last executing test programs: 6m24.772867573s ago: executing program 0 (id=939): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x4040800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 6m24.561917719s ago: executing program 0 (id=943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) acct(0xfffffffffffffffe) 6m23.960409861s ago: executing program 0 (id=947): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01e", 0xd5}], 0x1}, 0x8000194) 6m23.697319092s ago: executing program 0 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xb3409000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = dup(r0) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r6, 0x8020100001, 0x0) 6m21.840357678s ago: executing program 0 (id=960): r0 = syz_io_uring_setup(0x6abb, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0) 6m19.005071255s ago: executing program 0 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) 6m3.859494755s ago: executing program 32 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) 13.207666208s ago: executing program 2 (id=3276): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 12.908463453s ago: executing program 2 (id=3280): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) fchown(r1, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[], 0x202400) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x10000000000000) 12.7609722s ago: executing program 2 (id=3281): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100"], 0xc8) close_range(r1, 0xffffffffffffffff, 0x0) 12.689767929s ago: executing program 2 (id=3282): sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 12.113299014s ago: executing program 2 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 11.86516438s ago: executing program 2 (id=3287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 10.270605356s ago: executing program 1 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 9.96175322s ago: executing program 4 (id=3306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x315, 0x3, 0x0, 0xffffff80}]}) 9.862542841s ago: executing program 1 (id=3307): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffeff}, 0x18) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040801}, 0x20000000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r5 = fsmount(r2, 0x0, 0x2) openat(r5, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) 9.747285693s ago: executing program 4 (id=3309): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900000000000800110000000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.547029458s ago: executing program 1 (id=3310): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x40001) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 9.281228511s ago: executing program 4 (id=3311): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 9.113230722s ago: executing program 4 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 8.90523994s ago: executing program 4 (id=3315): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @loopback}}}], 0x20}}], 0x1, 0x80) 8.658452148s ago: executing program 1 (id=3316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 8.585219515s ago: executing program 4 (id=3317): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4024040102cd42"], 0x7) 8.187936123s ago: executing program 1 (id=3319): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffeff}, 0x18) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040801}, 0x20000000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r5 = fsmount(r2, 0x0, 0x2) openat(r5, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) 7.902296767s ago: executing program 1 (id=3321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev, 0x0}, &(0x7f00000000c0)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) move_pages(0x0, 0x2, &(0x7f0000000700)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000040), 0x0) r4 = socket(0xa, 0x2, 0x0) getsockopt(r4, 0x0, 0x20, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000300)=0x4, 0x4) r5 = socket$kcm(0x2, 0x3, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0x5, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e]}}, &(0x7f0000000100)=""/56, 0x27, 0x38, 0x1, 0x1, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xffff0001, 0x1c, 0x8001, 0x0, r6, 0x800}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040055}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0xfe8e, 0x12) 5.532000145s ago: executing program 5 (id=3335): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="20002b8008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080) 679.811818ms ago: executing program 5 (id=3341): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB], 0xc4}}, 0x40) 619.514918ms ago: executing program 5 (id=3342): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 439.517887ms ago: executing program 5 (id=3343): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040801}, 0x20000000) fsmount(0xffffffffffffffff, 0x0, 0x2) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) 313.161289ms ago: executing program 5 (id=3344): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 312.214314ms ago: executing program 3 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 263.904233ms ago: executing program 3 (id=3346): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x80) 188.711964ms ago: executing program 3 (id=3347): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) 134.070948ms ago: executing program 3 (id=3348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 66.191971ms ago: executing program 5 (id=3349): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/123, 0x7b) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) 1.354939ms ago: executing program 3 (id=3350): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=3351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@deltaction={0x12c, 0x31, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x48e399b}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_clone3(&(0x7f0000000640)={0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480), {0x2000019}, &(0x7f0000000500)=""/13, 0xd, &(0x7f0000000580)=""/24, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x64}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000022c0)="3b9eccc918ce8c50894cb802b04e9492b64a02d85d3ed05eac49318868ad13e4fa9e2f1b165dfcc79e43ed30bb0c212bebb71afc79347f2f1a90e936a487e1ce171789626d34ffa8e3b4415ad869955133f81fab7f450d7ef6df7bf6a16cc39fd78e88662ffd1c3b31ffe836682b1ad9c331a068a75d12fd346d77f5cdacee9fee2203a321c260b0b5fdc8b5d7d43148f4b0fb550dd9d8746f0a0444cfa52af90a966921f9cb48b0c99727166a2f59c12dae2fcc4d891258bd723b5fd1fcb4cb219c87fadebe2582802ef18165f5ff67ba0d4eb4d3ef1f80ba9dff1a74dd5874b3d8017ff61b5174d9660e54f2b5f94f29f6665567b2ca6d0549a500a428ce29b197f754f8e3b6c7dc21260ce97551074886667837db75c9a21cdf92b14dcb2e1f997bab3bf1902b8d8e9eb238c021fdbe48675473dac385e2fada25f767ce5e7576c2dc496841123c81314f100e0648405f0ca9b5aa012d9316f3945e613aba10d1fbc2917143ed606c5513394343c9fac6f95ee678031ba5f4a81d8c2ae0d31c5711c91845f07b0add2bb4bd0f700217044582adf1850b0af5f04b63906918b7312fc3a800d67d8293604321633c41153f83662b2cbec354cf9c33e9eaa8ab2c5e4d86f82d379e98ad8d749595829b548ad77596448bf718c5e52a7dac04f62fde8ab1cc55ee5b6fd57327c8e678c1c8f9b8c235c132faffc553d54253f67d40075d91b7abaa303e5844ee31871fcdded3d8de8df952ae53e60d73e57267117129a4b42df34faa3287bb1c475d9ef904b7a4d33f1f8014e59905c3dc145e3974d71487ce05c9149fb4f9788ef0f519151d82391d783df5753819a0d967d842e60d28257741fb8b794b18a4e2f2f4f10412aa580062d0ef3691f4bdc14d283d672ae10fbbe23fa15f9225642aad56cc8a36538afe97750a0bf313cf3b9fdd881aa067b3b6ad9a69c04b50c9b4f8e29c11d7dcaf08b57ecd5cfd8a01b0e50313d09ea6b3634867f0c23c06055e04c36bddcdc6f4e30b2b6c0b0fa25a20843570bd582df937f7f48cd8e07abcfeaef4f8a72b34978ba5c95d65731943cdf2df8357311bb28d7d72fb9226dcbd059b14242c6fd4ab1ac90367a27ab715ebe553416966ceb79db37cd2dc45687269e4dad3cf50211fbfdd77a44c730a4732a12ff99fd151d205379bee91935a7bf4eef879d564872fdb2d7c399972ce5d44b59ea05d19a6b00c717b1dd3401a169b4402152b6f21c84c865f00ed0a9da758decaf1ad20138b80bee54a918d5d7dd5432c7ee34ae786cf7f55ea7f67229c39b81cccf80ccb424d139df240a9b18b3c4223de42e71ee7264a1c5db8da2d7fb3dfae2befb2f26e0c996d204ba3df39b111c445f3affed9c9fc8c2b67630de56b5a922f3fd7e0c2ef97df3ad486354937c4606a91874c7403dadaeabd03fe82c92cde4d67c6ac2ad7eedc9761224bf0c6b73ba60934f5c2db9846de4c41c6cb2f5ac6a7ad47418279f6cdd951679c1530ee4dab6d81a8cb41db64fc28ab9598c26fe51f6ddb0900a971aacc92a7e2dfbb596a1571609a4b8bc86c5c218b9220ceca304b7052a58e8c6ce427e4c9b127a133e625c02bf77a89ebff746f829401230f2a757c3ce04a6d01b35350973d24637526278fa724cb3053fd04cba673f682992041dc1cbebe9b574e5ab39307d695b2470cc21122e9c587301630351eeaa5dc1c8bb685ce2b0f4cc25d584354799858c2a11fe1b70518659acff13ad9702e6fd3116d311628bbd9b86f6a09c2a00ad08440860b621716799576b0de92285d0700004719a1eddbb691878526c34ad392e1d72f04d7830686f792152e7e497bc76721aa1c0493698efb8f463d0403d134b9ca6b19240e496edad804be73acb88b0fd1e0de3f00f83a135cf1b58376137e6e93136682343440fd4f96f00d56f9ff265cf5f4b8cc663d56eace1c1eb9fc8bcfcc5f947f14633886ae2b4c6b2bdeb71fcc7802945e484188b3f0425fd96996780f4f9e5ba028e5a600c65bdf6fc6936fc5f9e1792a02cb428f97262167e47a13f6a6634b99eb1791e7cd82f14c8c3353a52569c12e5b40a404564b4cba2fa7f247fbd74e1ab16f4caf68f6ebad58634970c1336d38c3feaf2b5c4eb8afb45aedb65c54b7e6a811c337d68ca5fc58279d7c4c524eb02bb36cd61f6269ce6b81e542e86500c837f7144962b2a6772981bed18a2173e41d73a74235f468305b3f0d5bd0a8f6ce90f6ba63f25322705d6464f9a24cdc13a528a9ae5f3907aa7018f5a1582c5242dbd325d05fef384da2f2cbd65ac0905a2311d75f72e2e1d30d34a62f91ebb79464ad1ca22b94e84d14c2337d13a017f80b3011d715c8629b1a2b638d4e20cdd639ad3db15e85db21494fb5e6ea599f0412d2b238a8a93b9bc930a9e126942c04f26e27631a2a46ef3115c683494bf2d805d03f76b07ea99380725914d01de34b1a5ab51487ea4c70c9591d6f84db21bb1c65c29d47a61b4e227e8bd917e6ff9d8cc1027bd2cf453b49d59cc9d21b13533df66c76cade633aaea0345f8d6e3b14375cc99d0b3e4c0eab870c9bc7b6911014fa556c8db62c3fcfec23deb242278c49b743987d0f65969f2e517b8de7d0b2a74865246cb4f32d40e1a4ea050563f28d3b9f598cf16265b270183cbaf91a2ef96c5aaaf7223a0bdf83c9fbdb324497e11aa4ed8ef02c5c9b7556504c957f2123603c62df3098ba82cd8d9f9738af0067e509159689741a262afd436b8d21c6104d092e66e2fbefa0b7e2c84c6d8ed44410224929b5ff349bef8d9ed6df6193424858f58039e4437b01e12517c86056108c7e6bc21caa884b9f3fd116657b2c8ca30ea557e6c4b60641686d0edf7c49a1c26589f82715e2e1914385bb91100169cf509aa1f3372ab65ccb422d1db5ff6acfde3af9bc2aef6e01455ac94f9d9655dc6020e858f97bb69dce077215d1427f61aabe63786384a2195ce411207aea8af9e3a0e736bf1af08ce4aecf45ce79c46a7f3cb111b14c54de41f13c54b68fa5fa11bfbbf6bfcde697b300a2bbc152260db6bd5d9e9a648d9e54531c4e16610b885dd9e2f620879ca8d126f843630f17ddc42fb502a0f51ee6c630eb734c54891094684f9e34e5331ccb5570bed0fc99361e681e9e2f9ee16c8d3d89ddc7b1e51c70942b0a890d69411f1e8a8e73c6415eeb848a6987f806af7ef5c62ec16b862164943325b8c5b3ae2d8df2e33bb5dac9546c2b32070d05bb2753c6ade48f1c54fb0e3333c2de138a736a19e895037090336bc5e7e3683f7cdf148d20f5bbcfaa458fb9a24faa62c7151577ac9ab8f10af0e70b35c8c2d5d30c53e394d1eda842fef1647ec686022df373ca10be06ab8d74b56f2c7108f08d56b6c9e3980c6f30e14a1a154c5fec893deb607868eeeb6f981cfd08056b54f3327bb733cbd64c7c79447489dd6950b07c079544da5f184e21dbe9478dc0b5ed245e0dc9f60b577d0230e4a92fe1d7c2d1cb354f65da8f28692159b103e6564c58854f8bedc969f4e1158b58a90f21aa67686fcd74a8cc8909fe8557662582bf916cb409af96267dc0cbb5232309c5934e152e758f28518f37fa1da83fdfefb0f2991a13aa4c3fe008e1ae0c4184c5e78474c05581299f3e9d24c433685dcea029494a7b7bd74cc986b3a4a92b5f6a21a2f7dcee7605474e1508ab632a9a4aa1992c7bf3d9265bffb047cdd0ebce043e411a3260de73af0dcbf6197a60a81846b3ae05db1227d5fc2815a9a7572764bbcf83d47fe202ffff6bda074405bb6132e3063bfd0ebdca4b8f8074f784bb0823fba5918876", 0xa93}], 0x1}, 0x20000044) prlimit64(0x0, 0x3, &(0x7f0000000540)={0x31a1, 0x8000000000104}, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') write$ppp(r5, &(0x7f0000001dc0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r9, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) write$sndseq(r9, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) socket$nl_route(0x10, 0x3, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=@md5={0x1, "ffc3f9070cd08417aeb76e9ff4d05452"}, 0x11, 0x2) kernel console output (not intermixed with test programs): 67295 uid=0 gid=0 ses=4294967295 subj=_ pid=11919 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 541.405765][ T37] audit: type=1326 audit(1764101936.623:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11919 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 541.405822][ T37] audit: type=1326 audit(1764101936.623:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11919 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 541.405860][ T37] audit: type=1326 audit(1764101936.623:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11919 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 541.835824][T11951] Invalid ELF header type: 25773 != 1 [ 543.160245][T11973] debugfs: 'ttyS3' already exists in 'caif_serial' [ 543.418128][T11978] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.418165][T11978] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.903618][ T37] audit: type=1326 audit(1764101939.123:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 543.904008][ T37] audit: type=1326 audit(1764101939.123:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 543.907286][ T37] audit: type=1326 audit(1764101939.133:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 543.907771][ T37] audit: type=1326 audit(1764101939.133:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 543.908407][ T37] audit: type=1326 audit(1764101939.133:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 544.190206][T11978] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.190242][T11978] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.241106][T11978] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.241144][T11978] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.739596][T11978] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.739629][T11978] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.098099][ T1503] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.098131][ T1503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.119933][T12074] usb usb1: check_ctrlrecip: process 12074 (syz.5.2106) requesting ep 01 but needs 81 [ 547.188632][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.188664][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.241221][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.241254][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.295006][ T1503] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.295047][ T1503] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.632333][T12092] debugfs: 'ttyS3' already exists in 'caif_serial' [ 547.955247][ T5803] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 548.155154][ T5803] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 548.155184][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.183665][ T5803] usb 2-1: config 0 descriptor?? [ 548.242411][ T5803] gspca_main: sunplus-2.14.0 probing 041e:400b [ 548.271421][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 548.271438][ T37] audit: type=1326 audit(1764101943.483:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.272388][ T37] audit: type=1326 audit(1764101943.493:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59ade9df90 code=0x7ffc0000 [ 548.273347][ T37] audit: type=1326 audit(1764101943.493:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.274390][ T37] audit: type=1326 audit(1764101943.493:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.282570][ T37] audit: type=1326 audit(1764101943.503:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.293009][ T37] audit: type=1326 audit(1764101943.513:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.293627][ T37] audit: type=1326 audit(1764101943.513:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.294147][ T37] audit: type=1326 audit(1764101943.513:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.490154][ T37] audit: type=1326 audit(1764101943.713:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.490822][ T37] audit: type=1326 audit(1764101943.713:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 548.791887][ T5803] gspca_sunplus: reg_w_riv err -110 [ 548.791950][ T5803] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 550.913727][T12185] debugfs: 'ttyS3' already exists in 'caif_serial' [ 551.193856][ T10] usb 2-1: USB disconnect, device number 8 [ 552.046263][T12230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.530133][T12338] netlink: 'syz.4.2211': attribute type 10 has an invalid length. [ 555.162457][T12352] Invalid ELF header type: 25773 != 1 [ 556.759434][T12338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.762203][T12338] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 556.762921][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2220'. [ 556.803963][T12334] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.804001][T12334] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.160276][T12334] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.160314][T12334] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.113480][T12334] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.113516][T12334] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.479839][T12334] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.479878][T12334] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.868086][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 558.973311][T12456] syz_tun: entered allmulticast mode [ 559.125906][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2266'. [ 559.189377][ T7966] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.189408][ T7966] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.234024][ T7966] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.234057][ T7966] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.344758][ T43] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.344791][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.501528][ T7966] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.501561][ T7966] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.657831][T12450] syz_tun: left allmulticast mode [ 560.549233][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2280'. [ 561.416372][ T5998] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 561.566014][ T5998] usb 3-1: Using ep0 maxpacket: 16 [ 561.568009][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.568032][ T5998] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.568076][ T5998] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 561.568097][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.573380][ T5998] usb 3-1: config 0 descriptor?? [ 561.896791][T12520] Invalid ELF header type: 25773 != 1 [ 562.918794][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.918869][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.283439][ T5939] usb 3-1: USB disconnect, device number 9 [ 564.227091][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2305'. [ 564.429822][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'. [ 565.059362][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 565.059380][ T37] audit: type=1326 audit(1764101960.283:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 565.064542][ T37] audit: type=1326 audit(1764101960.283:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 565.064592][ T37] audit: type=1326 audit(1764101960.283:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 565.064632][ T37] audit: type=1326 audit(1764101960.283:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 565.064673][ T37] audit: type=1326 audit(1764101960.283:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 565.064802][ T37] audit: type=1326 audit(1764101960.283:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 567.228193][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 567.642757][ T5998] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 568.115784][ T5998] usb 2-1: Using ep0 maxpacket: 16 [ 568.117807][ T5998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.117831][ T5998] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 568.117868][ T5998] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 568.117890][ T5998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.122617][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2337'. [ 568.183539][ T5998] usb 2-1: config 0 descriptor?? [ 569.777538][ T5873] usb 2-1: USB disconnect, device number 9 [ 570.070822][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 570.806510][T12693] netlink: 'syz.5.2362': attribute type 1 has an invalid length. [ 571.261856][T12705] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2365'. [ 571.261889][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2365'. [ 571.261903][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 571.847808][T12714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.817077][T12714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.821436][T12714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.823025][T12714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.823808][T12714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.084001][T12710] lo speed is unknown, defaulting to 1000 [ 573.437710][T12734] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2373'. [ 574.214101][T12748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2376'. [ 575.019917][ T5806] Bluetooth: hci4: command tx timeout [ 577.012739][T12803] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2388'. [ 577.331356][ T5806] Bluetooth: hci4: command tx timeout [ 578.527807][ T7966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.652741][T12818] syzkaller0: entered promiscuous mode [ 578.652768][T12818] syzkaller0: entered allmulticast mode [ 578.953012][ T37] audit: type=1326 audit(1764101974.173:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 578.953145][ T37] audit: type=1326 audit(1764101974.173:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 578.953614][ T37] audit: type=1326 audit(1764101974.173:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65f85adf90 code=0x7ffc0000 [ 578.953961][ T37] audit: type=1326 audit(1764101974.173:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 578.954096][ T37] audit: type=1326 audit(1764101974.173:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 578.954599][ T37] audit: type=1326 audit(1764101974.173:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 579.335914][ T5806] Bluetooth: hci4: command tx timeout [ 579.403863][ T37] audit: type=1326 audit(1764101974.623:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 579.403912][ T37] audit: type=1326 audit(1764101974.623:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 579.450605][ T37] audit: type=1326 audit(1764101974.673:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 579.450656][ T37] audit: type=1326 audit(1764101974.673:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12847 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f85af749 code=0x7ffc0000 [ 579.892473][ T7966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.146107][ T5803] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 581.349572][ T5803] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 581.349601][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.371070][ T5803] usb 2-1: config 0 descriptor?? [ 581.389338][ T5803] gspca_main: sunplus-2.14.0 probing 041e:400b [ 581.416044][ T5806] Bluetooth: hci4: command tx timeout [ 581.663757][ T7966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.897917][ T5803] gspca_sunplus: reg_w_riv err -110 [ 581.898015][ T5803] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 581.898033][T12710] chnl_net:caif_netlink_parms(): no params data found [ 582.285333][ T7966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.106122][T12710] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.106266][T12710] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.106582][T12710] bridge_slave_0: entered allmulticast mode [ 583.109310][T12710] bridge_slave_0: entered promiscuous mode [ 583.231454][T12710] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.231583][T12710] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.231776][T12710] bridge_slave_1: entered allmulticast mode [ 583.238965][T12710] bridge_slave_1: entered promiscuous mode [ 583.292729][ T5998] usb 2-1: USB disconnect, device number 10 [ 583.869172][T12710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.967592][T12965] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.967629][T12965] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.061278][T12710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.597186][T12965] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.597222][T12965] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.752956][T12710] team0: Port device team_slave_0 added [ 585.176000][ T5939] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 585.338267][T12710] team0: Port device team_slave_1 added [ 585.338939][ T7966] bridge_slave_1: left allmulticast mode [ 585.338962][ T7966] bridge_slave_1: left promiscuous mode [ 585.342439][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.477667][ T5939] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 585.477696][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.483454][ T5939] usb 6-1: config 0 descriptor?? [ 585.526823][ T5939] gspca_main: sunplus-2.14.0 probing 041e:400b [ 585.688482][T13010] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 585.722903][ T7966] : left allmulticast mode [ 585.722933][ T7966] : left promiscuous mode [ 585.723327][ T7966] bridge0: port 1() entered disabled state [ 586.044526][ T5939] gspca_sunplus: reg_w_riv err -110 [ 586.044628][ T5939] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 586.486411][T13019] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2447'. [ 587.590876][ T7966] team0: Port device geneve0 removed [ 587.890301][T13028] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 587.997028][T13030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.997329][T13030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 588.108443][ T31] usb 6-1: USB disconnect, device number 4 [ 588.946265][ T7966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.006345][ T7966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.066179][ T7966] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 589.091153][ T7966] bond0 (unregistering): Released all slaves [ 589.106633][ T7966] bond1 (unregistering): Released all slaves [ 589.753504][ T7966] bond2 (unregistering): Released all slaves [ 589.890525][T13028] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 589.892030][T13029] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 589.993589][T13039] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 590.258673][T13034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.307834][T12965] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.307857][T12965] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.462391][T12710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.462408][T12710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.462433][T12710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.464423][T13051] netlink: 'syz.4.2458': attribute type 39 has an invalid length. [ 590.547989][T12965] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.548012][T12965] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.580811][T12710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.580827][T12710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.580854][T12710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.761771][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2460'. [ 