] [ 303.334302][ T5777] dump_stack_lvl+0x18c/0x250 [ 303.339045][ T5777] ? show_regs_print_info+0x20/0x20 [ 303.344298][ T5777] ? load_image+0x400/0x400 [ 303.348869][ T5777] sysfs_create_dir_ns+0x26e/0x2a0 [ 303.354034][ T5777] ? sysfs_warn_dup+0xa0/0xa0 [ 303.358765][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 303.364029][ T5777] kobject_add_internal+0x61c/0xcc0 [ 303.369302][ T5777] kobject_add+0x164/0x240 [ 303.373799][ T5777] ? kobject_init+0x1e0/0x1e0 [ 303.378542][ T5777] ? _raw_spin_unlock+0x3a/0x40 [ 303.383441][ T5777] ? get_device_parent+0x366/0x390 [ 303.388589][ T5777] device_add+0x408/0xc20 [ 303.392968][ T5777] hci_conn_add_sysfs+0xd5/0x1e0 [ 303.397947][ T5777] le_conn_complete_evt+0xf5d/0x1540 [ 303.403272][ T5777] ? hci_event_packet+0x4cb/0x1270 [ 303.408429][ T5777] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 303.414713][ T5777] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 303.420396][ T5777] ? skb_pull_data+0xfb/0x200 [ 303.425104][ T5777] hci_le_conn_complete_evt+0x187/0x440 [ 303.430691][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 303.436817][ T5777] hci_event_packet+0x7ba/0x1270 [ 303.441787][ T5777] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 303.447459][ T5777] ? bis_list+0x290/0x290 [ 303.451819][ T5777] ? __hci_send_to_channel+0x2a1/0x2c0 [ 303.457508][ T5777] ? hci_send_to_monitor+0x31/0x4f0 [ 303.462790][ T5777] ? hci_send_to_monitor+0xd7/0x4f0 [ 303.468058][ T5777] hci_rx_work+0x43a/0xd60 [ 303.472555][ T5777] ? process_scheduled_works+0x96f/0x15d0 [ 303.478342][ T5777] process_scheduled_works+0xa5d/0x15d0 [ 303.483967][ T5777] ? assign_work+0x430/0x430 [ 303.488625][ T5777] ? assign_work+0x3d0/0x430 [ 303.493441][ T5777] worker_thread+0xa55/0xfc0 [ 303.498091][ T5777] kthread+0x2fa/0x390 [ 303.502193][ T5777] ? pr_cont_work+0x560/0x560 [ 303.506915][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 303.511551][ T5777] ret_from_fork+0x48/0x80 [ 303.516006][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 303.520643][ T5777] ret_from_fork_asm+0x11/0x20 [ 303.525469][ T5777] [ 303.643492][ T5777] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 303.679213][ T5777] Bluetooth: hci1: failed to register connection device [ 305.366254][ T51] Bluetooth: hci4: command tx timeout [ 305.934415][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 309.800862][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 315.370989][ T7218] netlink: 71 bytes leftover after parsing attributes in process `syz.4.276'. [ 316.417355][ T7243] netlink: 71 bytes leftover after parsing attributes in process `syz.2.280'. [ 317.540991][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.794767][ T7277] netlink: 71 bytes leftover after parsing attributes in process `syz.1.286'. [ 319.919633][ T7285] netlink: 71 bytes leftover after parsing attributes in process `syz.2.288'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.