590.806971][T12710] hsr_slave_0: entered promiscuous mode [ 590.808331][T12710] hsr_slave_1: entered promiscuous mode [ 590.809264][T12710] debugfs: 'hsr0' already exists in 'hsr' [ 590.809286][T12710] Cannot create hsr debugfs directory [ 590.978288][T13058] can0: slcan on ptm0. [ 591.118892][T13061] can0 (unregistered): slcan off ptm0. [ 591.255274][ T1503] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.255308][ T1503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.288125][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 591.292454][ T1503] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.292484][ T1503] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.435975][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.436008][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.496810][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 591.496829][ T37] audit: type=1326 audit(1764101986.703:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13070 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 591.496882][ T37] audit: type=1326 audit(1764101986.713:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13070 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 591.496922][ T37] audit: type=1326 audit(1764101986.713:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13070 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 591.496963][ T37] audit: type=1326 audit(1764101986.713:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13070 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 591.497001][ T37] audit: type=1326 audit(1764101986.713:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13070 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 591.646031][ T43] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.646063][ T43] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.722447][ T7966] tipc: Left network mode [ 591.884657][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 591.967221][T13085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.201803][T13096] netlink: 'syz.2.2476': attribute type 39 has an invalid length. [ 592.769886][T13100] syz_tun: entered allmulticast mode [ 592.782178][T13097] syz_tun: left allmulticast mode [ 593.447426][T13121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.648756][T13127] syz_tun: entered allmulticast mode [ 593.749696][ T7966] hsr_slave_0: left promiscuous mode [ 593.786004][ T7966] hsr_slave_1: left promiscuous mode [ 593.786990][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.787014][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.838977][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.839004][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.968449][ T7966] veth0_macvtap: left promiscuous mode [ 593.968735][ T7966] veth1_vlan: left promiscuous mode [ 593.968919][ T7966] veth0_vlan: left promiscuous mode [ 596.356424][ T7966] team0 (unregistering): Port device team_slave_1 removed [ 596.567595][ T7966] team0 (unregistering): Port device team_slave_0 removed [ 598.790984][T13126] syz_tun: left allmulticast mode [ 598.887039][T13149] syz.5.2496 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 600.163933][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 600.569610][T13176] syz_tun: entered allmulticast mode [ 600.575819][T13173] syz_tun: left allmulticast mode [ 600.672320][T12710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.769117][T12710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.906403][T13179] bond3: option downdelay: invalid value (18446744073709551615) [ 600.906427][T13179] bond3: option downdelay: allowed values 0 - 2147483647 [ 600.955374][T13179] bond3 (unregistering): Released all slaves [ 601.066756][T12710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 601.170670][T12710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 601.274477][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2511'. [ 601.503640][T13200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2513'. [ 601.571751][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'. [ 601.612965][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2514'. [ 602.085318][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2515'. [ 602.683338][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 602.913882][T13212] team0: Port device team_slave_1 removed [ 603.292357][T12710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.322468][T12710] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.372748][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.391494][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.493966][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.495864][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.668425][T12710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 603.668459][T12710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.899669][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2535'. [ 603.899799][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2535'. [ 603.922156][T13260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2536'. [ 604.242457][T12710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.344652][T12710] veth0_vlan: entered promiscuous mode [ 604.390865][T12710] veth1_vlan: entered promiscuous mode [ 604.479267][T12710] veth0_macvtap: entered promiscuous mode [ 604.502665][T12710] veth1_macvtap: entered promiscuous mode [ 604.542359][T12710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.583597][T12710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.663172][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.663407][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.663619][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.664480][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.186668][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.186687][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.350257][ T8102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.350278][ T8102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.069945][T13307] 9pnet_fd: Insufficient options for proto=fd [ 606.497781][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2363'. [ 607.018604][ T5998] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 607.179064][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2554'. [ 607.241384][ T5998] usb 4-1: Using ep0 maxpacket: 16 [ 607.243364][ T5998] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.243388][ T5998] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.243423][ T5998] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 607.243549][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.315919][ T5998] usb 4-1: config 0 descriptor?? [ 607.607885][T13335] 9pnet_fd: Insufficient options for proto=fd [ 608.041417][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 608.550360][ T37] audit: type=1326 audit(1764102003.773:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 608.551802][ T37] audit: type=1326 audit(1764102003.773:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 608.553218][ T37] audit: type=1326 audit(1764102003.773:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 608.555087][ T37] audit: type=1326 audit(1764102003.773:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 608.555140][ T37] audit: type=1326 audit(1764102003.773:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 608.555181][ T37] audit: type=1326 audit(1764102003.773:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 608.555220][ T37] audit: type=1326 audit(1764102003.773:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 608.555260][ T37] audit: type=1326 audit(1764102003.773:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13355 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 609.143224][ T5939] usb 4-1: USB disconnect, device number 9 [ 609.202765][T13353] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 609.203183][T13353] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 609.346240][T13377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 609.446271][T13353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 609.446416][T13353] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 609.626375][T13353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 609.626468][T13353] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 609.796260][T13353] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 609.796350][T13353] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 609.980231][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2586'. [ 610.116710][T13353] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 610.116823][T13353] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 610.131416][T13396] lo speed is unknown, defaulting to 1000 [ 610.289372][T13353] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 610.296928][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2588'. [ 610.384478][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2590'. [ 610.384656][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2590'. [ 610.414274][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2591'. [ 610.580035][T13411] 9pnet_fd: Insufficient options for proto=fd [ 610.615705][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 611.070866][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 611.496701][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 611.698617][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 611.840422][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 611.940654][T13459] lo speed is unknown, defaulting to 1000 [ 612.135777][ T5806] Bluetooth: hci4: command 0x0c1a tx timeout [ 612.695800][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 612.915780][ T5998] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 613.069942][ T5998] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 613.069971][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.102413][ T5998] usb 3-1: config 0 descriptor?? [ 613.274979][ T5998] gspca_main: sunplus-2.14.0 probing 041e:400b [ 613.601168][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 613.736077][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 613.775931][ T5998] gspca_sunplus: reg_w_riv err -110 [ 613.775992][ T5998] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 613.836852][T13490] __nla_validate_parse: 4 callbacks suppressed [ 613.836870][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2623'. [ 613.836887][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2623'. [ 613.899271][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 614.099977][T13498] netlink: 'syz.4.2626': attribute type 10 has an invalid length. [ 614.193546][T13496] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.193584][T13496] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.215885][ T5806] Bluetooth: hci4: command 0x0c1a tx timeout [ 614.342175][ T37] audit: type=1326 audit(1764102009.563:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13505 comm="syz.5.2630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aadf2f749 code=0x0 [ 614.413332][T13506] lo speed is unknown, defaulting to 1000 [ 614.468731][T13496] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.468754][T13496] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.805922][T13514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.865804][T13496] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.865840][T13496] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.945901][T13515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.999784][T13496] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.999821][T13496] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.190504][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 615.848879][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2637'. [ 616.298038][ T5806] Bluetooth: hci4: command 0x0c1a tx timeout [ 616.769278][ T69] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.769311][ T69] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.819695][ T69] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.819728][ T69] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.845507][ T5939] usb 3-1: USB disconnect, device number 10 [ 616.905808][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 616.994931][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.994961][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.055771][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 617.057761][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.057785][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.057821][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 617.057842][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.065389][ T10] usb 6-1: config 0 descriptor?? [ 617.238377][T13555] netlink: 'syz.1.2647': attribute type 1 has an invalid length. [ 617.324046][T13555] bond3: entered promiscuous mode [ 617.331841][T13555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.334183][ T69] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.334213][ T69] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.410864][T13555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.411380][T13555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.435226][ T37] audit: type=1326 audit(1764102012.653:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.435275][ T37] audit: type=1326 audit(1764102012.653:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.435316][ T37] audit: type=1326 audit(1764102012.653:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.438581][ T37] audit: type=1326 audit(1764102012.663:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.439274][ T37] audit: type=1326 audit(1764102012.663:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.452656][ T37] audit: type=1326 audit(1764102012.663:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.453986][ T37] audit: type=1326 audit(1764102012.673:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.486102][T13559] lo speed is unknown, defaulting to 1000 [ 617.573174][ T37] audit: type=1326 audit(1764102012.793:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.590155][ T37] audit: type=1326 audit(1764102012.813:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13560 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 617.721270][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 617.770736][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2651'. [ 618.384249][ T5939] usb 6-1: USB disconnect, device number 5 [ 618.613684][T13600] netlink: 'syz.2.2663': attribute type 2 has an invalid length. [ 618.684841][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 619.345486][T13622] lo speed is unknown, defaulting to 1000 [ 619.422915][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 619.422930][ T37] audit: type=1326 audit(1764102014.643:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13614 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 619.422973][ T37] audit: type=1326 audit(1764102014.643:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13614 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 619.773340][T13646] lo: entered allmulticast mode [ 619.773705][T13643] lo: left allmulticast mode [ 620.003537][ T37] audit: type=1326 audit(1764102015.223:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13655 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 620.027420][ T37] audit: type=1326 audit(1764102015.223:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13655 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 620.027476][ T37] audit: type=1326 audit(1764102015.243:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13657 comm="syz.4.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 620.031952][ T37] audit: type=1326 audit(1764102015.253:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13657 comm="syz.4.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 620.032004][ T37] audit: type=1326 audit(1764102015.253:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13657 comm="syz.4.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 620.032045][ T37] audit: type=1326 audit(1764102015.253:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13655 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 620.032085][ T37] audit: type=1326 audit(1764102015.253:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13657 comm="syz.4.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 620.032521][ T37] audit: type=1326 audit(1764102015.253:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13655 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 620.864162][T13680] Invalid ELF header type: 25773 != 1 [ 621.006207][T13676] ªªªªªª: renamed from wg2 (while UP) [ 621.643165][T13691] lo speed is unknown, defaulting to 1000 [ 621.950138][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'. [ 622.431184][T13708] Invalid ELF header type: 25773 != 1 [ 622.858618][ T5880] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 622.886229][T13725] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2715'. [ 622.886257][T13725] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2715'. [ 622.887768][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2715'. [ 622.887792][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2715'. [ 623.030541][ T5880] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 623.030570][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.065293][ T5880] usb 5-1: config 0 descriptor?? [ 623.082603][ T5880] gspca_main: sunplus-2.14.0 probing 041e:400b [ 623.503968][T13741] lo speed is unknown, defaulting to 1000 [ 623.748545][ T5880] gspca_sunplus: reg_w_riv err -110 [ 623.748612][ T5880] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 625.270421][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.270521][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.305309][ T37] kauditd_printk_skb: 109 callbacks suppressed [ 625.305321][ T37] audit: type=1326 audit(1764102020.523:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305349][ T37] audit: type=1326 audit(1764102020.523:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305372][ T37] audit: type=1326 audit(1764102020.523:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305393][ T37] audit: type=1326 audit(1764102020.523:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305416][ T37] audit: type=1326 audit(1764102020.523:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305437][ T37] audit: type=1326 audit(1764102020.523:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305464][ T37] audit: type=1326 audit(1764102020.523:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305486][ T37] audit: type=1326 audit(1764102020.523:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305509][ T37] audit: type=1326 audit(1764102020.523:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.305530][ T37] audit: type=1326 audit(1764102020.523:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 625.892192][T13764] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 626.002397][T13770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 626.002424][T13770] IPv6: NLM_F_CREATE should be set when creating new route [ 626.002441][T13770] IPv6: NLM_F_CREATE should be set when creating new route [ 626.002730][T13770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 626.425562][T13375] usb 5-1: USB disconnect, device number 5 [ 626.779629][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 626.807124][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 626.840767][T13785] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2735'. [ 626.958926][T13790] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2737'. [ 626.958953][T13790] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2737'. [ 627.242062][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 627.790019][T13813] Invalid ELF header type: 25773 != 1 [ 628.926847][T13842] tipc: Started in network mode [ 628.926876][T13842] tipc: Node identity ac14140f, cluster identity 4711 [ 628.934266][T13842] tipc: New replicast peer: 255.255.255.255 [ 628.983820][T13842] tipc: Enabled bearer , priority 10 [ 628.984502][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2759'. [ 628.984521][T13842] tipc: Disabling bearer [ 629.099138][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 629.161092][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 629.276297][T13855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2765'. [ 629.526095][T13866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2768'. [ 629.671088][T13857] batman_adv: batadv0: Adding interface: dummy0 [ 629.671113][T13857] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.671147][T13857] batman_adv: batadv0: Interface activated: dummy0 [ 629.692828][T13857] batadv0: mtu less than device minimum [ 629.721652][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.741028][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.745575][T13873] netlink: 'syz.1.2771': attribute type 39 has an invalid length. [ 629.750905][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.759814][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.768609][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.777321][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.787703][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.796437][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.804853][T13857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 630.240226][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 630.267158][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 630.979495][T13906] lo speed is unknown, defaulting to 1000 [ 630.989814][T13906] lo speed is unknown, defaulting to 1000 [ 630.993704][T13906] lo speed is unknown, defaulting to 1000 [ 631.977190][T13921] __nla_validate_parse: 2 callbacks suppressed [ 631.977209][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'. [ 632.087080][ T10] lo speed is unknown, defaulting to 1000 [ 632.094859][T13906] infiniband syz1: set active [ 632.094878][T13906] infiniband syz1: added lo [ 632.196852][T13906] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 632.204422][T13906] infiniband syz1: Couldn't open port 1 [ 632.241626][T13375] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 632.329053][T13906] RDS/IB: syz1: added [ 632.330067][T13906] smc: adding ib device syz1 with port count 1 [ 632.330338][T13906] smc: ib device syz1 port 1 has no pnetid [ 632.334357][ T5939] lo speed is unknown, defaulting to 1000 [ 632.385419][T13906] lo speed is unknown, defaulting to 1000 [ 632.395740][T13375] usb 2-1: Using ep0 maxpacket: 16 [ 632.403065][T13375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.403090][T13375] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.403134][T13375] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 632.403157][T13375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.517384][T13375] usb 2-1: config 0 descriptor?? [ 632.656789][T13930] netlink: 'syz.3.2793': attribute type 39 has an invalid length. [ 633.178901][T13906] lo speed is unknown, defaulting to 1000 [ 633.534732][T13906] lo speed is unknown, defaulting to 1000 [ 633.840519][T13906] lo speed is unknown, defaulting to 1000 [ 634.127313][ T5880] usb 2-1: USB disconnect, device number 11 [ 634.369058][T13906] lo speed is unknown, defaulting to 1000 [ 634.383843][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2803'. [ 634.611385][ T37] kauditd_printk_skb: 178 callbacks suppressed [ 634.611403][ T37] audit: type=1326 audit(1764102029.833:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.611449][ T37] audit: type=1326 audit(1764102029.833:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.613175][ T37] audit: type=1326 audit(1764102029.833:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.613221][ T37] audit: type=1326 audit(1764102029.833:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.613836][ T37] audit: type=1326 audit(1764102029.833:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.614545][ T37] audit: type=1326 audit(1764102029.833:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.635836][ T37] audit: type=1326 audit(1764102029.833:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.635887][ T37] audit: type=1326 audit(1764102029.853:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.635926][ T37] audit: type=1326 audit(1764102029.853:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 634.635964][ T37] audit: type=1326 audit(1764102029.853:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 635.661057][T13995] can0: slcan on ptm0. [ 635.848574][T13995] can0 (unregistered): slcan off ptm0. [ 636.314299][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2813'. [ 636.987575][ T5998] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 637.145762][ T5998] usb 3-1: Using ep0 maxpacket: 16 [ 637.147917][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.147940][ T5998] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.147977][ T5998] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 637.147998][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.207893][ T5998] usb 3-1: config 0 descriptor?? [ 637.661567][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2826'. [ 638.603565][ T5873] usb 3-1: USB disconnect, device number 11 [ 639.264677][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2838'. [ 639.359299][T14082] bond2: entered promiscuous mode [ 639.359830][T14082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 639.543128][T14080] lo speed is unknown, defaulting to 1000 [ 639.555289][T14080] lo speed is unknown, defaulting to 1000 [ 639.646619][T14094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.646918][T14094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.689316][T14098] netlink: 'syz.5.2843': attribute type 2 has an invalid length. [ 640.335993][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 640.336019][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 640.364605][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 640.364629][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 640.832069][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'. [ 641.797192][ T37] kauditd_printk_skb: 125 callbacks suppressed [ 641.797209][ T37] audit: type=1326 audit(1764102037.023:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 641.797489][ T37] audit: type=1326 audit(1764102037.023:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 641.797923][ T37] audit: type=1326 audit(1764102037.023:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59ade9df90 code=0x7ffc0000 [ 641.798555][ T37] audit: type=1326 audit(1764102037.023:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 641.798812][ T37] audit: type=1326 audit(1764102037.023:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 641.799196][ T37] audit: type=1326 audit(1764102037.023:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 641.805797][ T5880] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 641.975733][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 641.977513][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.977536][ T5880] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.977572][ T5880] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.977593][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.135127][ T5880] usb 4-1: config 0 descriptor?? [ 642.613322][ T37] audit: type=1326 audit(1764102037.833:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 642.613604][ T37] audit: type=1326 audit(1764102037.833:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 642.806969][T12714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 642.811820][T12714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 642.813132][T12714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.814660][T12714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.815425][T12714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 642.823051][ T37] audit: type=1326 audit(1764102038.043:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 642.823390][ T37] audit: type=1326 audit(1764102038.043:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.4.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade9f749 code=0x7ffc0000 [ 642.849026][T14139] Invalid ELF header type: 25773 != 1 [ 644.507288][ T5998] usb 4-1: USB disconnect, device number 10 [ 644.725801][T14152] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2861'. [ 644.725824][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2861'. [ 644.761834][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2859'. [ 644.935741][ T5806] Bluetooth: hci3: command tx timeout [ 645.383648][ T7966] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.383679][ T7966] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.408498][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 645.545243][T14134] lo speed is unknown, defaulting to 1000 [ 645.574921][T14134] lo speed is unknown, defaulting to 1000 [ 645.632209][ T7966] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.632244][ T7966] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.912747][ T7966] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.912787][ T7966] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.189725][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2882'. [ 646.242927][T14207] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2882'. [ 646.260671][T14202] bond3: entered promiscuous mode [ 646.263128][T14202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 646.315370][ T7966] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.315404][ T7966] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.814649][ T37] kauditd_printk_skb: 77 callbacks suppressed [ 646.814667][ T37] audit: type=1326 audit(1764102042.033:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.814947][ T37] audit: type=1326 audit(1764102042.033:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.818544][ T37] audit: type=1326 audit(1764102042.033:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.827531][ T37] audit: type=1326 audit(1764102042.043:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.827578][ T37] audit: type=1326 audit(1764102042.053:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.827616][ T37] audit: type=1326 audit(1764102042.053:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.827654][ T37] audit: type=1326 audit(1764102042.053:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.827691][ T37] audit: type=1326 audit(1764102042.053:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.827727][ T37] audit: type=1326 audit(1764102042.053:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 646.827767][ T37] audit: type=1326 audit(1764102042.053:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff46673f749 code=0x7ffc0000 [ 647.015732][ T5806] Bluetooth: hci3: command tx timeout [ 647.601593][T14238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2894'. [ 647.603226][T14134] chnl_net:caif_netlink_parms(): no params data found [ 647.916508][ T7966] bridge_slave_1: left allmulticast mode [ 647.916536][ T7966] bridge_slave_1: left promiscuous mode [ 647.916773][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.964663][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2898'. [ 647.996661][ T7966] : left allmulticast mode [ 647.996679][ T7966] : left promiscuous mode [ 647.996863][ T7966] bridge0: port 1() entered disabled state [ 648.021428][T14251] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2898'. [ 648.895839][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 649.049016][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 649.049037][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.057786][ T10] usb 4-1: config 0 descriptor?? [ 649.094111][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 649.098089][ T5806] Bluetooth: hci3: command tx timeout [ 649.616005][ T10] gspca_sunplus: reg_w_riv err -110 [ 649.616068][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 650.756228][ T7966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.826635][ T7966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.886261][ T7966] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 650.911164][ T7966] bond0 (unregistering): Released all slaves [ 650.924685][ T7966] bond1 (unregistering): Released all slaves [ 651.175760][ T5806] Bluetooth: hci3: command tx timeout [ 651.557549][T13375] usb 4-1: USB disconnect, device number 11 [ 651.869732][ T7966] bond2 (unregistering): Released all slaves [ 651.953327][T14271] Invalid ELF header type: 25773 != 1 [ 653.521274][ T7966] bond3 (unregistering): Released all slaves [ 653.705117][ T37] kauditd_printk_skb: 180 callbacks suppressed [ 653.705134][ T37] audit: type=1326 audit(1764102048.923:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.705288][ T37] audit: type=1326 audit(1764102048.923:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.706212][ T37] audit: type=1326 audit(1764102048.923:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa06f37df90 code=0x7ffc0000 [ 653.735125][T14249] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 653.783465][ T37] audit: type=1326 audit(1764102049.003:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.783519][ T37] audit: type=1326 audit(1764102049.003:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.825732][ T37] audit: type=1326 audit(1764102049.033:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.825786][ T37] audit: type=1326 audit(1764102049.033:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.829321][ T37] audit: type=1326 audit(1764102049.053:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.830127][ T37] audit: type=1326 audit(1764102049.053:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 653.830430][ T37] audit: type=1326 audit(1764102049.053:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14274 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 654.748034][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 654.749140][T14301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2915'. [ 654.862477][T14134] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.863549][T14134] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.863777][T14134] bridge_slave_0: entered allmulticast mode [ 654.890043][T14134] bridge_slave_0: entered promiscuous mode [ 654.902987][T14134] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.903176][T14134] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.903375][T14134] bridge_slave_1: entered allmulticast mode [ 654.928609][T14134] bridge_slave_1: entered promiscuous mode [ 655.079976][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 655.132473][T14308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2917'. [ 655.929308][T14307] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 656.195217][T14134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.301037][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'. [ 656.305519][T14330] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2925'. [ 656.332310][T14134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.962916][T14134] team0: Port device team_slave_0 added [ 657.014622][T14134] team0: Port device team_slave_1 added [ 657.462443][ T7966] hsr_slave_0: left promiscuous mode [ 657.662259][ T7966] hsr_slave_1: left promiscuous mode [ 657.663190][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.663214][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.779907][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.779935][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.291027][ T7966] veth0_macvtap: left promiscuous mode [ 659.056151][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 659.057300][T14391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2947'. [ 661.164325][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 661.176320][T14423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2959'. [ 662.831557][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 662.832667][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 664.216310][T14464] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2976'. [ 664.271129][ T37] kauditd_printk_skb: 209 callbacks suppressed [ 664.271146][ T37] audit: type=1326 audit(1764102059.493:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.271349][ T37] audit: type=1326 audit(1764102059.493:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.271497][ T37] audit: type=1326 audit(1764102059.493:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.271681][ T37] audit: type=1326 audit(1764102059.493:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.271832][ T37] audit: type=1326 audit(1764102059.493:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.272024][ T37] audit: type=1326 audit(1764102059.493:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.272162][ T37] audit: type=1326 audit(1764102059.493:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.272328][ T37] audit: type=1326 audit(1764102059.493:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.273796][ T37] audit: type=1326 audit(1764102059.493:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.273842][ T37] audit: type=1326 audit(1764102059.493:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14463 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 664.304729][ T7966] team0 (unregistering): Port device team_slave_0 removed [ 664.393414][T14469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'. [ 665.289694][T14471] slcan: can't register candev [ 665.290399][T14471] Falling back ldisc for ptm0. [ 666.894285][T14134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.894301][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.894327][T14134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.942046][T14134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.942061][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.942086][T14134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.986326][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 667.251097][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2981'. [ 667.319659][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2981'. [ 668.666936][T14504] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2989'. [ 668.718692][T14134] hsr_slave_0: entered promiscuous mode [ 668.726593][T14134] hsr_slave_1: entered promiscuous mode [ 668.968520][T14524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2992'. [ 669.295925][T14518] lo: Caught tx_queue_len zero misconfig [ 669.511867][T14524] veth3: entered allmulticast mode [ 669.524564][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2995'. [ 669.524588][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2995'. [ 669.541789][T14533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2995'. [ 669.541817][T14533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2995'. [ 669.603625][T14537] can0: slcan on ptm0. [ 669.891298][T14553] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3002'. [ 669.950994][ T37] kauditd_printk_skb: 517 callbacks suppressed [ 669.951022][ T37] audit: type=1326 audit(1764102065.143:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951072][ T37] audit: type=1326 audit(1764102065.153:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951113][ T37] audit: type=1326 audit(1764102065.153:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951155][ T37] audit: type=1326 audit(1764102065.153:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951197][ T37] audit: type=1326 audit(1764102065.153:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951238][ T37] audit: type=1326 audit(1764102065.153:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951279][ T37] audit: type=1326 audit(1764102065.153:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951320][ T37] audit: type=1326 audit(1764102065.153:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951360][ T37] audit: type=1326 audit(1764102065.153:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 669.951401][ T37] audit: type=1326 audit(1764102065.153:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14552 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 670.356638][T14540] can0 (unregistered): slcan off ptm0. [ 670.652491][ T7966] IPVS: stop unused estimator thread 0... [ 671.478311][T14601] netlink: 'syz.2.3017': attribute type 39 has an invalid length. [ 676.075280][T14632] lo speed is unknown, defaulting to 1000 [ 676.078507][T14632] lo speed is unknown, defaulting to 1000 [ 677.202429][T14134] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 677.311727][T14134] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.379736][T14134] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.429866][T14134] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 677.493400][T14698] __nla_validate_parse: 6 callbacks suppressed [ 677.493420][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3034'. [ 677.493438][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3034'. [ 677.494664][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3034'. [ 677.494685][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3034'. [ 677.709187][T14134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.392186][T14134] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.440997][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.441302][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.522637][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.522808][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.772662][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3044'. [ 679.095737][T14134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.178817][T14744] syz_tun: entered allmulticast mode [ 679.247464][T14134] veth0_vlan: entered promiscuous mode [ 679.267831][T14134] veth1_vlan: entered promiscuous mode [ 679.331276][T14134] veth0_macvtap: entered promiscuous mode [ 679.348654][T14134] veth1_macvtap: entered promiscuous mode [ 679.378861][T14134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.401724][T14134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.446991][ T1503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.448069][ T1503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.449328][ T1503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.449759][ T1503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.860118][T14755] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 679.925003][ T1542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.925024][ T1542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.979162][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 680.235803][T14761] bridge_slave_1: left allmulticast mode [ 680.235832][T14761] bridge_slave_1: left promiscuous mode [ 680.236102][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.297672][T14761] : left allmulticast mode [ 680.297701][T14761] : left promiscuous mode [ 680.297996][T14761] bridge0: port 1() entered disabled state [ 680.761551][T14758] lo speed is unknown, defaulting to 1000 [ 680.764333][ T7966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.764340][T14758] lo speed is unknown, defaulting to 1000 [ 680.764351][ T7966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.200549][T14786] netlink: 'syz.1.2853': attribute type 12 has an invalid length. [ 682.506693][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3064'. [ 682.969908][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'. [ 683.846232][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 684.081388][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 684.081418][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.107942][ T10] usb 2-1: config 0 descriptor?? [ 684.170042][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 684.736489][ T10] gspca_sunplus: reg_w_riv err -110 [ 684.736611][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 685.658758][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3076'. [ 685.935999][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.936075][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.838929][T12714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.855418][T12714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.857386][T12714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.872856][T12714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.874479][T12714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.986396][T14838] lo speed is unknown, defaulting to 1000 [ 686.991589][T14838] lo speed is unknown, defaulting to 1000 [ 687.193829][ T5873] usb 2-1: USB disconnect, device number 12 [ 687.691905][ T1503] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.691938][ T1503] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.942654][ T1503] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.942687][ T1503] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.770337][ T1503] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.770369][ T1503] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.806120][ T5998] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 688.966309][T12714] Bluetooth: hci0: command tx timeout [ 688.991168][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'. [ 688.991194][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'. [ 688.991787][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'. [ 688.991806][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'. [ 689.075440][ T5998] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 689.075458][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.144448][ T5998] usb 4-1: config 0 descriptor?? [ 689.188872][ T5998] gspca_main: sunplus-2.14.0 probing 041e:400b [ 689.290301][ T1503] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.290341][ T1503] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.723146][ T5998] gspca_sunplus: reg_w_riv err -110 [ 689.723248][ T5998] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 689.910395][T14892] can0: slcan on ptm0. [ 690.586363][T14892] can0 (unregistered): slcan off ptm0. [ 691.015742][ T5806] Bluetooth: hci0: command tx timeout [ 691.656528][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'. [ 692.075385][ T31] usb 4-1: USB disconnect, device number 12 [ 692.764912][T14955] netlink: 'syz.1.3124': attribute type 39 has an invalid length. [ 693.050617][T14961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3126'. [ 693.096385][ T5806] Bluetooth: hci0: command tx timeout [ 694.786357][ T1503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.846530][ T1503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.906482][ T1503] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 694.946734][ T1503] bond0 (unregistering): Released all slaves [ 695.185535][ T5806] Bluetooth: hci0: command tx timeout [ 695.727765][ T1503] bond1 (unregistering): Released all slaves [ 695.807115][T14924] hsr_slave_0: left promiscuous mode [ 695.835770][T14924] hsr_slave_1: left promiscuous mode [ 696.756853][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 696.758877][T14838] chnl_net:caif_netlink_parms(): no params data found [ 696.857024][T14992] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3136'. [ 697.361147][ T37] kauditd_printk_skb: 98 callbacks suppressed [ 697.361164][ T37] audit: type=1326 audit(1764102092.583:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.361208][ T37] audit: type=1326 audit(1764102092.583:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429465][ T37] audit: type=1326 audit(1764102092.653:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429516][ T37] audit: type=1326 audit(1764102092.653:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429554][ T37] audit: type=1326 audit(1764102092.653:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429593][ T37] audit: type=1326 audit(1764102092.653:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429631][ T37] audit: type=1326 audit(1764102092.653:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429671][ T37] audit: type=1326 audit(1764102092.653:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429719][ T37] audit: type=1326 audit(1764102092.653:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.429757][ T37] audit: type=1326 audit(1764102092.653:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 697.738307][T14975] warn_alloc: 1 callbacks suppressed [ 697.738325][T14975] syz.5.3130: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 697.738419][T14975] CPU: 1 UID: 0 PID: 14975 Comm: syz.5.3130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 697.738449][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.738465][T14975] Call Trace: [ 697.738474][T14975] [ 697.738483][T14975] dump_stack_lvl+0x189/0x250 [ 697.738520][T14975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.738548][T14975] ? __pfx__printk+0x10/0x10 [ 697.738573][T14975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 697.738596][T14975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 697.738620][T14975] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 697.738645][T14975] warn_alloc+0x22e/0x3b0 [ 697.738681][T14975] ? __pfx_warn_alloc+0x10/0x10 [ 697.738719][T14975] ? __get_vm_area_node+0x2bc/0x350 [ 697.738745][T14975] ? hash_netiface_create+0x354/0xf90 [ 697.738777][T14975] __vmalloc_node_range_noprof+0x690/0x12d0 [ 697.738804][T14975] ? alloc_vmap_area+0xda0/0x14c0 [ 697.738849][T14975] ? __kasan_kmalloc+0x93/0xb0 [ 697.738881][T14975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 697.738905][T14975] ? hash_netiface_create+0x354/0xf90 [ 697.738933][T14975] ? __get_vm_area_node+0x2bc/0x350 [ 697.738959][T14975] ? hash_netiface_create+0x354/0xf90 [ 697.738986][T14975] __vmalloc_node_range_noprof+0x578/0x12d0 [ 697.739013][T14975] ? hash_netiface_create+0x354/0xf90 [ 697.739039][T14975] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 697.739096][T14975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 697.739127][T14975] ? rcu_is_watching+0x15/0xb0 [ 697.739149][T14975] __kvmalloc_node_noprof+0x4a3/0x920 [ 697.739176][T14975] ? hash_netiface_create+0x354/0xf90 [ 697.739199][T14975] ? __kmalloc_cache_noprof+0x1ef/0x6c0 [ 697.739222][T14975] ? hash_netiface_create+0x354/0xf90 [ 697.739254][T14975] hash_netiface_create+0x354/0xf90 [ 697.739289][T14975] ? __nla_parse+0x40/0x60 [ 697.739318][T14975] ? __pfx_hash_netiface_create+0x10/0x10 [ 697.739344][T14975] ip_set_create+0xa9c/0x1940 [ 697.739371][T14975] ? ip_set_create+0x4a7/0x1940 [ 697.739412][T14975] ? __pfx_ip_set_create+0x10/0x10 [ 697.739486][T14975] nfnetlink_rcv_msg+0xb69/0x1150 [ 697.739506][T14975] ? nfnetlink_rcv_msg+0x212/0x1150 [ 697.739546][T14975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 697.739563][T14975] ? kasan_save_track+0x4f/0x80 [ 697.739628][T14975] ? __local_bh_enable+0x27b/0x410 [ 697.739661][T14975] netlink_rcv_skb+0x208/0x470 [ 697.739683][T14975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 697.739703][T14975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.739736][T14975] ? bpf_lsm_capable+0x9/0x20 [ 697.739756][T14975] ? security_capable+0x7e/0x2e0 [ 697.739790][T14975] nfnetlink_rcv+0x282/0x2590 [ 697.739828][T14975] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 697.739865][T14975] ? __dev_queue_xmit+0x26f/0x3b70 [ 697.739907][T14975] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 697.739939][T14975] ? __pfx___dev_queue_xmit+0x10/0x10 [ 697.739976][T14975] ? ref_tracker_free+0x61e/0x7c0 [ 697.740004][T14975] ? __asan_memcpy+0x40/0x70 [ 697.740027][T14975] ? __pfx_ref_tracker_free+0x10/0x10 [ 697.740051][T14975] ? __skb_clone+0x63/0x7a0 [ 697.740081][T14975] ? __skb_clone+0x483/0x7a0 [ 697.740111][T14975] ? skb_clone+0x246/0x3a0 [ 697.740139][T14975] ? __netlink_deliver_tap+0x807/0x850 [ 697.740161][T14975] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.740190][T14975] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.740222][T14975] netlink_unicast+0x846/0xa10 [ 697.740251][T14975] ? __pfx_netlink_unicast+0x10/0x10 [ 697.740273][T14975] ? netlink_sendmsg+0x642/0xb30 [ 697.740292][T14975] ? skb_put+0x11b/0x210 [ 697.740318][T14975] netlink_sendmsg+0x805/0xb30 [ 697.740349][T14975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.740379][T14975] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.740407][T14975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.740435][T14975] __sock_sendmsg+0x21c/0x270 [ 697.740468][T14975] ____sys_sendmsg+0x508/0x820 [ 697.740498][T14975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.740533][T14975] ? import_iovec+0x74/0xa0 [ 697.740560][T14975] ___sys_sendmsg+0x21f/0x2a0 [ 697.740587][T14975] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.740655][T14975] ? __fget_files+0x2a/0x420 [ 697.740681][T14975] ? __fget_files+0x3a6/0x420 [ 697.740720][T14975] __x64_sys_sendmsg+0x1a1/0x260 [ 697.740749][T14975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.740792][T14975] ? do_syscall_64+0xbe/0xfa0 [ 697.740827][T14975] do_syscall_64+0xfa/0xfa0 [ 697.740853][T14975] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.740881][T14975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.740901][T14975] ? clear_bhb_loop+0x60/0xb0 [ 697.740924][T14975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.740944][T14975] RIP: 0033:0x7f4aadf2f749 [ 697.740963][T14975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.740981][T14975] RSP: 002b:00007f4aac18e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.741002][T14975] RAX: ffffffffffffffda RBX: 00007f4aae185fa0 RCX: 00007f4aadf2f749 [ 697.741017][T14975] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 697.741031][T14975] RBP: 00007f4aadfb3f91 R08: 0000000000000000 R09: 0000000000000000 [ 697.741045][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.741057][T14975] R13: 00007f4aae186038 R14: 00007f4aae185fa0 R15: 00007ffdf81794d8 [ 697.741094][T14975] [ 697.741110][T14975] Mem-Info: [ 697.741119][T14975] active_anon:264 inactive_anon:6862 isolated_anon:0 [ 697.741119][T14975] active_file:17835 inactive_file:37035 isolated_file:0 [ 697.741119][T14975] unevictable:768 dirty:116 writeback:0 [ 697.741119][T14975] slab_reclaimable:7063 slab_unreclaimable:105325 [ 697.741119][T14975] mapped:29523 shmem:1363 pagetables:1692 [ 697.741119][T14975] sec_pagetables:0 bounce:0 [ 697.741119][T14975] kernel_misc_reclaimable:0 [ 697.741119][T14975] free:1284927 free_pcp:8056 free_cma:0 [ 697.741180][T14975] Node 0 active_anon:1056kB inactive_anon:27448kB active_file:71136kB inactive_file:148140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118092kB dirty:464kB writeback:0kB shmem:3916kB kernel_stack:12928kB pagetables:6608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 697.741229][T14975] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 697.741274][T14975] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.741335][T14975] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 697.741370][T14975] Node 0 DMA32 free:1219820kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1056kB inactive_anon:27448kB active_file:71136kB inactive_file:148140kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2576076kB mlocked:0kB bounce:0kB free_pcp:32212kB local_pcp:27960kB free_cma:0kB [ 697.741460][T14975] lowmem_reserve[]: 0 0 1 1 1 [ 697.741493][T14975] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.741554][T14975] lowmem_reserve[]: 0 0 0 0 0 [ 697.741587][T14975] Node 1 Normal free:3904528kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.741651][T14975] lowmem_reserve[]: 0 0 0 0 0 [ 697.741683][T14975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 697.741806][T14975] Node 0 DMA32: 1332*4kB (UME) 375*8kB (ME) 159*16kB (UME) 223*32kB (ME) 81*64kB (ME) 114*128kB (UME) 547*256kB (UME) 363*512kB (UME) 160*1024kB (UME) 10*2048kB (UME) 164*4096kB (M) = 1219736kB [ 697.741968][T14975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 697.742068][T14975] Node 1 Normal: 206*4kB (UE) 49*8kB (UME) 35*16kB (UME) 215*32kB (UME) 87*64kB (UME) 29*128kB (UME) 10*256kB (UME) 10*512kB (UME) 2*1024kB (UM) 3*2048kB (ME) 945*4096kB (M) = 3904528kB [ 697.742229][T14975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.742247][T14975] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 697.742265][T14975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.742282][T14975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.742299][T14975] 56229 total pagecache pages [ 697.742311][T14975] 0 pages in swap cache [ 697.742318][T14975] Free swap = 124996kB [ 697.742326][T14975] Total swap = 124996kB [ 697.742334][T14975] 2097051 pages RAM [ 697.742341][T14975] 0 pages HighMem/MovableOnly [ 697.742349][T14975] 421006 pages reserved [ 697.742356][T14975] 0 pages cma reserved [ 698.160700][T15026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3147'. [ 698.530765][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'. [ 699.153857][T14838] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.153992][T14838] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.154213][T14838] bridge_slave_0: entered allmulticast mode [ 699.157955][T14838] bridge_slave_0: entered promiscuous mode [ 699.366449][ T1503] hsr_slave_0: left promiscuous mode [ 699.427494][ T1503] hsr_slave_1: left promiscuous mode [ 699.428464][ T1503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.428487][ T1503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.506683][ T1503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.506708][ T1503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.636703][T15053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.636744][T15053] IPv6: NLM_F_CREATE should be set when creating new route [ 699.637611][T15053] IPv6: NLM_F_CREATE should be set when creating new route [ 699.638108][T15053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.781624][ T1503] veth0_macvtap: left promiscuous mode [ 699.781904][ T1503] veth1_vlan: left promiscuous mode [ 699.782087][ T1503] veth0_vlan: left promiscuous mode [ 702.657068][ T1503] team0 (unregistering): Port device team_slave_1 removed [ 702.856388][ T1503] team0 (unregistering): Port device team_slave_0 removed [ 705.136712][T14838] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.136789][T14838] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.136951][T14838] bridge_slave_1: entered allmulticast mode [ 705.138545][T14838] bridge_slave_1: entered promiscuous mode [ 705.139892][T15048] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 705.143677][T15050] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 705.170750][T15053] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 705.208979][T15083] netlink: 'syz.5.3163': attribute type 12 has an invalid length. [ 705.434603][T15093] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3166'. [ 705.510823][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 705.821035][T15114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 705.821077][T15114] IPv6: NLM_F_CREATE should be set when creating new route [ 705.821118][T15114] IPv6: NLM_F_CREATE should be set when creating new route [ 705.821584][T15114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.215316][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 706.215334][ T37] audit: type=1326 audit(1764102101.433:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.216715][ T37] audit: type=1326 audit(1764102101.433:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.230335][ T37] audit: type=1326 audit(1764102101.453:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.233997][ T37] audit: type=1326 audit(1764102101.453:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.235239][ T37] audit: type=1326 audit(1764102101.453:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.235524][ T37] audit: type=1326 audit(1764102101.453:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.237305][ T37] audit: type=1326 audit(1764102101.463:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.237765][ T37] audit: type=1326 audit(1764102101.463:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.238033][ T37] audit: type=1326 audit(1764102101.463:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.238454][ T37] audit: type=1326 audit(1764102101.463:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 706.457916][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3170'. [ 706.457947][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3170'. [ 706.458519][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3170'. [ 706.458541][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3170'. [ 706.569515][T15114] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 706.599708][T14838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.600364][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 706.634801][T14838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.778870][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 706.803082][ T31] usb 6-1: config 0 has an invalid interface number: 94 but max is 0 [ 706.803109][ T31] usb 6-1: config 0 has no interface number 0 [ 706.803158][ T31] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 706.803180][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.812098][ T31] usb 6-1: config 0 descriptor?? [ 706.878374][ T31] bfusb 6-1:0.94: probe with driver bfusb failed with error -5 [ 706.924146][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'. [ 706.945437][T14838] team0: Port device team_slave_0 added [ 706.966469][T14838] team0: Port device team_slave_1 added [ 707.300005][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3189'. [ 707.300034][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3189'. [ 707.349814][T14838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.349830][T14838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.349856][T14838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.350665][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3189'. [ 707.350687][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3189'. [ 707.440428][T14838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.440444][T14838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.440469][T14838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.605352][ T5873] usb 6-1: USB disconnect, device number 6 [ 707.919600][T15173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 707.919889][T15173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.012652][T15167] bond3: entered promiscuous mode [ 708.013214][T15167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.095439][T15170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.102864][T15170] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 708.104115][T15170] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 708.241878][T14838] hsr_slave_0: entered promiscuous mode [ 708.242857][T14838] hsr_slave_1: entered promiscuous mode [ 708.243514][T14838] debugfs: 'hsr0' already exists in 'hsr' [ 708.243535][T14838] Cannot create hsr debugfs directory [ 708.288583][T15173] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 708.290358][T15173] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 711.228155][T15250] team0: Port device vlan2 added [ 711.295760][ T5873] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 711.462449][ T5873] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 711.462479][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.466418][ T5873] usb 3-1: config 0 descriptor?? [ 711.508177][ T5873] gspca_main: sunplus-2.14.0 probing 041e:400b [ 711.751248][T15266] __nla_validate_parse: 2 callbacks suppressed [ 711.751268][T15266] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3227'. [ 712.016006][ T5873] gspca_sunplus: reg_w_riv err -110 [ 712.016107][ T5873] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 712.118275][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3226'. [ 712.118302][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3226'. [ 712.166641][T15269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3226'. [ 712.166658][T15269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3226'. [ 712.992687][T15285] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3233'. [ 713.118764][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 713.118781][ T37] audit: type=1326 audit(1764102108.343:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.118823][ T37] audit: type=1326 audit(1764102108.343:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.223491][ T37] audit: type=1326 audit(1764102108.413:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.226013][ T37] audit: type=1326 audit(1764102108.413:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.226053][ T37] audit: type=1326 audit(1764102108.413:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.226083][ T37] audit: type=1326 audit(1764102108.413:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.226113][ T37] audit: type=1326 audit(1764102108.413:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.238595][ T37] audit: type=1326 audit(1764102108.453:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.238642][ T37] audit: type=1326 audit(1764102108.453:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.238681][ T37] audit: type=1326 audit(1764102108.453:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aadf2f749 code=0x7ffc0000 [ 713.661820][T15301] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3237'. [ 713.714651][T14838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 713.755836][T14838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 714.084837][T14838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 716.635790][T14838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.696941][T15315] 9pnet_fd: Insufficient options for proto=fd [ 716.830535][ T5939] usb 3-1: USB disconnect, device number 12 [ 717.250159][T14838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.352383][T14838] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.374605][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.374755][ T8102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.424017][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.424157][ T7966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.450118][T15348] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3249'. [ 717.620057][T14838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 718.305853][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 718.461797][T14838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.526757][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 718.526785][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.532537][ T10] usb 2-1: config 0 descriptor?? [ 718.563893][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 719.076342][ T10] gspca_sunplus: reg_w_riv err -110 [ 719.076439][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 719.208079][T15387] lo speed is unknown, defaulting to 1000 [ 719.212754][T15393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3262'. [ 719.212777][T15393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3262'. [ 719.235720][T15393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3262'. [ 719.235745][T15393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3262'. [ 719.280543][T15387] lo speed is unknown, defaulting to 1000 [ 719.295900][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3261'. [ 720.610417][T14838] veth0_vlan: entered promiscuous mode [ 720.702796][T14838] veth1_vlan: entered promiscuous mode [ 720.998311][T14838] veth0_macvtap: entered promiscuous mode [ 721.041377][T14838] veth1_macvtap: entered promiscuous mode [ 721.107160][T14838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.192816][T14838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.248184][ T1398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.253006][ T1398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.253524][ T1398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.253561][ T1398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.321883][ T5880] usb 2-1: USB disconnect, device number 13 [ 722.065844][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3273'. [ 722.671750][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.671770][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.626880][T15486] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3284'. [ 723.682865][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 723.682882][ T37] audit: type=1326 audit(1764102118.903:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 723.682922][ T37] audit: type=1326 audit(1764102118.903:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 723.744436][ T37] audit: type=1326 audit(1764102118.963:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 723.747416][ T37] audit: type=1326 audit(1764102118.963:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 723.789151][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.789170][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.249297][T15507] netlink: 'syz.4.3074': attribute type 12 has an invalid length. [ 724.500221][ T37] audit: type=1326 audit(1764102119.723:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb42f749 code=0x7ffc0000 [ 724.500271][ T37] audit: type=1326 audit(1764102119.723:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb42f749 code=0x7ffc0000 [ 724.504432][ T37] audit: type=1326 audit(1764102119.723:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb42f749 code=0x7ffc0000 [ 724.505176][ T37] audit: type=1326 audit(1764102119.723:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb42f749 code=0x7ffc0000 [ 724.505221][ T37] audit: type=1326 audit(1764102119.723:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f82bb42f749 code=0x7ffc0000 [ 724.505260][ T37] audit: type=1326 audit(1764102119.723:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15511 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb42f749 code=0x7ffc0000 [ 724.945984][T15522] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3296'. [ 725.065360][T12714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.080135][T12714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.081518][T12714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.082971][T12714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.083689][T12714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 725.697174][T15524] lo speed is unknown, defaulting to 1000 [ 725.786369][T15524] lo speed is unknown, defaulting to 1000 [ 725.959591][T15551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3308'. [ 727.189800][ T5806] Bluetooth: hci2: command tx timeout [ 727.217643][ T1542] nci: nci_rsp_packet: unknown rsp opcode 0x24 [ 727.793870][T15524] chnl_net:caif_netlink_parms(): no params data found [ 727.958486][T15593] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 728.894188][T15592] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 728.894212][T15592] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 729.225938][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.226120][T15524] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.226356][T15524] bridge_slave_0: entered allmulticast mode [ 729.231914][T15524] bridge_slave_0: entered promiscuous mode [ 729.255763][ T5806] Bluetooth: hci2: command tx timeout [ 729.461238][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.461369][T15524] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.461583][T15524] bridge_slave_1: entered allmulticast mode [ 729.464060][T15524] bridge_slave_1: entered promiscuous mode [ 729.471861][T15592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 729.471880][T15592] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 729.700955][ T37] kauditd_printk_skb: 258 callbacks suppressed [ 729.700973][ T37] audit: type=1326 audit(1764102124.923:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.701086][ T37] audit: type=1326 audit(1764102124.923:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.701265][ T37] audit: type=1326 audit(1764102124.923:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.701683][ T37] audit: type=1326 audit(1764102124.923:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.701857][ T37] audit: type=1326 audit(1764102124.923:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.702196][ T37] audit: type=1326 audit(1764102124.923:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.702345][ T37] audit: type=1326 audit(1764102124.923:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.702501][ T37] audit: type=1326 audit(1764102124.923:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.702706][ T37] audit: type=1326 audit(1764102124.923:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 729.702881][ T37] audit: type=1326 audit(1764102124.923:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15627 comm="syz.3.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f37f749 code=0x7ffc0000 [ 730.190573][T15592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 730.190596][T15592] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 731.345963][ T5806] Bluetooth: hci2: command tx timeout [ 732.458873][ T1577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.496549][ T1577] bond0 (unregistering): Released all slaves [ 732.537934][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3340'. [ 733.238414][ T1577] bond1 (unregistering): Released all slaves [ 733.415708][ T5806] Bluetooth: hci2: command tx timeout [ 734.020464][ T1577] bond2 (unregistering): Released all slaves [ 734.851195][ T1577] bond3 (unregistering): Released all slaves [ 734.876192][T15644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3335'. [ 734.889476][T15524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.062608][T15524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.062895][ T1577] tipc: Left network mode [ 735.246002][T15592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 735.246025][T15592] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 735.806510][T15524] team0: Port device team_slave_0 added [ 735.969020][T15524] team0: Port device team_slave_1 added [ 735.971097][T15592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 735.971121][T15592] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 736.139497][T15592] ------------[ cut here ]------------ [ 736.139511][T15592] rtmutex deadlock detected [ 736.139618][T15592] WARNING: CPU: 0 PID: 15592 at kernel/locking/rtmutex.c:1674 rt_mutex_handle_deadlock+0x28/0xb0 [ 736.139660][T15592] Modules linked in: [ 736.139679][T15592] CPU: 0 UID: 0 PID: 15592 Comm: syz.1.3321 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 736.139702][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.139714][T15592] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 736.139736][T15592] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 69 0e c0 f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 a0 a2 91 4c 8d [ 736.139753][T15592] RSP: 0018:ffffc90005067950 EFLAGS: 00010246 [ 736.139771][T15592] RAX: 803b9f4b3c006900 RBX: ffffc900050679e0 RCX: 0000000000080000 [ 736.139786][T15592] RDX: ffffc90011173000 RSI: 00000000000701a5 RDI: 00000000000701a6 [ 736.139799][T15592] RBP: ffffc90005067b00 R08: 0000000000000000 R09: 0000000000000000 [ 736.139812][T15592] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff92000a0cf38 [ 736.139828][T15592] R13: ffffffff8ac2e0a9 R14: ffff888035854098 R15: dffffc0000000000 [ 736.139843][T15592] FS: 00007f82b96756c0(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 736.139859][T15592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.139872][T15592] CR2: 000056022f45d000 CR3: 0000000079740000 CR4: 00000000003526f0 [ 736.139889][T15592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.139901][T15592] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 736.139913][T15592] Call Trace: [ 736.139920][T15592] [ 736.139931][T15592] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 736.139956][T15592] rt_mutex_slowlock+0x692/0x6e0 [ 736.139981][T15592] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 736.140005][T15592] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 736.140027][T15592] ? __lock_acquire+0xab9/0xd20 [ 736.140065][T15592] ? nfc_rfkill_set_block+0x50/0x2e0 [ 736.140089][T15592] ? rt_mutex_slowunlock+0x493/0x8a0 [ 736.140121][T15592] ? nfc_rfkill_set_block+0x50/0x2e0 [ 736.140139][T15592] mutex_lock_nested+0x16a/0x1d0 [ 736.140164][T15592] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 736.140197][T15592] nfc_rfkill_set_block+0x50/0x2e0 [ 736.140219][T15592] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 736.140241][T15592] rfkill_set_block+0x1e5/0x450 [ 736.140274][T15592] rfkill_fop_write+0x44e/0x580 [ 736.140298][T15592] ? __pfx_rfkill_fop_write+0x10/0x10 [ 736.140320][T15592] ? rw_verify_area+0x25b/0x4e0 [ 736.140344][T15592] ? __lock_acquire+0xab9/0xd20 [ 736.140368][T15592] ? __pfx_rfkill_fop_write+0x10/0x10 [ 736.140390][T15592] vfs_write+0x287/0xb40 [ 736.140421][T15592] ? __pfx_vfs_write+0x10/0x10 [ 736.140445][T15592] ? __fget_files+0x2a/0x420 [ 736.140476][T15592] ? __fget_files+0x2a/0x420 [ 736.140499][T15592] ? __fget_files+0x3a6/0x420 [ 736.140523][T15592] ? __fget_files+0x2a/0x420 [ 736.140561][T15592] ksys_write+0x14b/0x260 [ 736.140588][T15592] ? __pfx_ksys_write+0x10/0x10 [ 736.140614][T15592] ? do_syscall_64+0xbe/0xfa0 [ 736.140646][T15592] do_syscall_64+0xfa/0xfa0 [ 736.140672][T15592] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.140699][T15592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.140718][T15592] ? clear_bhb_loop+0x60/0xb0 [ 736.140743][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.140762][T15592] RIP: 0033:0x7f82bb42f749 [ 736.140779][T15592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.140796][T15592] RSP: 002b:00007f82b9675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.140817][T15592] RAX: ffffffffffffffda RBX: 00007f82bb686090 RCX: 00007f82bb42f749 [ 736.140832][T15592] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 736.140844][T15592] RBP: 00007f82bb4b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 736.140856][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.140868][T15592] R13: 00007f82bb686128 R14: 00007f82bb686090 R15: 00007ffea52fc198 [ 736.140903][T15592] [ 736.140921][T15592] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 736.140936][T15592] CPU: 0 UID: 0 PID: 15592 Comm: syz.1.3321 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 736.140958][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.140970][T15592] Call Trace: [ 736.140977][T15592] [ 736.140985][T15592] dump_stack_lvl+0x99/0x250 [ 736.141018][T15592] ? __asan_memcpy+0x40/0x70 [ 736.141043][T15592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.141071][T15592] ? __pfx__printk+0x10/0x10 [ 736.141109][T15592] vpanic+0x237/0x6d0 [ 736.141128][T15592] ? __pfx_vpanic+0x10/0x10 [ 736.141159][T15592] panic+0xb9/0xc0 [ 736.141177][T15592] ? __pfx_panic+0x10/0x10 [ 736.141223][T15592] __warn+0x31b/0x4b0 [ 736.141241][T15592] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 736.141272][T15592] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 736.141296][T15592] report_bug+0x2be/0x4f0 [ 736.141325][T15592] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 736.141350][T15592] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 736.141372][T15592] ? rt_mutex_handle_deadlock+0x2a/0xb0 [ 736.141395][T15592] handle_bug+0x84/0x160 [ 736.141414][T15592] exc_invalid_op+0x1a/0x50 [ 736.141433][T15592] asm_exc_invalid_op+0x1a/0x20 [ 736.141451][T15592] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 736.141474][T15592] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 69 0e c0 f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 a0 a2 91 4c 8d [ 736.141489][T15592] RSP: 0018:ffffc90005067950 EFLAGS: 00010246 [ 736.141506][T15592] RAX: 803b9f4b3c006900 RBX: ffffc900050679e0 RCX: 0000000000080000 [ 736.141521][T15592] RDX: ffffc90011173000 RSI: 00000000000701a5 RDI: 00000000000701a6 [ 736.141535][T15592] RBP: ffffc90005067b00 R08: 0000000000000000 R09: 0000000000000000 [ 736.141547][T15592] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff92000a0cf38 [ 736.141562][T15592] R13: ffffffff8ac2e0a9 R14: ffff888035854098 R15: dffffc0000000000 [ 736.141580][T15592] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 736.141620][T15592] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 736.141640][T15592] rt_mutex_slowlock+0x692/0x6e0 [ 736.141665][T15592] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 736.141690][T15592] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 736.141711][T15592] ? __lock_acquire+0xab9/0xd20 [ 736.141750][T15592] ? nfc_rfkill_set_block+0x50/0x2e0 [ 736.141774][T15592] ? rt_mutex_slowunlock+0x493/0x8a0 [ 736.141806][T15592] ? nfc_rfkill_set_block+0x50/0x2e0 [ 736.141825][T15592] mutex_lock_nested+0x16a/0x1d0 [ 736.141851][T15592] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 736.141873][T15592] nfc_rfkill_set_block+0x50/0x2e0 [ 736.141893][T15592] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 736.141915][T15592] rfkill_set_block+0x1e5/0x450 [ 736.141948][T15592] rfkill_fop_write+0x44e/0x580 [ 736.141973][T15592] ? __pfx_rfkill_fop_write+0x10/0x10 [ 736.141998][T15592] ? rw_verify_area+0x25b/0x4e0 [ 736.142021][T15592] ? __lock_acquire+0xab9/0xd20 [ 736.142058][T15592] ? __pfx_rfkill_fop_write+0x10/0x10 [ 736.142081][T15592] vfs_write+0x287/0xb40 [ 736.142116][T15592] ? __pfx_vfs_write+0x10/0x10 [ 736.142144][T15592] ? __fget_files+0x2a/0x420 [ 736.142174][T15592] ? __fget_files+0x2a/0x420 [ 736.142206][T15592] ? __fget_files+0x3a6/0x420 [ 736.142232][T15592] ? __fget_files+0x2a/0x420 [ 736.142270][T15592] ksys_write+0x14b/0x260 [ 736.142299][T15592] ? __pfx_ksys_write+0x10/0x10 [ 736.142328][T15592] ? do_syscall_64+0xbe/0xfa0 [ 736.142360][T15592] do_syscall_64+0xfa/0xfa0 [ 736.142385][T15592] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.142414][T15592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.142433][T15592] ? clear_bhb_loop+0x60/0xb0 [ 736.142457][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.142476][T15592] RIP: 0033:0x7f82bb42f749 [ 736.142493][T15592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.142511][T15592] RSP: 002b:00007f82b9675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.142531][T15592] RAX: ffffffffffffffda RBX: 00007f82bb686090 RCX: 00007f82bb42f749 [ 736.142547][T15592] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 736.142560][T15592] RBP: 00007f82bb4b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 736.142571][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.142584][T15592] R13: 00007f82bb686128 R14: 00007f82bb686090 R15: 00007ffea52fc198 [ 736.142620][T15592] [ 736.142965][T15592] Kernel Offset: disabled